Android Security Bulletin — May 2019
Monday, 6 May 2019
- Vulnerabilities
- 11
- Critical
- 0
- High
- 0
- Zero-days
- 0
- Public exploit
- 0
Exploited 0
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
None of this release's vulnerabilities is known to be exploited so far.
All vulnerabilities 11
Unscored11 ShowHide
- Unscored
-
Unscored
CVE-2019-2044 In MakeMP>G4VideoCodecSpecificData of APacketSource.cpp, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote co…EPSS 1.2%
-
Unscored
CVE-2019-2045 In JSCallTyper of typer.cc, there is an out of bounds write due to an incorrect bounds check. This could lead to remote code execution in the proxy auto-config…EPSS 1.4%
-
Unscored
CVE-2019-2046 In CalculateInstanceSizeForDerivedClass of objects.cc, there is possible memory corruption due to an integer overflow. This could lead to remote code execution…EPSS 1.3%
-
Unscored
CVE-2019-2047 In UpdateLoadElement of ic.cc, there is a possible out-of-bounds write due to type confusion. This could lead to remote code execution in the proxy auto-config…EPSS 1.4%
- Unscored
- Unscored
-
Unscored
CVE-2019-2051 In heap of spaces.h, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure when processing …EPSS 1%
-
Unscored
CVE-2019-2052 In VisitPointers of heap.cc, there is a possible out-of-bounds read due to type confusion. This could lead to remote information disclosure with no additional …EPSS 1%
- Unscored
- Unscored