CVE-2019-9370

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

In sonivox, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-133880046

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Sep 27, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-93716.5In libvpx, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no addCVE-2019-93726.5In libskia, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional execution CVE-2019-93735.5In JobStore, there is a mismatched serialization/deserialization for the "battery-not-low" job attribute. This could lead to a local denial CVE-2019-93756.4In hostapd, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System exCVE-2019-93765.5In Account of Account.java, there is a possible boot loop due to improper input validation. This could lead to local denial of service with CVE-2019-93773.3In FingerprintService, there is a possible bypass for operating system protections that isolate user profiles from each other due to a missiCVE-2019-93787.8In the Activity Manager service, there is a possible permission bypass due to incorrect permission check. This could lead to local escalatioCVE-2019-93796.5In libstagefright, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with nCVE-2019-93806.5In the settings UI, there is a possible spoofing vulnerability due to a missing permission check. This could lead to a user mistakenly changCVE-2019-93817.5In netd, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with no additionalCVE-2019-93828.8In libeffects, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additCVE-2019-93835.0In NFC server, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no
CVE-2019-9370: Medium severity, CVSS 6.5 | Vulnix