In the Linux kernel before 5.3.4, there is an info-leak bug that can be caused by a malicious USB device in the…

Description

In the Linux kernel before 5.3.4, there is an info-leak bug that can be caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusb_dec.c driver, aka CID-a10feaf8c464.

Scores

EPSS (exploitation in 30 days)

0.46% · top 60% of all CVEs (7 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Low 2.4.

Weakness

• n/a
• CWE-772 (opens in a new tab)All about CWE-772 and its CVEs

Affected products

• n/a

  • affected n/a

References (6)

• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.4 (opens in a new tab)x_refsource_MISCx_transferred
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a10feaf8c464c3f9cfdd3a8a7ce17e1c0d498da1 (opens in a new tab)x_refsource_MISCx_transferred
• [oss-security] 20191203 Linux kernel: multiple vulnerabilities in the USB subsystem x3 (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
• [debian-lts-announce] 20200118 [SECURITY] [DLA 2068-1] linux security update (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
• [debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
• openSUSE-SU-2020:0336 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2019-19533](https://trackcve.app/badge/CVE-2019-19533.svg)](https://trackcve.app/cve/CVE-2019-19533)

Record last updated 5 Aug 2024, 02:16 UTC.