Google Android vulnerabilities

CVE-2018-9561 [MEDIUM] CWE-125 CVE-2018-9561: In llcp_util_parse_connect of llcp_util.cc, there is a possible out-of-bound read due to a missing b In llcp_util_parse_connect of llcp_util.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9A

CVE-2018-9564 [MEDIUM] CWE-125 CVE-2018-9564: In llcp_util_parse_link_params of llcp_util.cc, there is a possible out-of-bound read due to a missi In llcp_util_parse_link_params of llcp_util.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Androi

CVE-2020-0169 [MEDIUM] CWE-20 CVE-2020-0169: In RTTTL_Event of eas_rtttl.c, there is possible resource exhaustion due to a missing bounds check. In RTTTL_Event of eas_rtttl.c, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-123700383

CVE-2020-0173 [MEDIUM] CWE-20 CVE-2020-0173: In Parse_lins of eas_mdls.c, there is possible resource exhaustion due to improper input validation. In Parse_lins of eas_mdls.c, there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-127313764

CVE-2020-0170 [MEDIUM] CWE-20 CVE-2020-0170: In IMY_Event of eas_imelody.c, there is possible resource exhaustion due to a missing bounds check. In IMY_Event of eas_imelody.c, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-127310810

CVE-2019-9333 [MEDIUM] CWE-125 CVE-2019-9333: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-109753657

CVE-2019-2058 [MEDIUM] CWE-125 CVE-2019-2058: In libAACdec, there is a possible out of bounds read. This could lead to remote information disclosu In libAACdec, there is a possible out of bounds read. This could lead to remote information disclosure, with no additional execution privileges needed. User interaction is needed for exploitation.Product: Android Versions: Android-10 Android ID: A-136089102

CVE-2019-9294 [MEDIUM] CWE-125 CVE-2019-9294: In libstagefright, there is a possible out of bounds read due to a missing bounds check. This could In libstagefright, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111764444

CVE-2019-9353 [MEDIUM] CWE-125 CVE-2019-9353: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-123024201

CVE-2019-9252 [MEDIUM] CWE-125 CVE-2019-9252: In libavc there is a possible out of bounds read due to uninitialized data. This could lead to remot In libavc there is a possible out of bounds read due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-73339042

CVE-2019-2162 [MEDIUM] CWE-125 CVE-2019-2162: In libxaac there is a possible out of bounds read due to a missing bounds check. This could lead to In libxaac there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112713720

CVE-2019-9412 [MEDIUM] CWE-125 CVE-2019-9412: In libSBRdec there is a possible out of bounds read due to incorrect bounds check. This could lead t In libSBRdec there is a possible out of bounds read due to incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112006096

CVE-2019-9403 [MEDIUM] CWE-125 CVE-2019-9403: In cn-cbor, there is a possible out of bounds read due to improper casting. This could lead to remot In cn-cbor, there is a possible out of bounds read due to improper casting. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113512324

CVE-2019-9293 [MEDIUM] CWE-125 CVE-2019-9293: In libstagefright, there is a possible out of bounds read due to a missing bounds check. This could In libstagefright, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-117661116

CVE-2019-9362 [MEDIUM] CWE-125 CVE-2019-9362: In libSACdec, there is a possible out of bounds read due to a missing bounds check. This could lead In libSACdec, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120426980

CVE-2019-9385 [MEDIUM] CWE-125 CVE-2019-9385: In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120452956

CVE-2019-9370 [MEDIUM] CWE-125 CVE-2019-9370: In sonivox, there is a possible out of bounds read due to an incorrect bounds check. This could lead In sonivox, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-133880046

CVE-2019-9282 [MEDIUM] CWE-125 CVE-2019-9282: In skia, there is a possible out of bounds read due to a missing bounds check. This could lead to re In skia, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113211371

CVE-2019-9366 [MEDIUM] CWE-125 CVE-2019-9366: In libSBRdec there is a possible out of bounds read due to a missing bounds check. This could lead t In libSBRdec there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112052062

CVE-2019-9237 [MEDIUM] CWE-125 CVE-2019-9237: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-121325979