CVE-2019-9364

LOW Year: 2019
CVSS v3 Score
3.3
Low
CVSS v2 Score
2.1
Low
Weakness Type
CWE-863
View all →

Vulnerability Description

In AudioService, there is a possible trigger of background user audio due to a permissions bypass. This could lead to local information disclosure by playing the background user's audio with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-73364631

Related Vulnerabilities

CVE-2018-10910

LOW
CVSS:3.3(Low)

A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with the system. This situation could lead to the unauthorized pairing of certain Bl...

CWE-8632018

CVE-2018-7957

LOW
CVSS:3.3(Low)

Huawei smartphones with software Victoria-AL00 8.0.0.336a(C00) have an information leakage vulnerability. Because an interface does not verify authorization correctly, attackers can exploit an applica...

CWE-8632018

CVE-2020-0481

LOW
CVSS:3.3(Low)

In AndroidManifest.xml, there is a possible permissions bypass. This could lead to local escalation of privilege allowing a non-system app to send a broadcast it shouldn't have permissions to send, wi...

CWE-8632020

CVE-2022-20558

LOW
CVSS:3.3(Low)

In registerReceivers of DeviceCapabilityListener.java, there is a possible way to change preferred TTY mode due to a permissions bypass. This could lead to local escalation of privilege with no additi...

CWE-8632022

CVE-2022-33718

LOW
CVSS:3.3(Low)

An improper access control vulnerability in Wi-Fi Service prior to SMR AUG-2022 Release 1 allows untrusted applications to manipulate the list of apps that can use mobile data.

CWE-8632022

CVE-2023-25189

LOW
CVSS:3.3(Low)

BTS is affected by information disclosure vulnerability where mobile network operator personnel connected over BTS Web Element Manager, regardless of the access privileges, having a possibility to rea...

CWE-8632023