Browse CVEs

CRITICAL 9.1 CVE-2022-41902 TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs … Tensorflow 2.8.4 / 2.9.3+ Fix from $2,3002022-12-06 CRITICAL 9.1 CVE-2022-41910 TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs … Tensorflow 2.8.4 / 2.9.3+ Fix from $2,3002022-12-06 CRITICAL 9.6 CVE-2022-4135 KEVEPSS 32% Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentiall… Chrome 107.0.1418.62 / 107.0.5304.121+ Fix from $2,3002022-11-25 CRITICAL 9.8 CVE-2022-41900 TensorFlow is an open source platform for machine learning. The security vulnerability results in FractionalMax(AVG)Pool with illegal pooling_ratio. … Tensorflow 2.8.4 / 2.9.3+ Fix from $2,3002022-11-18 CRITICAL 9.1 CVE-2022-41880 TensorFlow is an open source platform for machine learning. When the `BaseCandidateSamplerOp` function receives a value in `true_classes` larger than… Tensorflow 2.8.4 / 2.9.3+ Fix from $2,3002022-11-18 CRITICAL 9.6 CVE-2022-3890 Heap buffer overflow in Crashpad in Google Chrome on Android prior to 107.0.5304.106 allowed a remote attacker who had compromised the renderer proce… Chrome 107.0.5304.106+ Fix from $2,3002022-11-09 CRITICAL 9.6 CVE-2022-3075 KEVEPSS 6% Insufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowed a remote attacker who had compromised the renderer process to p… Chrome 105.0.5195.102+ Fix from $2,3002022-09-26 CRITICAL 9.8 CVE-2022-35939 TensorFlow is an open source platform for machine learning. The `ScatterNd` function takes an input argument that determines the indices of of the ou… Tensorflow 2.7.2 / 2.8.1+ Fix from $2,3002022-09-16 CRITICAL 9.1 CVE-2022-35937 TensorFlow is an open source platform for machine learning. The `GatherNd` function takes arguments that determine the sizes of inputs and outputs. I… Tensorflow 2.7.2 / 2.8.1+ Fix from $2,3002022-09-16 CRITICAL 9.1 CVE-2022-35938 TensorFlow is an open source platform for machine learning. The `GatherNd` function takes arguments that determine the sizes of inputs and outputs. I… Tensorflow 2.7.2 / 2.8.1+ Fix from $2,3002022-09-16 CRITICAL 9.8 CVE-2022-20385 a function called 'nla_parse', do not check the len of para, it will check nla_type (which can be controlled by userspace) with 'maxtype' (in this ca… Android Mitigation only Fix from $2,3002022-09-13 CRITICAL 9.8 CVE-2022-20386 Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227328 Android No fix yet Fix from $2,3002022-09-13 CRITICAL 9.8 CVE-2022-20387 Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227324 Android No fix yet Fix from $2,3002022-09-13 CRITICAL 9.8 CVE-2022-20388 Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227323 Android No fix yet Fix from $2,3002022-09-13 CRITICAL 9.8 CVE-2022-20389 Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257004 Android No fix yet Fix from $2,3002022-09-13 CRITICAL 9.8 CVE-2022-20390 Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257002 Android No fix yet Fix from $2,3002022-09-13 CRITICAL 9.8 CVE-2022-20391 Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257000 Android No fix yet Fix from $2,3002022-09-13 CRITICAL 9.8 CVE-2021-0942 The path in this case is a little bit convoluted. The end result is that via an ioctl an untrusted app can control the ui32PageIndex offset in the ex… Android Mitigation only Fix from $2,3002022-09-13 CRITICAL 9.8 CVE-2022-26447 In BT firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional ex… Android Mitigation only Fix from $2,3002022-09-06 CRITICAL 9.8 CVE-2021-39815 The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be freed), and continue using the p… Android Mitigation only Fix from $2,3002022-08-24 CRITICAL 9.8 CVE-2022-20122 The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be freed), and continue using the p… Android Mitigation only Fix from $2,3002022-08-24 CRITICAL 9.8 CVE-2022-2587 Out of bounds write in Chrome OS Audio Server in Google Chrome on Chrome OS prior to 102.0.5005.125 allowed a remote attacker to potentially exploit … Chrome 102.0.5005.125+ Fix from $2,3002022-08-12 CRITICAL 9.8 CVE-2022-20405 Product: AndroidVersions: Android kernelAndroid ID: A-216363416References: N/A Android No fix yet Fix from $2,3002022-08-11 CRITICAL 9.8 CVE-2022-20378 Product: AndroidVersions: Android kernelAndroid ID: A-234657153References: N/A Android No fix yet Fix from $2,3002022-08-11 CRITICAL 9.8 CVE-2022-20381 Product: AndroidVersions: Android kernelAndroid ID: A-188935887References: N/A Android No fix yet Fix from $2,3002022-08-11 CRITICAL 9.8 CVE-2022-20384 Product: AndroidVersions: Android kernelAndroid ID: A-211727306References: N/A Android No fix yet Fix from $2,3002022-08-11 CRITICAL 9.8 CVE-2022-20400 In cd_CodeMsg of cd_codec.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no … Android Mitigation only Fix from $2,3002022-08-11 CRITICAL 9.8 CVE-2022-20402 Product: AndroidVersions: Android kernelAndroid ID: A-218701042References: N/A Android No fix yet Fix from $2,3002022-08-11 CRITICAL 9.8 CVE-2022-20403 Product: AndroidVersions: Android kernelAndroid ID: A-207975764References: N/A Android No fix yet Fix from $2,3002022-08-11 CRITICAL 9.8 CVE-2022-20365 Product: AndroidVersions: Android kernelAndroid ID: A-229632566References: N/A Android No fix yet Fix from $2,3002022-08-11