CVE-2019-9376

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2019-9376
In Account of Account.java, there is a possible boot loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: Android; Versions: Android-9, Android-8.0, Android-8.1; Android ID: A-129287265.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

4.9 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 3.9 / Impact : 6.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References
Link Resource
https://source.android.com/security/bulletin/2021-01-01 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*
cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*
History

29 Apr 2022, 13:24

Type Values Removed Values Added
CWE CWE-20 CWE-834
References (CONFIRM) https://source.android.com/security/bulletin/2021-01-01 - (CONFIRM) https://source.android.com/security/bulletin/2021-01-01 - Vendor Advisory
CPE cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:* cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*
cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*

11 Jan 2021, 21:15

Type Values Removed Values Added
References
  • {'url': 'https://source.android.com/security/bulletin/android-10', 'name': 'https://source.android.com/security/bulletin/android-10', 'tags': ['Vendor Advisory'], 'refsource': 'MISC'}
  • (CONFIRM) https://source.android.com/security/bulletin/2021-01-01 -
Summary In the Accounts package, there is a possible crash due to improper input validation. This could lead to permanent local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-129287265 In Account of Account.java, there is a possible boot loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: Android; Versions: Android-9, Android-8.0, Android-8.1; Android ID: A-129287265.
Information

Published : 2019-09-27 19:15

Updated : 2023-12-10 13:13

NVD link : CVE-2019-9376

Mitre link : CVE-2019-9376

CVE.ORG link : CVE-2019-9376

JSON object : View

Products Affected

google

  • android
CWE
CWE-834

Excessive Iteration