CVE-2019-2065

In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-118143575

• CWE-787

• https://source.android.com/security/bulletin/android-10Vendor Advisory
• https://source.android.com/security/bulletin/android-10Vendor Advisory

Published

Sep 27, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-20644NETGEAR RAX40 devices before 1.0.3.62 are affected by stored…4.8
• CVE-2019-20645NETGEAR RAX40 devices before 1.0.3.62 are affected by stored…4.8
• CVE-2019-20646NETGEAR RAX40 devices before 1.0.3.64 are affected by disclo…9.8
• CVE-2019-20647NETGEAR RAX40 devices before 1.0.3.64 are affected by denial…5.7
• CVE-2019-20648NETGEAR RN42400 devices before 6.10.2 are affected by incorr…3.5
• CVE-2019-20649NETGEAR MR1100 devices before 12.06.08.00 are affected by di…7.5
• CVE-2019-20650Certain NETGEAR devices are affected by denial of service. T…7.5
• CVE-2019-20651Certain NETGEAR devices are affected by command injection by…6.7
• CVE-2019-20652NETGEAR WAC505 devices before 8.2.1.16 are affected by discl…6.5
• CVE-2019-20653Certain NETGEAR devices are affected by denial of service. T…6.5
• CVE-2019-20654Certain NETGEAR devices are affected by incorrect configurat…7.5
• CVE-2019-20655Certain NETGEAR devices are affected by command injection by…7.8