CVE-2019-9463

HighCVSS 7.3/10Last modified Jun 17, 2026

Description

In Platform, there is a possible bypass of user interaction requirements due to background app interception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113584607

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Sep 27, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-94645.5In various functions of RecentLocationApps.java, DevicePolicyManagerService.java, and RecognitionService.java, there is an incorrect warningCVE-2019-94655.5In the Titan M handling of cryptographic operations, there is a possible information disclosure due to an unusual root cause. This could leaCVE-2019-94676.7In the Bootloader, there is a possible kernel command injection due to missing command sanitization. This could lead to a local elevation ofCVE-2019-94687.8In export_key_der of export_key.cpp, there is possible memory corruption due to a double free. This could lead to local escalation of privilCVE-2019-94697.8In km_compute_shared_hmac of km4.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalCVE-2019-94706.7In dma_sblk_start of abc-pcie.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation CVE-2019-94716.7In set_outbound_iatu of abc-pcie.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatiCVE-2019-94725.5In DCRYPTO_equals of compare.c, there is a possible timing attack due to improperly used crypto. This could lead to local information discloCVE-2019-94737.5In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with noCVE-2019-94747.5In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with noCVE-2019-94755.5In /proc/net of the kernel filesystem, there is a possible information leak due to a permissions bypass. This could lead to local informatioCVE-2019-94825.3In MISP 2.4.102, an authenticated user can view sightings that they should not be eligible for. Exploiting this requires access to the event
CVE-2019-9463: High severity, CVSS 7.3 | Vulnix