CVSS: 9.3EPSS: 0%CPEs: 6EXPL: 4CVE-2019-2107 – Android 7 - 9 VideoPlayer - 'ihevcd_parse_pps' Out-of-Bounds Write
https://notcve.org/view.php?id=CVE-2019-2107
In ihevcd_parse_pps of ihevcd_parse_headers.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. • https://www.exploit-db.com/exploits/47119 https://www.exploit-db.com/exploits/47157 https://github.com/infiniteLoopers/CVE-2019-2107 https://github.com/CrackerCat/CVE-2019-2107 http://packetstormsecurity.com/files/153628/Android-VideoPlayer-ihevcd_parse_pps-Out-Of-Bounds-Write.html http://seclists.org/fulldisclosure/2019/Jul/18 https://source.android.com/security/bulletin/2019-07-01 • CWE-787: Out-of-bounds Write •
CVSS: 9.3EPSS: 0%CPEs: 6EXPL: 0CVE-2019-2106
https://notcve.org/view.php?id=CVE-2019-2106
In ihevcd_sao_shift_ctb of ihevcd_sao.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. • https://source.android.com/security/bulletin/2019-07-01 • CWE-787: Out-of-bounds Write •
CVSS: 8.8EPSS: 0%CPEs: 6EXPL: 0CVE-2019-2105
https://notcve.org/view.php?id=CVE-2019-2105
In FileInputStream::Read of file_input_stream.cc, there is a possible memory corruption due to uninitialized data. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. • https://source.android.com/security/bulletin/2019-07-01 • CWE-908: Use of Uninitialized Resource •
CVSS: 7.1EPSS: 0%CPEs: 6EXPL: 0CVE-2018-9561
https://notcve.org/view.php?id=CVE-2018-9561
In llcp_util_parse_connect of llcp_util.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-111660010 En llcp_util_parse_connect of llcp_util.cc, hay una posible lectura fuera de límite debido a una falta de comprobación de límites. Esto podría conducir a la divulgación de información local sin necesidad de privilegios de ejecución adicionales. La interacción del usuario es necesaria para la explotación.Producto: Versiones de Android: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-111660010. • https://source.android.com/security/bulletin/2019-03-01 • CWE-125: Out-of-bounds Read •
CVSS: 9.3EPSS: 0%CPEs: 6EXPL: 0CVE-2019-2003
https://notcve.org/view.php?id=CVE-2019-2003
In addLinks of Linkify.java, there is a possible phishing vector due to an unusual root cause. This could lead to remote code execution or misdirection of clicks with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-116321860 En addLinks de Linkify.java, existe un posible vector de phishing debido a una causa raíz inusual. Esto podría provocar la ejecución remota de código o una dirección errónea de clics sin necesidad de privilegios de ejecución adicionales. La interacción del usuario es necesaria para la explotación. • https://source.android.com/security/bulletin/2019-03-01 • CWE-264: Permissions, Privileges, and Access Controls •