CVE-2019-2040

In rw_i93_process_ext_sys_info of rw_i93.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-122316913.

• CWE-125

• https://source.android.com/security/bulletin/2019-04-01Vendor Advisory
• https://source.android.com/security/bulletin/2019-04-01Vendor Advisory

Published

Apr 19, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-20394A double-free is present in libyang before v1.0-r3 in the fu…8.8
• CVE-2019-20395A stack consumption issue is present in libyang before v1.0-…6.5
• CVE-2019-20396A segmentation fault is present in yyparse in libyang before…6.5
• CVE-2019-20397A double-free is present in libyang before v1.0-r1 in the fu…8.8
• CVE-2019-20398A NULL pointer dereference is present in libyang before v1.0…6.5
• CVE-2019-20399A timing vulnerability in the Scalar::check_overflow functio…5.9
• CVE-2019-20400The usage of Tomcat in Jira before version 8.5.2 allows loca…7.8
• CVE-2019-20401Various installation setup resources in Jira before version …6.5
• CVE-2019-20402Support zip files in Atlassian Jira Server and Data Center b…4.9
• CVE-2019-20403The API in Atlassian Jira Server and Data Center before vers…5.3
• CVE-2019-20404The API in Atlassian Jira Server and Data Center before vers…4.3
• CVE-2019-20405The JMX monitoring flag in Atlassian Jira Server and Data Ce…4.3