CVE-2019-9345

In the Android kernel in sdcardfs there is a possible violation of the separation of data between profiles due to shared mapping of obb files. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.

• https://source.android.com/security/bulletin/pixel/2019-09-01Vendor Advisory
• https://source.android.com/security/bulletin/pixel/2019-09-01Vendor Advisory

Published

Sep 6, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-9337In libavc there is a possible information disclosure due to …6.5
• CVE-2019-9338In libavc there is a possible information disclosure due to …6.5
• CVE-2019-9341In Bluetooth, there is a possible out of bounds read due to …7.5
• CVE-2019-9342In Bluetooth, there is a possible out of bounds read due to …7.5
• CVE-2019-9343In Bluetooth, there is a possible out of bounds read due to …7.5
• CVE-2019-9344In NFC server, there is a possible out of bounds read due to…5
• CVE-2019-9346In libstagefright, there is a possible out of bounds write d…8.8
• CVE-2019-9347In the m4v_h263 codec, there is a possible out of bounds rea…5.5
• CVE-2019-9348In libstagefright, there is a possible resource exhaustion d…6.5
• CVE-2019-9349In libstagefright, there is a possible resource exhaustion d…6.5
• CVE-2019-9350In Keymaster, there is a possible EoP due to a use after fre…7.8
• CVE-2019-9351In SyncStatusObserver, there is a possible bypass for operat…3.3