deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-1592
Published: 2019-12-05
Description: A local code execution issue exists in Apache Struts2 when processing malformed XSLT files, which could let a malicious user upload and execute arbitrary files.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://www.openwall.com/lists/oss-security/2012/03/28/12; https://access.redhat.com/security/cve/cve-2012-1592; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1592
CVE: CVE-2019-19616
Published: 2019-12-06
Description: An Insecure Direct Object Reference (IDOR) vulnerability in the Xtivia Web Time and Expense (WebTE) interface used for Microsoft Dynamics NAV before 2017 allows an attacker to download arbitrary files by specifying arbitrary values for the recId and filename parameters of the /Home/GetAttachment function.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: http://www.nolanbkennedy.com/post/insecure-direct-object-reference-idor-in-xtivia-web-time-and-expense-webte; http://www.nolanbkennedy.com/post/insecure-direct-object-reference-idor-in-xtivia-web-time-and-expense-webte
CVE: CVE-2019-19617
Published: 2019-12-06
Description: phpMyAdmin before 4.9.2 does not escape certain Git information, related to libraries/classes/Display/GitRevision.php and libraries/classes/Footer.php.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/phpmyadmin/phpmyadmin/commit/1119de642b136d20e810bb20f545069a01dd7cc9; https://github.com/phpmyadmin/phpmyadmin/compare/RELEASE_4_9_1...RELEASE_4_9_2; https://lists.debian.org/debian-lts-announce/2019/12/msg00006.html
CVE: CVE-2019-19619
Published: 2019-12-06
Description: domain/section/markdown/markdown.go in Documize before 3.5.1 mishandles untrusted Markdown content. This was addressed by adding the bluemonday HTML sanitizer to defend against XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/documize/community/commit/a4384210d4d0d6b18e6fdb7e155de96d4a1cf9f3; https://github.com/documize/community/compare/v3.5.0...v3.5.1; https://github.com/documize/community/releases/tag/v3.5.1
CVE: CVE-2019-19624
Published: 2019-12-06
Description: An out-of-bounds read was discovered in OpenCV before 4.1.1. Specifically, variable coarsest_scale is assumed to be greater than or equal to finest_scale within the calc()/ocl_calc() functions in dis_flow.cpp. However, this is not true when dealing with small images, leading to an out-of-bounds read of the heap-allocated arrays Ux and Uy.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/opencv/opencv/commit/d1615ba11a93062b1429fce9f0f638d1572d3418; https://github.com/opencv/opencv/issues/14554; https://access.redhat.com/security/cve/cve-2019-19624
CVE: CVE-2012-1615
Published: 2019-12-06
Description: A Privilege Escalation vulnerability exits in Fedoraproject Sectool due to an incorrect DBus file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-April/076873.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081113.html; http://www.openwall.com/lists/oss-security/2012/04/04/2
CVE: CVE-2019-11554
Published: 2019-12-06
Description: The Audible application through 2.34.0 for Android has Missing SSL Certificate Validation for Adobe SDKs, allowing MITM attackers to cause a denial of service.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://pankajupadhyay.in/2019/12/06/audible-and-a-curious-case-of-insecure-by-default-in-adobe-sdks/; https://pankajupadhyay.in/2019/12/06/audible-and-a-curious-case-of-insecure-by-default-in-adobe-sdks/
CVE: CVE-2019-19333
Published: 2019-12-06
Description: In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG files with a leaf of type "bits". An application that uses libyang to parse untrusted YANG files may be vulnerable to this flaw, which would allow an attacker to cause a denial of service or possibly gain code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://access.redhat.com/errata/RHSA-2019:4360; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19333; https://github.com/CESNET/libyang/commit/f6d684ade99dd37b21babaa8a856f64faa1e2e0d
