CVE-2019-2197

MEDIUM Year: 2019
CVSS v3 Score
5.5
Medium
CVSS v2 Score
2.1
Low
Weakness Type
CWE-1188
View all →

Vulnerability Description

In processPhonebookAccess of CachedBluetoothDevice.java, there is a possible permission bypass due to an insecure default value. This could lead to local information disclosure of the user's contact list with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-138529441

Related Vulnerabilities

CVE-2020-0019

MEDIUM
CVSS:5.5(Medium)

In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local information disclosure in the kernel with no additional execution privileges needed. User interaction is...

CWE-11882020

CVE-2021-47343

MEDIUM
CVSS:5.5(Medium)

In the Linux kernel, the following vulnerability has been resolved: dm btree remove: assign new_root only when removal succeeds remove_raw() in dm_btree_remove() may fail due to IO read error (e.g. re...

CWE-11882021

CVE-2022-20466

MEDIUM
CVSS:5.5(Medium)

In applyKeyguardFlags of NotificationShadeWindowControllerImpl.java, there is a possible way to observe the user's password on a secondary display due to an insecure default value. This could lead to ...

CWE-11882022

CVE-2022-36349

MEDIUM
CVSS:5.5(Medium)

Insecure default variable initialization in BIOS firmware for some Intel(R) NUC Boards and Intel(R) NUC Kits before version MYi30060 may allow an authenticated user to potentially enable denial of ser...

CWE-11882022

CVE-2024-25610

MEDIUM
CVSS:5.4(Medium)

In Liferay Portal 7.2.0 through 7.4.3.12, and older unsupported versions, and Liferay DXP 7.4 before update 9, 7.3 before update 4, 7.2 before fix pack 19, and older unsupported versions, the default ...

CWE-11882024

CVE-2025-2129

MEDIUM
CVSS:5.6(Medium)

A vulnerability was found in Mage AI 0.9.75. It has been classified as problematic. This affects an unknown part. The manipulation leads to insecure default initialization of resource. It is possible ...

CWE-11882025