CVE-2019-9272

In WiFi, there is a possible leak of WiFi state due to a permissions bypass. This could lead to a local information disclosure which could be used to determine device location with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-11596047

• CWE-863

• https://source.android.com/security/bulletin/android-10Vendor Advisory
• https://source.android.com/security/bulletin/android-10Vendor Advisory

Published

Sep 27, 2019

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-9265In Bluetooth, there is a possible out of bounds read due to …7.5
• CVE-2019-9266In sensorservice, there is a possible out of bounds write du…6.7
• CVE-2019-9268In libstagefright, there is a possible use-after-free due to…5.5
• CVE-2019-9269In System Settings, there is a possible permissions bypass d…7.3
• CVE-2019-9270In the Android kernel in unifi and r8180 WiFi drivers there …7.8
• CVE-2019-9271In the Android kernel in the mnh driver there is a race cond…6.4
• CVE-2019-9273In the Android kernel in the synaptics_dsx_htc touchscreen d…6.7
• CVE-2019-9274In the Android kernel in the mnh driver there is a possible …6.7
• CVE-2019-9275In the Android kernel in the mnh driver there is a use after…6.7
• CVE-2019-9276In the Android kernel in the synaptics_dsx_htc touchscreen d…
• CVE-2019-9277In the proc filesystem, there is a possible information disc…3.3
• CVE-2019-9278In libexif, there is a possible out of bounds write due to a…8.8