CVE: CVE-2019-19334
Published: 2019-12-06
Description: In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG files with a leaf of type "identityref". An application that uses libyang to parse untrusted YANG files may be vulnerable to this flaw, which would allow an attacker to cause a denial of service or possibly gain code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://access.redhat.com/errata/RHSA-2019:4360; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19334; https://github.com/CESNET/libyang/commit/6980afae2ff9fcd6d67508b0a3f694d75fd059d6
CVE: CVE-2019-19551
Published: 2019-12-06
Description: In userman 13.0.76.43 through 15.0.20 in Sangoma FreePBX, XSS exists in the User Management screen of the Administrator web site. An attacker with access to the User Control Panel application can submit malicious values in some of the time/date formatting and time-zone fields. These fields are not being properly sanitized. If this is done and a user (such as an admin) visits the User Management screen and views that user's profile, the XSS payload will render and execute in the context of the victim user's account.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wiki.freepbx.org/display/FOP/2019-12-03+Multiple+XSS+Vulnerabilities; https://wiki.freepbx.org/display/FOP/2019-12-03+Multiple+XSS+Vulnerabilities
CVE: CVE-2019-19552
Published: 2019-12-06
Description: In userman 13.0.76.43 through 15.0.20 in Sangoma FreePBX, XSS exists in the user management screen of the Administrator web site, i.e., the/admin/config.php?display=userman URI. An attacker with sufficient privileges can edit the Display Name of a user and embed malicious XSS code. When another user (such as an admin) visits the main User Management screen, the XSS payload will render and execute in the context of the victim user's account.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wiki.freepbx.org/display/FOP/2019-12-03+Multiple+XSS+Vulnerabilities; https://wiki.freepbx.org/display/FOP/2019-12-03+Multiple+XSS+Vulnerabilities
CVE: CVE-2019-19620
Published: 2019-12-06
Description: In SecureWorks Red Cloak Windows Agent before 2.0.7.9, a local user can bypass the generation of telemetry alerts by removing NT AUTHORITY\SYSTEM permissions from a file. This is limited in scope to the collection of process-execution telemetry, for executions against specific files where the SYSTEM user was denied access to the source file.
CVSS Score: 3.3 (LOW)
CWE: CWE-281
References: https://medium.com/%40CowbellSteve/secureworks-red-cloak-local-bypass-bfaed2be407e; https://www.secureworks.com/resources/ds-aetd-red-cloak-data-sheet; https://medium.com/%40CowbellSteve/secureworks-red-cloak-local-bypass-bfaed2be407e
CVE: CVE-2019-19625
Published: 2019-12-06
Description: SROS 2 0.8.1 (which provides the tools that generate and distribute keys for Robot Operating System 2 and uses the underlying security plugins of DDS from ROS 2) leaks node information due to a leaky default configuration as indicated in the policy/defaults/dds/governance.xml document.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/aliasrobotics/RVD/issues/922; https://github.com/ros2/sros2/pull/171; https://github.com/aliasrobotics/RVD/issues/922
CVE: CVE-2019-19627
Published: 2019-12-06
Description: SROS 2 0.8.1 (after CVE-2019-19625 is mitigated) leaks ROS 2 node-related information regardless of the rtps_protection_kind configuration. (SROS2 provides the tools to generate and distribute keys for Robot Operating System 2 and uses the underlying security plugins of DDS from ROS 2.)
