CVE-2019-9291

HIGH

Android 10 - Remote Code Execution in Bluetooth via Improper Memory Allocation

Title source: llm
STIX 2.1

Description

In Bluetooth, there is a possible remote code execution due to an improper memory allocation. This could lead to remote code execution in Bluetooth with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112159179

References (1)

Core 1
Core References

Scores

CVSS v3 8.8
EPSS 0.0071
EPSS Percentile 48.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-770
Status published
Products (1)
google/android 10.0
Published Sep 27, 2019
Tracked Since Feb 18, 2026