CVE-2019-2095

In callGenIDChangeListeners and related functions of SkPixelRef.cpp, there is a possible use after free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-124232283.

• CWE-362
• CWE-416

• https://source.android.com/security/bulletin/2019-06-01Vendor Advisory
• https://source.android.com/security/bulletin/2019-06-01Vendor Advisory

Published

Jun 7, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-20924A user authorized to perform database queries may trigger de…6.5
• CVE-2019-20925An unauthenticated client can trigger denial of service by i…7.5
• CVE-2019-2093In huff_dec_1D of nlc_dec.cpp, there is a possible out of bo…
• CVE-2019-20933InfluxDB before 1.7.6 has an authentication bypass vulnerabi…9.8
• CVE-2019-20934An issue was discovered in the Linux kernel before 5.2.6. On…5.3
• CVE-2019-2094In parseMPEGCCData of NuPlayerCCDecoder.cpp, there is a poss…
• CVE-2019-2096In EffectRelease of EffectBundle.cpp, there is a possible me…
• CVE-2019-2097In HAliasAnalyzer.Query of hydrogen-alias-analysis.h, there …
• CVE-2019-2098In areNotificationsEnabledForPackage of NotificationManagerS…
• CVE-2019-2099In nfa_rw_store_ndef_rx_buf of nfa_rw_act.cc, there is a pos…
• CVE-2019-2101In uvc_parse_standard_control of uvc_driver.c, there is a po…5.5
• CVE-2019-2102In the Bluetooth Low Energy (BLE) specification, there is a …