PT-2019-5096 · Google+6 · Libvpx+7

Published 2019-09-27 · Updated 2024-06-15 · CVE-2019-9433

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions libvpx (affected versions not specified) Android versions Android-10

Description The issue is related to insufficient input validation in the libvpx multimedia library. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is required for exploitation.

Recommendations For libvpx, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Android versions Android-10, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALSA-2020:4629

BDU:2020-01762

CESA-2020_3876

CESA-2020_4629

CVE-2019-9433

DLA-2012-1

DSA-4578-1

OPENSUSE-SU-2020:0105-1

OPENSUSE-SU-2020_0105-1

OPENSUSE-SU-2024:11010-1

RHSA-2020:3876

RHSA-2020:4629

RHSA-2020_3876

RHSA-2020_4629

RLSA-2020:4629

SUSE-SU-2020:0143-1

SUSE-SU-2020:0459-1

USN-4199-1

USN-4199-2

Affected Products

Almalinux

Android

Centos

Red Hat

Rocky Linux

Suse

Ubuntu

Libvpx

References · 74

• https://ubuntu.com/security/CVE-2019-9232 · Vendor Advisory
• https://usn.ubuntu.com/4199-1 · Vendor Advisory
• https://source.android.com/security/bulletin/android-10 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se81-bulletin-20200429SE81 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-9433 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20200327SE16 · Vendor Advisory
• https://usn.ubuntu.com/4199-2 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/DQSTK442ATWJOR4TU3MR6C3N5A6NDFFN · Vendor Advisory
• https://osv.dev/vulnerability/USN-4199-2 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4199-2 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-9433 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:0143-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-01762 · Security Note
• https://ubuntu.com/security/CVE-2019-9371 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2020-4629.html · Vendor Advisory