CVE-2019-9431

CVE-2019-9431 describes a remote information disclosure vulnerability in Android 10, stemming from an out-of-bounds read due to a use-after-free error in the Bluetooth component. This flaw allows an attacker with System execution privileges to potentially extract heap information, which is then written to logs, without requiring user interaction. Rated as MEDIUM severity (CVSS 4.9), the attack vector is network-based with low complexity, but requires high privileges to exploit. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.