CVE-2019-9464

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In various functions of RecentLocationApps.java, DevicePolicyManagerService.java, and RecognitionService.java, there is an incorrect warning indicating an app accessed the user's location. This could dissolve the trust in the platform's permission system, with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141028068

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-732

Affected software

No affected versions have been published.

Timeline

Published
Dec 6, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-94655.5In the Titan M handling of cryptographic operations, there is a possible information disclosure due to an unusual root cause. This could leaCVE-2019-94676.7In the Bootloader, there is a possible kernel command injection due to missing command sanitization. This could lead to a local elevation ofCVE-2019-94687.8In export_key_der of export_key.cpp, there is possible memory corruption due to a double free. This could lead to local escalation of privilCVE-2019-94697.8In km_compute_shared_hmac of km4.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalCVE-2019-94706.7In dma_sblk_start of abc-pcie.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation CVE-2019-94716.7In set_outbound_iatu of abc-pcie.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatiCVE-2019-94725.5In DCRYPTO_equals of compare.c, there is a possible timing attack due to improperly used crypto. This could lead to local information discloCVE-2019-94737.5In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with noCVE-2019-94747.5In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with noCVE-2019-94755.5In /proc/net of the kernel filesystem, there is a possible information leak due to a permissions bypass. This could lead to local informatioCVE-2019-94825.3In MISP 2.4.102, an authenticated user can view sightings that they should not be eligible for. Exploiting this requires access to the eventCVE-2019-94839.1Amazon Ring Doorbell before 3.4.7 mishandles encryption, which allows attackers to obtain audio and video data, or insert spoofed video that
CVE-2019-9464: Medium severity, CVSS 5.5 | Vulnix