VDB

CVE-2019-2126

CVE-2019-2126 PUBLISHED

In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a freed pointer. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-127702368.

EPSS 9.15% · 92.8th percentile

Risk Scores

EPSS Score
9.15%
92.8th percentile

Affected Products

VendorProductVersions
Ubuntu:24.04:LTSqtwebengine-opensource-src0, 5.15.15+dfsg-2, 5.15.15+dfsg-2build2
Ubuntu:25.10godot0, 3.6+ds-2, 3.6+ds-2ubuntu1
Ubuntu:20.04:LTSaom0, 1.0.0-3, 1.0.0.errata1-2ubuntu3
Ubuntu:25.10qtwebengine-opensource-src0, 5.15.19+dfsg2-1, 5.15.19+dfsg-1
Ubuntu:18.04:LTSqtwebengine-opensource-src5.9.5+dfsg-0ubuntu2, 0, 5.9.1+dfsg-4
Ubuntu:Pro:22.04:LTSgodot3.2.3-stable-1, 0, 3.2.3-stable-1build2
Ubuntu:22.04:LTSaom3.2.0-2, 3.3.0-1ubuntu0.1, 0
Ubuntu:22.04:LTSqtwebengine-opensource-src5.15.9+dfsg-1, *, *
Ubuntu:20.04:LTSqtwebengine-opensource-src0, 5.12.5+dfsg-3ubuntu1, 5.12.5+dfsg-7
Ubuntu:Pro:20.04:LTSgodot3.0.6-2build1, 0, 3.0.6-2build2
Ubuntu:Pro:24.04:LTSgodot3.5.2-stable-2, 3.5.2-stable-2build4, *
Ubuntu:18.04:LTSlibvpx1.7.0-3, 1.6.1-3, 0

Timeline

  • Aug 20, 2019 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Oct 26, 2021 EPSS Score
  • Dec 27, 2021 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Feb 28, 2022 EPSS Score
  • May 1, 2022 EPSS Score
  • Jul 3, 2022 EPSS Score
  • Nov 6, 2022 EPSS Score
  • Jan 8, 2023 EPSS Score
  • Mar 11, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›