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://asciinema.org/a/yuGkBlaPC33wqL4qABRlgxBkd; https://github.com/aliasrobotics/RVD/issues/922; https://github.com/ros-swg/turtlebot3_demo
CVE: CVE-2019-5544
Published: 2019-12-06
Description: OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: http://www.openwall.com/lists/oss-security/2019/12/10/2; http://www.openwall.com/lists/oss-security/2019/12/11/2; http://www.vmware.com/security/advisories/VMSA-2019-0022.html
CVE: CVE-2012-2092
Published: 2019-12-06
Description: A Security Bypass vulnerability exists in Ubuntu Cobbler before 2,2,2 in the cobbler-ubuntu-import script due to an error when verifying the GPG signature.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-347
References: http://www.openwall.com/lists/oss-security/2012/04/10/14; http://www.securityfocus.com/bid/52971; https://exchange.xforce.ibmcloud.com/vulnerabilities/74789
CVE: CVE-2018-7282
Published: 2019-12-06
Description: The username parameter of the TITool PrintMonitor solution during the login request is vulnerable to and/or time-based blind SQLi.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://print.com; http://ti-tool.com; https://fenceposterror.github.io/cve-2018-7282.txt
CVE: CVE-2019-12733
Published: 2019-12-06
Description: SiteVision 4 allows Remote Code Execution.
CVSS Score: 8.8 (HIGH)
References: http://packetstormsecurity.com/files/155585/SiteVision-4.x-5.x-Remote-Code-Execution.html; http://seclists.org/fulldisclosure/2019/Dec/12; http://seclists.org/fulldisclosure/2019/Dec/13
CVE: CVE-2019-12734
Published: 2019-12-06
Description: SiteVision 4 has Incorrect Access Control.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: http://packetstormsecurity.com/files/155584/SiteVision-4.x-5.x-Insufficient-Module-Access-Control.html; http://seclists.org/fulldisclosure/2019/Dec/12; http://seclists.org/fulldisclosure/2019/Dec/13
CVE: CVE-2012-2130
Published: 2019-12-06
Description: A Security Bypass vulnerability exists in PolarSSL 0.99pre4 through 1.1.1 due to a weak encryption error when generating Diffie-Hellman values and RSA keys.
CVSS Score: 7.4 (HIGH)
CWE: CWE-326
References: http://security.gentoo.org/glsa/glsa-201310-10.xml; http://www.securityfocus.com/bid/53610; https://bugs.gentoo.org/show_bug.cgi?id=CVE-2012-2130
CVE: CVE-2012-2148
Published: 2019-12-06
Description: An issue exists in the property replacements feature in any descriptor in JBoxx AS 7.1.1 ignores java security policies
CVSS Score: 3.3 (LOW)
CWE: CWE-269
References: https://access.redhat.com/security/cve/cve-2012-2148; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-2148; https://security-tracker.debian.org/tracker/CVE-2012-2148
CVE: CVE-2019-16670
Published: 2019-12-06
Description: An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. The Authentication mechanism has no brute-force prevention.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-307
References: https://cert.vde.com/en-us/advisories; https://cert.vde.com/en-us/advisories/vde-2019-018; https://mdcop.weidmueller.com/mediadelivery/asset/900_102694
CVE: CVE-2019-16671
Published: 2019-12-06
Description: An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Remote authenticated users can crash a device with a special packet because of Uncontrolled Resource Consumption.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://cert.vde.com/en-us/advisories; https://cert.vde.com/en-us/advisories/vde-2019-018; https://mdcop.weidmueller.com/mediadelivery/asset/900_102694
CVE: CVE-2019-16672
Published: 2019-12-06
Description: An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Sensitive Credentials data is transmitted in cleartext.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-319, CWE-522
References: https://cert.vde.com/en-us/advisories; https://cert.vde.com/en-us/advisories/vde-2019-018; https://mdcop.weidmueller.com/mediadelivery/asset/900_102694
CVE: CVE-2019-16673
Published: 2019-12-06
Description: An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Passwords are stored in cleartext and can be read by anyone with access to the device.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522
References: https://cert.vde.com/en-us/advisories; https://cert.vde.com/en-us/advisories/vde-2019-018; https://mdcop.weidmueller.com/mediadelivery/asset/900_102694
CVE: CVE-2019-16674
Published: 2019-12-06
Description: An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Authentication Information used in a cookie is predictable and can lead to admin password compromise when captured on the network.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-330
References: https://cert.vde.com/en-us/advisories; https://cert.vde.com/en-us/advisories/vde-2019-018; https://mdcop.weidmueller.com/mediadelivery/asset/900_102694
CVE: CVE-2019-18671
Published: 2019-12-06
Description: Insufficient checks in the USB packet handling of the ShapeShift KeepKey hardware wallet before firmware 6.2.2 allow out-of-bounds writes in the .bss segment via crafted messages. The vulnerability could allow code execution or other forms of impact. It can be triggered by unauthenticated attackers and the interface is reachable via WebUSB.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://blog.inhq.net/posts/keepkey-CVE-2019-18671/; https://github.com/keepkey/keepkey-firmware/commit/b222c66cdd7c3203d917c80ba615082d309d80c3; https://medium.com/shapeshift-stories/keepkey-release-notes-v-6f7d2ec78065
CVE: CVE-2019-18672
Published: 2019-12-06
Description: Insufficient checks in the finite state machine of the ShapeShift KeepKey hardware wallet before firmware 6.2.2 allow a partial reset of cryptographic secrets to known values via crafted messages. Notably, this breaks the security of U2F for new server registrations and invalidates existing registrations. This vulnerability can be exploited by unauthenticated attackers and the interface is reachable via WebUSB.
CVSS Score: 7.5 (HIGH)
CWE: CWE-354
References: https://blog.inhq.net/posts/keepkey-CVE-2019-18672/; https://github.com/keepkey/keepkey-firmware/commit/769714fcb569e7a4faff9530a2d9ac1f9d6e5680; https://medium.com/shapeshift-stories/keepkey-release-notes-v-6f7d2ec78065
CVE: CVE-2019-1551
Published: 2019-12-06
Description: There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH512 are considered just feasible. However, for an attack the target would have to re-use the DH512 private key, which is not recommended anyway. Also applications directly using the low level API BN_mod_exp may be affected if they use BN_FLG_CONSTTIME. Fixed in OpenSSL 1.1.1e (Affected 1.1.1-1.1.1d). Fixed in OpenSSL 1.0.2u (Affected 1.0.2-1.0.2t).
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00030.html; http://packetstormsecurity.com/files/155754/Slackware-Security-Advisory-openssl-Updates.html; https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=419102400a2811582a7a3d4a4e317d72e5ce0a8f
CVE: CVE-2019-16771
Published: 2019-12-06
Description: Versions of Armeria 0.85.0 through and including 0.96.0 are vulnerable to HTTP response splitting, which allows remote attackers to inject arbitrary HTTP headers via CRLF sequences when unsanitized data is used to populate the headers of an HTTP response. This vulnerability has been patched in 0.97.0. Potential impacts of this vulnerability include cross-user defacement, cache poisoning, Cross-site scripting (XSS), and page hijacking.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-113, CWE-74
References: https://github.com/line/armeria/commit/b597f7a865a527a84ee3d6937075cfbb4470ed20; https://github.com/line/armeria/security/advisories/GHSA-35fr-h7jr-hh86; https://github.com/line/armeria/commit/b597f7a865a527a84ee3d6937075cfbb4470ed20
CVE: CVE-2019-11293
Published: 2019-12-06
Description: Cloud Foundry UAA Release, versions prior to v74.10.0, when set to logging level DEBUG, logs client_secret credentials when sent as a query parameter. A remote authenticated malicious user could gain access to user credentials via the uaa.log file if authentication is provided via query parameters.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://www.cloudfoundry.org/blog/cve-2019-11293; https://www.cloudfoundry.org/blog/cve-2019-11293
CVE: CVE-2019-18575
Published: 2019-12-06
Description: Dell Command Configure versions prior to 4.2.1 contain an uncontrolled search path vulnerability. A locally authenticated malicious user could exploit this vulnerability by creating a symlink to a target file, allowing the attacker to overwrite or corrupt a specified file on the system.
