CVE-2019-9453

MediumCVSS 4.4/10Last modified Jun 17, 2026

Description

In the Android kernel in F2FS touch driver there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
n/a	Android	Android kernel

References

https://source.android.com/security/bulletin/pixel/2019-09-01Patch, Vendor Advisory
https://usn.ubuntu.com/4527-1/Third Party Advisory
https://source.android.com/security/bulletin/pixel/2019-09-01Patch, Vendor Advisory
https://usn.ubuntu.com/4527-1/Third Party Advisory

Timeline

Published: Sep 6, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-94546.7In the Android kernel in i2c driver there is a possible out of bounds write due to memory corruption. This could lead to local escalation of CVE-2019-94552.3In the Android kernel in the video driver there is a kernel pointer leak due to a WARN_ON statement. This could lead to local information di CVE-2019-94566.7In the Android kernel in Pixel C USB monitor driver there is a possible OOB write due to a missing bounds check. This could lead to local es CVE-2019-94587.0In the Android kernel in the video driver there is a use after free due to a race condition. This could lead to local escalation of privileg CVE-2019-94599.8In libttspico, there is a possible OOB write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additi CVE-2019-94616.5In the Android kernel in VPN routing there is a possible information disclosure. This could lead to remote information disclosure by an adja CVE-2019-94627.5In Bluetooth, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service with no a CVE-2019-94637.3In Platform, there is a possible bypass of user interaction requirements due to background app interception. This could lead to local escala CVE-2019-94645.5In various functions of RecentLocationApps.java, DevicePolicyManagerService.java, and RecognitionService.java, there is an incorrect warning CVE-2019-94655.5In the Titan M handling of cryptographic operations, there is a possible information disclosure due to an unusual root cause. This could lea CVE-2019-94676.7In the Bootloader, there is a possible kernel command injection due to missing command sanitization. This could lead to a local elevation of CVE-2019-94687.8In export_key_der of export_key.cpp, there is possible memory corruption due to a double free. This could lead to local escalation of privil