Browse CVEs

CRITICAL 9.8 CVE-2021-39675EPSS 6% In GKI_getbuf of gki_buffer.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privil… Android Mitigation only Fix from $2,3002022-02-11 CRITICAL 9.1 CVE-2021-39635 ims_ex is a vendor system service used to manage VoLTE in unisoc devices，But it does not verify the caller's permissions，so that normal apps (No ph… Android Mitigation only Fix from $2,3002022-02-11 CRITICAL 9.8 CVE-2021-39616 Summary:Product: AndroidVersions: Android SoCAndroid ID: A-204686438 Android No fix yet Fix from $2,3002022-02-11 CRITICAL 9.8 CVE-2022-23587 Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, Grappler component of TensorFlow is vulnerable to an integer overfl… Tensorflow after 2.6.2 Fix from $2,3002022-02-04 CRITICAL 9.8 CVE-2021-22566 An incorrect setting of UXN bits within mmu_flags_to_s1_pte_attr lead to privileged executable pages being mapped as executable from an unprivileged … Fuchsia Patch available Fix from $2,3002022-01-18 CRITICAL 9.8 CVE-2021-39623 In doRead of SimpleDecodingSource.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation… Android Mitigation only Fix from $2,3002022-01-14 CRITICAL 9.8 CVE-2021-1049 Hacker one bug ID: 1343975Product: AndroidVersions: Android SoCAndroid ID: A-204256722 Android No fix yet Fix from $2,3002022-01-14 CRITICAL 9.6 CVE-2021-38013 Heap buffer overflow in fingerprint recognition in Google Chrome on ChromeOS prior to 96.0.4664.45 allowed a remote attacker who had compromised a We… Chrome 96.0.4664.45+ Fix from $2,3002021-12-23 CRITICAL 9.8 CVE-2021-39641 Product: AndroidVersions: Android kernelAndroid ID: A-126949257References: N/A Android Patch available Fix from $2,3002021-12-15 CRITICAL 9.8 CVE-2021-39644 Product: AndroidVersions: Android kernelAndroid ID: A-199809304References: N/A Android Patch available Fix from $2,3002021-12-15 CRITICAL 9.8 CVE-2021-39645 Product: AndroidVersions: Android kernelAndroid ID: A-199805112References: N/A Android Patch available Fix from $2,3002021-12-15 CRITICAL 9.8 CVE-2021-39655 Product: AndroidVersions: Android kernelAndroid ID: A-192641593References: N/A Android Patch available Fix from $2,3002021-12-15 CRITICAL 9.8 CVE-2021-0956 In NfcTag::discoverTechnologies (activation) of NfcTag.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead… Android Mitigation only Fix from $2,3002021-12-15 CRITICAL 9.8 CVE-2021-0889 In Android TV , there is a possible silent pairing due to lack of rate limiting in the pairing flow. This could lead to remote code execution with no… Android Mitigation only Fix from $2,3002021-12-15 CRITICAL 9.6 CVE-2021-38002 Use after free in Web Transport in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially perform a sandbox escape via a crafte… Chrome 95.0.4638.69+ Fix from $2,3002021-11-23 CRITICAL 9.6 CVE-2020-6492 Use after free in ANGLE in Google Chrome prior to 83.0.4103.97 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML p… Chrome 83.0.4103.97+ Fix from $2,3002021-11-02 CRITICAL 9.6 CVE-2021-37981 Heap buffer overflow in Skia in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who had compromised the renderer process to potentially… Chrome 95.0.4638.54+ Fix from $2,3002021-11-02 CRITICAL 9.6 CVE-2021-37973 KEVEPSS 12% Use after free in Portals in Google Chrome prior to 94.0.4606.61 allowed a remote attacker who had compromised the renderer process to potentially pe… Chrome 94.0.4606.61+ Fix from $2,3002021-10-08 CRITICAL 9.6 CVE-2021-30633 KEVEPSS 33% Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potenti… Chrome 93.0.4577.82+ Fix from $2,3002021-10-08 CRITICAL 9.8 CVE-2021-0869 In GetTimeStampAndPkt of DumpstateDevice.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote cod… Android Mitigation only Fix from $2,3002021-09-21 CRITICAL 9.8 CVE-2021-25449 An improper input validation vulnerability in libsapeextractor library prior to SMR Sep-2021 Release 1 allows attackers to execute arbitrary code in … Android Mitigation only Fix from $2,3002021-09-09 CRITICAL 9.6 CVE-2021-30571 Insufficient policy enforcement in DevTools in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious e… Chrome 92.0.4515.107+ Fix from $2,3002021-08-03 CRITICAL 9.8 CVE-2021-0515 In Factory::CreateStrictFunctionMap of factory.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remot… Android Mitigation only Fix from $2,3002021-07-14 CRITICAL 9.1 CVE-2021-35958 TensorFlow through 2.5.0 allows attackers to overwrite arbitrary files via a crafted archive when tf.keras.utils.get_file is used with extract=True. … Tensorflow after 2.5.0 Fix from $2,3002021-06-30 CRITICAL 9.8 CVE-2021-0516 In p2p_process_prov_disc_req of p2p_pd.c, there is a possible out of bounds read and write due to a use after free. This could lead to remote escalat… Android Patch available Fix from $2,3002021-06-21 CRITICAL 9.8 CVE-2021-0324 Product: AndroidVersions: Android SoCAndroid ID: A-175402462 Android No fix yet Fix from $2,3002021-06-14 CRITICAL 9.8 CVE-2021-0474 In avrc_msg_cback of avrc_api.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution wit… Android Patch available Fix from $2,3002021-06-11 CRITICAL 10.0 CVE-2021-25387 An improper input validation vulnerability in sflacfd_get_frm() in libsflacextractor library prior to SMR MAY-2021 Release 1 allows attackers to exec… Android Mitigation only Fix from $2,3002021-06-11 CRITICAL 9.8 CVE-2021-25383 An improper input validation vulnerability in scmn_mfal_read() in libsapeextractor library prior to SMR MAY-2021 Release 1 allows attackers to execut… Android Mitigation only Fix from $2,3002021-06-11 CRITICAL 9.8 CVE-2021-25384 An improper input validation vulnerability in sdfffd_parse_chunk_PROP() with Sample Rate Chunk in libsdffextractor library prior to SMR MAY-2021 Rele… Android Mitigation only Fix from $2,3002021-06-11