VULNERABILITY INTELLIGENCE
CVE-2019-9291
CVSS score8.8 HIGH
EPSS probability0.71%
CISA KEVNot currently listed
Published2019-09-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
In Bluetooth, there is a possible remote code execution due to an improper memory allocation. This could lead to remote code execution in Bluetooth with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112159179
Weakness classification
- CWE-770: Allocation of Resources Without Limits or Throttling
Primary references
- security@android.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory