CVE-2019-2101

In uvc_parse_standard_control of uvc_driver.c, there is a possible out-of-bound read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-111760968.

• CWE-125

• http://packetstormsecurity.com/files/154245/Kernel-Live-Patch-Security-Notice-LSN-0054-1.htmlThird Party Advisory, VDB Entry
• https://lists.debian.org/debian-lts-announce/2019/07/msg00022.htmlMailing List, Third Party Advisory
• https://source.android.com/security/bulletin/2019-06-01Vendor Advisory
• https://usn.ubuntu.com/4094-1/Third Party Advisory
• https://usn.ubuntu.com/4118-1/Third Party Advisory
• http://packetstormsecurity.com/files/154245/Kernel-Live-Patch-Security-Notice-LSN-0054-1.htmlThird Party Advisory, VDB Entry
• https://lists.debian.org/debian-lts-announce/2019/07/msg00022.htmlMailing List, Third Party Advisory
• https://source.android.com/security/bulletin/2019-06-01Vendor Advisory
• https://usn.ubuntu.com/4094-1/Third Party Advisory
• https://usn.ubuntu.com/4118-1/Third Party Advisory

Published

Jun 7, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-2094In parseMPEGCCData of NuPlayerCCDecoder.cpp, there is a poss…
• CVE-2019-2095In callGenIDChangeListeners and related functions of SkPixel…
• CVE-2019-2096In EffectRelease of EffectBundle.cpp, there is a possible me…
• CVE-2019-2097In HAliasAnalyzer.Query of hydrogen-alias-analysis.h, there …
• CVE-2019-2098In areNotificationsEnabledForPackage of NotificationManagerS…
• CVE-2019-2099In nfa_rw_store_ndef_rx_buf of nfa_rw_act.cc, there is a pos…
• CVE-2019-2102In the Bluetooth Low Energy (BLE) specification, there is a …
• CVE-2019-2103In Google Assistant in Android 9, there is a possible permis…
• CVE-2019-2104In HIDL, safe_union, and other C++ structs/unions being sent…
• CVE-2019-2105In FileInputStream::Read of file_input_stream.cc, there is a…
• CVE-2019-2106In ihevcd_sao_shift_ctb of ihevcd_sao.c, there is a possible…
• CVE-2019-2107In ihevcd_parse_pps of ihevcd_parse_headers.c, there is a po…