CVE-2019-9423
mediumpriority · track · 31EPSS 0.003 · 22 %ileEUUSEPSS · scored 2026-10-27
In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android ID: A-110986616
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 4.6–7.8
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (6)
Products and version ranges known to be affected.
advisories (5)
Vendor and ecosystem advisories describing this.
- GHSA-8849-5h85-98qwOut-of-bounds Write in OpenCV2021-10-12ghsa · osvUS
In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android ID: A-110986616
- PYSEC-2026-2796Out-of-bounds Write in OpenCV2026-07-09vendor · osvUS
In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android ID: A-110986616
- PYSEC-2026-2811Out-of-bounds Write in OpenCV2026-07-09vendor · osvUS
In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android ID: A-110986616
- PYSEC-2026-2835Out-of-bounds Write in OpenCV2026-07-09vendor · osvUS
In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android ID: A-110986616
- PYSEC-2026-719Out-of-bounds Write in OpenCV2026-07-02vendor · osvUS
In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android ID: A-110986616
also known as (12)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (19)
External citations — patches, advisories, analysis.
- http://www.openwall.com/lists/oss-security/2019/10/25/17cnnvd
- http://www.openwall.com/lists/oss-security/2019/10/27/1cnnvd
- http://www.openwall.com/lists/oss-security/2019/11/07/1cnnvd
- http://www.openwall.com/lists/oss-security/2020/12/05/1cnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2019-9423cnnvd
- https://source.android.com/security/bulletin/android-10cnnvd
- https://source.android.com/security/bulletin/android-qcnnvd
- https://source.android.com/security/bulletin/android-q.htmlPatchcnnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan