Vulnerabilities (CVE)

Filtered by CWE-909
Total 89 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-0730 1 Google 1 Android 2019-10-03 4.3 MEDIUM 5.5 MEDIUM
A denial of service vulnerability in the Android media framework (h264 decoder). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36279112.
CVE-2019-9314 1 Google 1 Android 2019-10-02 4.3 MEDIUM 6.5 MEDIUM
In libavc, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112329563
CVE-2019-9315 1 Google 1 Android 2019-10-02 4.3 MEDIUM 6.5 MEDIUM
In libhevc, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112326216
CVE-2019-9247 1 Google 1 Android 2019-10-02 4.3 MEDIUM 6.5 MEDIUM
In AAC Codec, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120426166
CVE-2019-9316 1 Google 1 Android 2019-10-01 4.3 MEDIUM 6.5 MEDIUM
In libstagefright, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112052432
CVE-2019-9318 1 Google 1 Android 2019-10-01 4.3 MEDIUM 6.5 MEDIUM
In libhevc, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111764725
CVE-2019-9321 1 Google 1 Android 2019-10-01 4.3 MEDIUM 6.5 MEDIUM
In libavc, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111208713
CVE-2019-9319 1 Google 1 Android 2019-09-30 4.3 MEDIUM 6.5 MEDIUM
In libavc, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111762100
CVE-2019-9317 1 Google 1 Android 2019-09-30 4.3 MEDIUM 6.5 MEDIUM
In libstagefright, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112052258