CVE-2019-2064

In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-116469592

• CWE-787

• https://source.android.com/security/bulletin/android-10Vendor Advisory
• https://source.android.com/security/bulletin/android-10Vendor Advisory

Published

Sep 27, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-20634An issue was discovered in Proofpoint Email Protection throu…3.7
• CVE-2019-20635codeBeamer before 9.5.0-RC3 does not properly restrict the a…6.1
• CVE-2019-20636In the Linux kernel before 5.4.12, drivers/input/input.c has…6.7
• CVE-2019-20637An issue was discovered in Varnish Cache before 6.0.5 LTS, 6…7.5
• CVE-2019-20638NETGEAR MR1100 devices before 12.06.08.00 are affected by di…6.5
• CVE-2019-20639Certain NETGEAR devices are affected by stored XSS. This aff…4.8
• CVE-2019-20640Certain NETGEAR devices are affected by a stack-based buffer…8.8
• CVE-2019-20641NETGEAR RAX40 devices before 1.0.3.64 are affected by lack o…8.8
• CVE-2019-20642NETGEAR RAX40 devices before 1.0.3.64 are affected by authen…8
• CVE-2019-20643NETGEAR RAX40 devices before 1.0.3.64 are affected by disclo…7.5
• CVE-2019-20644NETGEAR RAX40 devices before 1.0.3.62 are affected by stored…4.8
• CVE-2019-20645NETGEAR RAX40 devices before 1.0.3.62 are affected by stored…4.8