CVE-2019-9370
Last modified
CVE-2019-9370 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. In sonivox, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. EPSS estimates a 0.73% chance of exploitation in the next 30 days.
Description
In sonivox, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-133880046
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Android | 10.0 |
References
- https://source.android.com/security/bulletin/android-10Vendor Advisory
- https://source.android.com/security/bulletin/android-10Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-9370?
How severe is CVE-2019-9370?
How do I fix CVE-2019-9370?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-9364In AudioService, there is a possible trigger of background u…3.3
- CVE-2019-9365In Bluetooth, there is a possible deserialization error due …9.8
- CVE-2019-9366In libSBRdec there is a possible out of bounds read due to a…6.5
- CVE-2019-9367In Bluetooth, there is a possible out of bounds read due to …7.5
- CVE-2019-9368In Bluetooth, there is a possible out of bounds read due to …5.5
- CVE-2019-9369In Bluetooth, there is a use of uninitialized variable. This…5.5
- CVE-2019-9371In libvpx, there is a possible resource exhaustion due to im…6.5
- CVE-2019-9372In libskia, there is a possible crash due to a missing null …6.5
- CVE-2019-9373In JobStore, there is a mismatched serialization/deserializa…5.5
- CVE-2019-9374Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2019-9375In hostapd, there is a possible out of bounds write due to a…6.4
- CVE-2019-9376In Account of Account.java, there is a possible boot loop du…5.5
Are you affected by CVE-2019-9370?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
