CVE-2019-9469

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In km_compute_shared_hmac of km4.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-130246677

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Jan 6, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-94706.7In dma_sblk_start of abc-pcie.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation CVE-2019-94716.7In set_outbound_iatu of abc-pcie.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati CVE-2019-94725.5In DCRYPTO_equals of compare.c, there is a possible timing attack due to improperly used crypto. This could lead to local information disclo CVE-2019-94737.5In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no CVE-2019-94747.5In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no CVE-2019-94755.5In /proc/net of the kernel filesystem, there is a possible information leak due to a permissions bypass. This could lead to local informatio CVE-2019-94825.3In MISP 2.4.102, an authenticated user can view sightings that they should not be eligible for. Exploiting this requires access to the event CVE-2019-94839.1Amazon Ring Doorbell before 3.4.7 mishandles encryption, which allows attackers to obtain audio and video data, or insert spoofed video that CVE-2019-94847.5The Glen Dimplex Deutschland GmbH implementation of the Carel pCOWeb configuration tool allows remote attackers to obtain access via an HTTP CVE-2019-94859.8An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has In CVE-2019-94868.8STRATO HiDrive Desktop Client 5.0.1.0 for Windows suffers from a SYSTEM privilege escalation vulnerability through the HiDriveMaintenanceSer CVE-2019-94884.9Trend Micro Deep Security Manager (10.x, 11.x) and Vulnerability Protection (2.0) are vulnerable to a XML External Entity Attack. However, f