CVE-2019-2131

An application with overlay permission can display overlays on top of settings UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-119115683.

• CWE-1188

• https://source.android.com/security/bulletin/2019-08-01Vendor Advisory
• https://source.android.com/security/bulletin/2019-08-01Vendor Advisory

Published

Aug 20, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-2125In ChangeDefaultDialerDialog.java, there is a possible escal…
• CVE-2019-2126In ParseContentEncodingEntry of mkvparser.cc, there is a pos…8.8
• CVE-2019-2127In AudioInputDescriptor::setClientActive of AudioInputDescri…
• CVE-2019-2128In ACELP_4t64_fx of c4t64fx.c, there is a possible out of bo…
• CVE-2019-2129In extract3GPPGlobalDescriptions of TextDescriptions.cpp, th…
• CVE-2019-2130In CompilationJob::FinalizeJob of compiler.cc, there is a po…
• CVE-2019-2132It is possible to overlay the VPN dialog by a malicious appl…
• CVE-2019-2133In Mfc_Transceive of phNxpExtns_MifareStd.cpp, there is a po…
• CVE-2019-2134In phFriNfc_ExtnsTransceive of phNxpExtns_MifareStd.cpp, the…
• CVE-2019-2135In Mfc_Transceive of phNxpExtns_MifareStd.cpp, there is a po…
• CVE-2019-2136In Status::readFromParcel of Status.cpp, there is a possible…
• CVE-2019-2137In the endCall() function of TelecomManager.java, there is a…