CVE-2019-9420

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

In libhevc, there is a possible out of bounds read due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111272481

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125 CWE-190

Affected software

No affected versions have been published.

Timeline

Published: Sep 27, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-94215.0In libandroidfw, there is a possible OOB read due to an integer overflow. This could lead to local information disclosure with no additional CVE-2019-94227.5In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no CVE-2019-94237.8In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation CVE-2019-94247.5In the Screen Lock, there is a possible information disclosure due to an unusual root cause. In certain circumstances, the setting to hide t CVE-2019-94257.5In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no addi CVE-2019-94266.7In the Android kernel in Bluetooth there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio CVE-2019-94275.5In Bluetooth, there is a possible information disclosure due to a use after free. This could lead to local information disclosure with no ad CVE-2019-94286.5In the Framework, it is possible to set up BROWSEABLE intents to take over certain URLs. This could lead to remote information disclosure of CVE-2019-94297.8In profman, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with no addit CVE-2019-94307.5In Bluetooth, there is a possible null pointer dereference due to a missing null check. This could lead to remote denial of service with no CVE-2019-94314.9In Bluetooth, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with heap inf CVE-2019-94327.5In Bluetooth, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure in t