p PatchFirst

CVE-2019-2126

CVE-2019-2126

This page contains facts from public vulnerability sources. Check the original advisory before updating.

In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a freed pointer. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-127702368.

CVSS 8.8 · High · EPSS 5.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • android

    Versions
    • Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9: Affected

    No fix published

  • libvpx Ubuntu:18.04:LTS

    Versions
    • 1.6.1-3
    • 1.7.0-3
    Affected ranges
    • ECOSYSTEM: < 1.7.0-3ubuntu0.18.04.1

    Update to 1.7.0-3ubuntu0.18.04.1

  • qtwebengine-opensource-src Ubuntu:Pro:18.04:LTS

    Versions
    • 5.9.1+dfsg-4
    • 5.9.1+dfsg-4ubuntu1
    • 5.9.2+dfsg-2ubuntu1
    • 5.9.3+dfsg-0ubuntu1
    • 5.9.4+dfsg-0ubuntu1
    • 5.9.5+dfsg-0ubuntu2
    • 5.9.5+dfsg-0ubuntu2+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • aom Ubuntu:20.04:LTS

    Versions
    • 1.0.0-3
    • 1.0.0.errata1-2
    • 1.0.0.errata1-2ubuntu3
    • 1.0.0.errata1-3
    • 1.0.0.errata1-3build1
    • 1.0.0.errata1-3+deb11u1build0.20.04.1
    • 1.0.0.errata1-3+deb11u1ubuntu0.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • godot Ubuntu:Pro:20.04:LTS

    Versions
    • 3.0.6-2build1
    • 3.0.6-2build2
    • 3.2-stable-2
    Affected ranges
    • ECOSYSTEM: < 3.2-stable-2ubuntu0.1~esm1

    Update to 3.2-stable-2ubuntu0.1~esm1

  • qtwebengine-opensource-src Ubuntu:Pro:20.04:LTS

    Versions
    • 5.12.4+dfsg-1ubuntu1
    • 5.12.4+dfsg-1ubuntu3
    • 5.12.5+dfsg-3ubuntu1
    • 5.12.5+dfsg-6ubuntu2
    • 5.12.5+dfsg-7
    • 5.12.5+dfsg-7build1
    • 5.12.8+dfsg-0ubuntu1
    • 5.12.8+dfsg-0ubuntu1.1
    • 5.12.8+dfsg-0ubuntu1.1+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • aom Ubuntu:Pro:22.04:LTS

    Versions
    • 1.0.0.errata1-3build1
    • 3.2.0-2
    • 3.3.0-1
    • 3.3.0-1ubuntu0.1
    • 3.3.0-1ubuntu0.1+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • godot Ubuntu:Pro:22.04:LTS

    Versions
    • 3.2.3-stable-1
    • 3.2.3-stable-1build1
    • 3.2.3-stable-1build2
    Affected ranges
    • ECOSYSTEM: < 3.2.3-stable-1ubuntu0.1~esm1

    Update to 3.2.3-stable-1ubuntu0.1~esm1

  • qtwebengine-opensource-src Ubuntu:Pro:22.04:LTS

    Versions
    • 5.15.6+dfsg-1
    • 5.15.6+dfsg-2
    • 5.15.7+dfsg-2
    • 5.15.8+dfsg-1
    • 5.15.8+dfsg-1build1
    • 5.15.8+dfsg-1build2
    • 5.15.8+dfsg-2
    • 5.15.9+dfsg-1
    • 5.15.9+dfsg-1ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • godot Ubuntu:Pro:24.04:LTS

    Versions
    • 3.5.2-stable-2
    • 3.5.2-stable-2build1
    • 3.5.2-stable-2build3
    • 3.5.2-stable-2build4
    Affected ranges
    • ECOSYSTEM: < 3.5.2-stable-2ubuntu0.24.04.1~esm1

    Update to 3.5.2-stable-2ubuntu0.24.04.1~esm1

  • qtwebengine-opensource-src Ubuntu:Pro:24.04:LTS

    Versions
    • 5.15.15+dfsg-2
    • 5.15.15+dfsg-2build2
    • 5.15.15+dfsg-2ubuntu1
    • 5.15.16+dfsg-1
    • 5.15.16+dfsg-1ubuntu2
    • 5.15.16+dfsg-1ubuntu4
    • 5.15.16+dfsg-3
    • 5.15.16+dfsg-3ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • godot Ubuntu:25.10

    Versions
    • 3.6+ds-2
    • 3.6+ds-2ubuntu1
    • 4.4.1+ds-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtwebengine-opensource-src Ubuntu:25.10

    Versions
    • 5.15.18+dfsg-2
    • 5.15.18+dfsg-2build1
    • 5.15.19+dfsg-1
    • 5.15.19+dfsg2-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • godot Ubuntu:26.10

    Versions
    • 4.6.3+ds-1
    • 4.6.3+ds-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtwebengine-opensource-src Ubuntu:26.10

    Versions
    • 5.15.19+dfsg2-4
    • 5.15.19+dfsg2-6
    • 5.15.19+dfsg2-7
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtwebengine-opensource-src Ubuntu:Pro:26.04:LTS

    Versions
    • 5.15.19+dfsg2-1
    • 5.15.19+dfsg2-1build1
    • 5.15.19+dfsg2-2
    • 5.15.19+dfsg2-3
    • 5.15.19+dfsg2-4
    • 5.15.19+dfsg2-4ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →