Vulnetix
Try Vulnetix Request Demo
CVE-2019-2126 PUBLISHED

In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a freed pointer. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-127702368.

EPSS 9.31% · 92.7th percentile

Risk Scores

EPSS Score
9.31%
92.7th percentile

Affected Products

VendorProductVersions
Ubuntu:24.04:LTSqtwebengine-opensource-src5.15.16+dfsg-3, 5.15.16+dfsg-1ubuntu4, 5.15.16+dfsg-1
Ubuntu:25.10godot3.6+ds-2ubuntu1, 4.4.1+ds-1, 0
Ubuntu:20.04:LTSaom1.0.0.errata1-2ubuntu3, 1.0.0.errata1-3, 1.0.0.errata1-3build1
Ubuntu:25.10qtwebengine-opensource-src5.15.19+dfsg2-1, 5.15.19+dfsg-1, 5.15.18+dfsg-2
Ubuntu:18.04:LTSqtwebengine-opensource-src5.9.1+dfsg-4, 0, 5.9.1+dfsg-4ubuntu1
Ubuntu:Pro:22.04:LTSgodot3.2.3-stable-1, 3.2.3-stable-1build1, 3.2.3-stable-1build2
Ubuntu:22.04:LTSaom3.2.0-2, 3.3.0-1, 3.3.0-1ubuntu0.1
Ubuntu:22.04:LTSqtwebengine-opensource-src5.15.6+dfsg-1, 5.15.7+dfsg-2, 5.15.8+dfsg-1
Ubuntu:20.04:LTSqtwebengine-opensource-src5.12.8+dfsg-0ubuntu1.1, *, *
Ubuntu:Pro:20.04:LTSgodot3.2-stable-2, 3.0.6-2build2, 3.0.6-2build1
Ubuntu:Pro:24.04:LTSgodot3.5.2-stable-2build4, *, 0
Ubuntu:18.04:LTSlibvpx1.7.0-3, 1.6.1-3, 0

Timeline

References

Open in Interactive Console →