ByteOS Network

Vulnerability Details :

CVE-2019-9232

Assigner Org ID-baff130e-b8d5-4e15-b3d3-c3cf5d5545c6

Published At-27 Sep, 2019 | 18:05

Updated At-04 Aug, 2024 | 21:38

In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-122675483

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:google_android

Assigner Org ID:baff130e-b8d5-4e15-b3d3-c3cf5d5545c6

Published At:27 Sep, 2019 | 18:05

Updated At:04 Aug, 2024 | 21:38

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

Android

Versions

Affected

Android-10

Problem Types

Type	CWE ID	Description
text	N/A	Information disclosure

Type: text

CWE ID: N/A

Description: Information disclosure

References

Hyperlink	Resource
https://source.android.com/security/bulletin/android-10	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2019/10/25/17	mailing-list x_refsource_MLIST
http://www.openwall.com/lists/oss-security/2019/10/27/1	mailing-list x_refsource_MLIST
http://www.openwall.com/lists/oss-security/2019/11/07/1	mailing-list x_refsource_MLIST
https://usn.ubuntu.com/4199-1/	vendor-advisory x_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2019/11/msg00030.html	mailing-list x_refsource_MLIST
https://seclists.org/bugtraq/2019/Nov/43	mailing-list x_refsource_BUGTRAQ
https://www.debian.org/security/2019/dsa-4578	vendor-advisory x_refsource_DEBIAN
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U2IIA3RSYABBUCFIHXIRVUT5CTJVWWZ6/	vendor-advisory x_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DQSTK442ATWJOR4TU3MR6C3N5A6NDFFN/	vendor-advisory x_refsource_FEDORA
http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00049.html	vendor-advisory x_refsource_SUSE
https://security.gentoo.org/glsa/202003-59	vendor-advisory x_refsource_GENTOO
https://usn.ubuntu.com/4199-2/	vendor-advisory x_refsource_UBUNTU

Hyperlink: https://source.android.com/security/bulletin/android-10

Resource:

x_refsource_MISC

Hyperlink: http://www.openwall.com/lists/oss-security/2019/10/25/17

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://www.openwall.com/lists/oss-security/2019/10/27/1

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://www.openwall.com/lists/oss-security/2019/11/07/1

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://usn.ubuntu.com/4199-1/

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: https://lists.debian.org/debian-lts-announce/2019/11/msg00030.html

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://seclists.org/bugtraq/2019/Nov/43

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: https://www.debian.org/security/2019/dsa-4578

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U2IIA3RSYABBUCFIHXIRVUT5CTJVWWZ6/

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DQSTK442ATWJOR4TU3MR6C3N5A6NDFFN/

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00049.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: https://security.gentoo.org/glsa/202003-59

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: https://usn.ubuntu.com/4199-2/

Resource:

vendor-advisory

x_refsource_UBUNTU

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://source.android.com/security/bulletin/android-10	x_refsource_MISC x_transferred
http://www.openwall.com/lists/oss-security/2019/10/25/17	mailing-list x_refsource_MLIST x_transferred
http://www.openwall.com/lists/oss-security/2019/10/27/1	mailing-list x_refsource_MLIST x_transferred
http://www.openwall.com/lists/oss-security/2019/11/07/1	mailing-list x_refsource_MLIST x_transferred
https://usn.ubuntu.com/4199-1/	vendor-advisory x_refsource_UBUNTU x_transferred
https://lists.debian.org/debian-lts-announce/2019/11/msg00030.html	mailing-list x_refsource_MLIST x_transferred
https://seclists.org/bugtraq/2019/Nov/43	mailing-list x_refsource_BUGTRAQ x_transferred
https://www.debian.org/security/2019/dsa-4578	vendor-advisory x_refsource_DEBIAN x_transferred
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U2IIA3RSYABBUCFIHXIRVUT5CTJVWWZ6/	vendor-advisory x_refsource_FEDORA x_transferred
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DQSTK442ATWJOR4TU3MR6C3N5A6NDFFN/	vendor-advisory x_refsource_FEDORA x_transferred
http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00049.html	vendor-advisory x_refsource_SUSE x_transferred
https://security.gentoo.org/glsa/202003-59	vendor-advisory x_refsource_GENTOO x_transferred
https://usn.ubuntu.com/4199-2/	vendor-advisory x_refsource_UBUNTU x_transferred

Hyperlink: https://source.android.com/security/bulletin/android-10

Resource:

x_refsource_MISC

x_transferred

Hyperlink: http://www.openwall.com/lists/oss-security/2019/10/25/17

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://www.openwall.com/lists/oss-security/2019/10/27/1

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://www.openwall.com/lists/oss-security/2019/11/07/1

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://usn.ubuntu.com/4199-1/

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: https://lists.debian.org/debian-lts-announce/2019/11/msg00030.html

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://seclists.org/bugtraq/2019/Nov/43

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

Hyperlink: https://www.debian.org/security/2019/dsa-4578

Resource:

vendor-advisory

x_refsource_DEBIAN

x_transferred

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U2IIA3RSYABBUCFIHXIRVUT5CTJVWWZ6/

Resource:

vendor-advisory

x_refsource_FEDORA

x_transferred

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DQSTK442ATWJOR4TU3MR6C3N5A6NDFFN/

Resource:

vendor-advisory

x_refsource_FEDORA

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00049.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: https://security.gentoo.org/glsa/202003-59

Resource:

vendor-advisory

x_refsource_GENTOO

x_transferred

Hyperlink: https://usn.ubuntu.com/4199-2/

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:security@android.com

Published At:27 Sep, 2019 | 19:15

Updated At:07 Nov, 2023 | 03:13

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N

Type: Primary

Version: 3.1

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Type: Primary

Version: 2.0

Base score: 5.0

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:N/C:P/I:N/A:N

CPE Matches

Google LLC

>>android>>10.0

cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*

Canonical Ltd.

>>ubuntu_linux>>14.04

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*

Canonical Ltd.

>>ubuntu_linux>>16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*

Canonical Ltd.

>>ubuntu_linux>>18.04

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

Canonical Ltd.

>>ubuntu_linux>>19.04

cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*

openSUSE

>>leap>>15.1

cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*

Fedora Project

>>fedora>>30

cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*

Fedora Project

>>fedora>>31

cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>8.0

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>9.0

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>10.0

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-125	Primary	nvd@nist.gov

CWE ID: CWE-125

Type: Primary

Source: nvd@nist.gov