CVE-2019-9469

In km_compute_shared_hmac of km4.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-130246677

• CWE-787

• https://source.android.com/security/bulletin/pixel/2019-12-01Vendor Advisory
• https://source.android.com/security/bulletin/pixel/2019-12-01Vendor Advisory

Published

Jan 6, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-9463In Platform, there is a possible bypass of user interaction …7.3
• CVE-2019-9464In various functions of RecentLocationApps.java, DevicePolic…5.5
• CVE-2019-9465In the Titan M handling of cryptographic operations, there i…5.5
• CVE-2019-9466Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-9467In the Bootloader, there is a possible kernel command inject…6.7
• CVE-2019-9468In export_key_der of export_key.cpp, there is possible memor…7.8
• CVE-2019-9470In dma_sblk_start of abc-pcie.c, there is a possible out of …6.7
• CVE-2019-9471In set_outbound_iatu of abc-pcie.c, there is a possible out …6.7
• CVE-2019-9472In DCRYPTO_equals of compare.c, there is a possible timing a…5.5
• CVE-2019-9473In Bluetooth, there is a possible out of bounds read due to …7.5
• CVE-2019-9474In Bluetooth, there is a possible out of bounds read due to …7.5
• CVE-2019-9475In /proc/net of the kernel filesystem, there is a possible i…5.5