CVE-2019-2063

In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution in the media server with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-116019594

• CWE-787

• https://source.android.com/security/bulletin/android-10Vendor Advisory
• https://source.android.com/security/bulletin/android-10Vendor Advisory

Published

Sep 27, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-20624An issue was discovered on Samsung mobile devices with N(7.x…5.3
• CVE-2019-20625An issue was discovered on Samsung mobile devices with N(7.1…3.3
• CVE-2019-20626The remote keyless system on Honda HR-V 2017 vehicles sends …6.5
• CVE-2019-20627AutoUpdater.cs in AutoUpdater.NET before 1.5.8 allows XXE.9.8
• CVE-2019-20628An issue was discovered in libgpac.a in GPAC before 0.8.0, a…5.5
• CVE-2019-20629An issue was discovered in libgpac.a in GPAC before 0.8.0, a…5.5
• CVE-2019-20630An issue was discovered in libgpac.a in GPAC before 0.8.0, a…5.5
• CVE-2019-20631An issue was discovered in libgpac.a in GPAC before 0.8.0, a…5.5
• CVE-2019-20632An issue was discovered in libgpac.a in GPAC before 0.8.0, a…5.5
• CVE-2019-20633GNU patch through 2.7.6 contains a free(p_line[p_end]) Doubl…5.5
• CVE-2019-20634An issue was discovered in Proofpoint Email Protection throu…3.7
• CVE-2019-20635codeBeamer before 9.5.0-RC3 does not properly restrict the a…6.1