CVE-2019-2109

In MakeMPEG4VideoCodecSpecificData of AVIExtractor.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1. Android ID: A-130651570.

• CWE-787

• https://source.android.com/security/bulletin/2019-07-01Vendor Advisory
• https://source.android.com/security/bulletin/2019-07-01Vendor Advisory

Published

Jul 8, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-2103In Google Assistant in Android 9, there is a possible permis…
• CVE-2019-2104In HIDL, safe_union, and other C++ structs/unions being sent…
• CVE-2019-2105In FileInputStream::Read of file_input_stream.cc, there is a…
• CVE-2019-2106In ihevcd_sao_shift_ctb of ihevcd_sao.c, there is a possible…
• CVE-2019-2107In ihevcd_parse_pps of ihevcd_parse_headers.c, there is a po…
• CVE-2019-2108In ihevcd_ref_list of ihevcd_ref_list.c in Android 10, there…
• CVE-2019-2110In ScreenRotationAnimation of ScreenRotationAnimation.java, …5.5
• CVE-2019-2111In loop of DnsTlsSocket.cpp, there is a possible heap memory…
• CVE-2019-2112In several functions of alarm.cc, there is possible memory c…
• CVE-2019-2113In setup wizard there is a bypass of some checks when wifi c…
• CVE-2019-2114In the default privileges of NFC, there is a possible local …7.8
• CVE-2019-2115In GateKeeper::MintAuthToken of gatekeeper.cpp in Android 7.…