CVE-2019-2079
published 2019-09-27CVE-2019-2079: In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution…
PriorityP430medium6.5CVSS 3.1
AVNACLPRNUIRSUCHINAN
EPSS
0.58%
44.6th percentile
In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-115509210
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2018-15864 libxkbcommon: NULL pointer dereference in resolve_keysym resulting in a crash
bugzilla·2018-08-28·CVSS 5.5
CVE-2018-15864 [MEDIUM] CVE-2018-15864 libxkbcommon: NULL pointer dereference in resolve_keysym resulting in a crash
CVE-2018-15864 libxkbcommon: NULL pointer dereference in resolve_keysym resulting in a crash
Unchecked NULL pointer usage in resolve_keysym in xkbcomp/parser.y in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because a map access attempt can occur for a map that was never created.
Upstream patch:
https://github.com/xkbcommon/libxkbcommon/commit/a8ea7a1d3daa7bdcb877615ae0a252c189153bd2
References:
https://lists.freedesktop.org/archives/wayland-devel/2018-August/039243.html
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 7
Via RHSA-2019:2079 https://access.redhat.com/errata/RHSA-2019:2079
---
This bug is now closed. Further updates fo
Bugzilla
CVE-2018-15861 libxkbcommon: xkbcomp: NULL pointer dereference in ExprResolveLhs resulting in a crash
bugzilla·2018-08-28·CVSS 5.5
CVE-2018-15861 [MEDIUM] CVE-2018-15861 libxkbcommon: xkbcomp: NULL pointer dereference in ExprResolveLhs resulting in a crash
CVE-2018-15861 libxkbcommon: xkbcomp: NULL pointer dereference in ExprResolveLhs resulting in a crash
Unchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file that triggers an xkb_intern_atom failure.
Upstream patch:
https://github.com/xkbcommon/libxkbcommon/commit/38e1766bc6e20108948aec8a0b222a4bad0254e9
References:
https://lists.freedesktop.org/archives/wayland-devel/2018-August/039243.html
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 7
Via RHSA-2019:2079 https://access.redhat.com/errata/RHSA-2019:2079
---
This bug is now closed. Further updates for individual products wil
Bugzilla
CVE-2018-15856 libxkbcommon: Infinite loop when reaching EOL unexpectedly resulting in a crash
bugzilla·2018-08-28·CVSS 5.5
CVE-2018-15856 [MEDIUM] CVE-2018-15856 libxkbcommon: Infinite loop when reaching EOL unexpectedly resulting in a crash
CVE-2018-15856 libxkbcommon: Infinite loop when reaching EOL unexpectedly resulting in a crash
An infinite loop when reaching EOL unexpectedly in compose/parser.c (aka the keymap parser) in xkbcommon before 0.8.1 could be used by local attackers to cause a denial of service during parsing of crafted keymap files.
Upstream patch:
https://github.com/xkbcommon/libxkbcommon/commit/842e4351c2c97de6051cab6ce36b4a81e709a0e1
References:
https://lists.freedesktop.org/archives/wayland-devel/2018-August/039232.html
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 7
Via RHSA-2019:2079 https://access.redhat.com/errata/RHSA-2019:2079
---
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):
https://a
Bugzilla
CVE-2018-15854 libxkbcommon: NULL pointer dereference resulting in a crash
bugzilla·2018-08-28·CVSS 5.5
CVE-2018-15854 [MEDIUM] CVE-2018-15854 libxkbcommon: NULL pointer dereference resulting in a crash
CVE-2018-15854 libxkbcommon: NULL pointer dereference resulting in a crash
Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because geometry tokens were desupported incorrectly.
Upstream patch:
https://github.com/xkbcommon/libxkbcommon/commit/e3cacae7b1bfda0d839c280494f23284a1187adf
References:
https://lists.freedesktop.org/archives/wayland-devel/2018-August/039232.html
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 7
Via RHSA-2019:2079 https://access.redhat.com/errata/RHSA-2019:2079
---
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):
https://access
Bugzilla
CVE-2018-15863 libxkbcommon: xkbcomp: NULL pointer dereference in ResolveStateAndPredicate resulting in a crash
bugzilla·2018-08-28·CVSS 5.5
CVE-2018-15863 [MEDIUM] CVE-2018-15863 libxkbcommon: xkbcomp: NULL pointer dereference in ResolveStateAndPredicate resulting in a crash
CVE-2018-15863 libxkbcommon: xkbcomp: NULL pointer dereference in ResolveStateAndPredicate resulting in a crash
Unchecked NULL pointer usage in ResolveStateAndPredicate in xkbcomp/compat.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file with a no-op modmask expression.
Upstream patch:
https://github.com/xkbcommon/libxkbcommon/commit/96df3106d49438e442510c59acad306e94f3db4d
References:
https://lists.freedesktop.org/archives/wayland-devel/2018-August/039243.html
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 7
Via RHSA-2019:2079 https://access.redhat.com/errata/RHSA-2019:2079
---
This bug is now closed. Further updates for individual
Bugzilla
CVE-2018-15859 libxkbcommon: xkbcomp: NULL pointer dereference when parsing invalid atoms in ExprResolveLhs resulting in a crash
bugzilla·2018-08-28·CVSS 5.5
CVE-2018-15859 [MEDIUM] CVE-2018-15859 libxkbcommon: xkbcomp: NULL pointer dereference when parsing invalid atoms in ExprResolveLhs resulting in a crash
CVE-2018-15859 libxkbcommon: xkbcomp: NULL pointer dereference when parsing invalid atoms in ExprResolveLhs resulting in a crash
Unchecked NULL pointer usage when parsing invalid atoms in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because lookup failures are mishandled.
Upstream patch:
https://github.com/xkbcommon/libxkbcommon/commit/bb4909d2d8fa6b08155e449986a478101e2b2634
References:
https://lists.freedesktop.org/archives/wayland-devel/2018-August/039243.html
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 7
Via RHSA-2019:2079 https://access.redhat.com/errata/RHSA-2019:2079
---
This bug is no
Bugzilla
CVE-2018-15862 libxkbcommon: NULL pointer dereference in LookupModMask resulting in a crash
bugzilla·2018-08-28·CVSS 5.5
CVE-2018-15862 [MEDIUM] CVE-2018-15862 libxkbcommon: NULL pointer dereference in LookupModMask resulting in a crash
CVE-2018-15862 libxkbcommon: NULL pointer dereference in LookupModMask resulting in a crash
Unchecked NULL pointer usage in LookupModMask in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file with invalid virtual modifiers.
Upstream patch:
https://github.com/xkbcommon/libxkbcommon/commit/4e2ee9c3f6050d773f8bbe05bc0edb17f1ff8371
References:
https://lists.freedesktop.org/archives/wayland-devel/2018-August/039243.html
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 7
Via RHSA-2019:2079 https://access.redhat.com/errata/RHSA-2019:2079
---
This bug is now closed. Further updates for individual products will be reflected on the
2019-09-27
Published