CVSS Score: 7.1 (HIGH)
CWE: CWE-427, CWE-59, CWE-427
References: https://www.dell.com/support/article/SLN319715; https://www.dell.com/support/article/SLN319715
CVE: CVE-2019-10769
Published: 2019-12-06
Description: safer-eval is a npm package to sandbox the he evaluation of code used within the eval function. Affected versions of this package are vulnerable to Arbitrary Code Execution via generating a RangeError.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/commenthol/safer-eval/security/advisories/GHSA-v63x-xc9j-hhvq; https://snyk.io/vuln/SNYK-JS-SAFEREVAL-534901; https://github.com/commenthol/safer-eval/security/advisories/GHSA-v63x-xc9j-hhvq
CVE: CVE-2019-2217
Published: 2019-12-06
Description: In setCpuVulkanInUse of GpuStats.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141003796
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-787
References: https://source.android.com/security/bulletin/2019-12-01; https://source.android.com/security/bulletin/2019-12-01
CVE: CVE-2019-2218
Published: 2019-12-06
Description: In createSessionInternal of PackageInstallerService.java, there is a possible improper permission grant due to a missing permission check. This could lead to local escalation of privilege by installing malicious packages with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0, Android-8.1, Android-9, and Android-10 Android ID: A-141169173
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://source.android.com/security/bulletin/2020-01-01; https://source.android.com/security/bulletin/2020-01-01
CVE: CVE-2019-2219
Published: 2019-12-06
Description: In several functions of NotificationManagerService.java and related files, there is a possible way to record audio from the background without notification to the user due to a permission bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-119041698
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362
References: https://source.android.com/security/bulletin/2021-05-01; https://source.android.com/security/bulletin/2021-05-01
CVE: CVE-2019-2220
Published: 2019-12-06
Description: In checkOperation of AppOpsService.java, there is a possible bypass of user interaction requirements due to mishandling application suspend. This could lead to local information disclosure no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-138636979
CVSS Score: 5.5 (MEDIUM)
References: https://source.android.com/security/bulletin/2019-12-01; https://source.android.com/security/bulletin/2019-12-01
CVE: CVE-2019-2221
Published: 2019-12-06
Description: In hasActivityInVisibleTask of WindowProcessController.java there’s a possible bypass of user interaction requirements due to incorrect handling of top activities in INITIALIZING state. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-138583650
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/2019-12-01; https://source.android.com/security/bulletin/2019-12-01
CVE: CVE-2019-2222
Published: 2019-12-06
Description: n ihevcd_parse_slice_data of ihevcd_parse_slice.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-140322595
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2019-12-01; https://source.android.com/security/bulletin/2019-12-01
CVE: CVE-2019-2223
Published: 2019-12-06
Description: In ihevcd_ref_list of ihevcd_ref_list.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-140692129
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2019-12-01; https://source.android.com/security/bulletin/2019-12-01
CVE: CVE-2019-2224
Published: 2019-12-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-15140. Reason: This candidate is a duplicate of CVE-2019-15140. Notes: All CVE users should reference CVE-2019-15140 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2019-2225
Published: 2019-12-06
Description: When pairing with a Bluetooth device, it may be possible to pair a malicious device without any confirmation from the user, and that device may be able to interact with the phone. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-110433804
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://source.android.com/security/bulletin/2019-12-01; https://source.android.com/security/bulletin/2019-12-01
CVE: CVE-2019-2226
Published: 2019-12-06
Description: In device_class_to_int of device_class.cc, there is a possible out of bounds read due to improper casting. This could lead to local information disclosure in the Bluetooth server with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-140152619
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2019-12-01; https://source.android.com/security/bulletin/2019-12-01
CVE: CVE-2019-2227
Published: 2019-12-06
Description: In DeepCopy of btif_av.cc, there is a possible out of bounds read due to improper casting. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-140768453
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2019-12-01; https://source.android.com/security/bulletin/2019-12-01