Browse CVEs

CRITICAL 9.8 CVE-2020-15205 In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `data_splits` argument of `tf.raw_ops.StringNGrams` lacks validation. This a… Tensorflow 1.15.4 / 2.0.3+ Fix from $2,3002020-09-25 CRITICAL 9.0 CVE-2020-15202 In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `Shard` API in TensorFlow expects the last argument to be a function taking … Tensorflow 1.15.4 / 2.0.3+ Fix from $2,3002020-09-25 CRITICAL 9.0 CVE-2020-15207 In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, to mimic Python's indexing with negative values, TFLite uses `ResolveAxis` … Tensorflow 1.15.4 / 2.0.3+ Fix from $2,3002020-09-25 CRITICAL 9.9 CVE-2020-15196 In Tensorflow version 2.3.0, the `SparseCountSparseOutput` and `RaggedCountSparseOutput` implementations don't validate that the `weights` tensor has… Tensorflow Patch available Fix from $2,3002020-09-25 CRITICAL 9.6 CVE-2020-6573 Use after free in video in Google Chrome on Android prior to 85.0.4183.102 allowed a remote attacker who had compromised the renderer process to pote… Chrome 85.0.4183.102+ Fix from $2,3002020-09-21 CRITICAL 9.6 CVE-2020-15961 Insufficient policy validation in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious … Chrome 85.0.4183.121+ Fix from $2,3002020-09-21 CRITICAL 9.6 CVE-2020-15963 Insufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious… Chrome 85.0.4183.121+ Fix from $2,3002020-09-21 CRITICAL 9.8 CVE-2020-0354 In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional exec… Android Mitigation only Fix from $2,3002020-09-18 CRITICAL 9.8 CVE-2020-0333 In UrlQuerySanitizer, there is a possible improper input validation. This could lead to remote code execution with no additional execution privileges… Android Mitigation only Fix from $2,3002020-09-17 CRITICAL 9.8 CVE-2020-0123 There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-149871374 Android Mitigation only Fix from $2,3002020-09-17 CRITICAL 9.8 CVE-2020-0229 There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-156333725 Android Mitigation only Fix from $2,3002020-09-17 CRITICAL 9.8 CVE-2020-0278 There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-160812574 Android No fix yet Fix from $2,3002020-09-17 CRITICAL 9.8 CVE-2020-0342 There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-160812576 Android Mitigation only Fix from $2,3002020-09-17 CRITICAL 9.8 CVE-2020-0380 In allocExcessBits of bitalloc.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution … Android Patch available Fix from $2,3002020-09-17 CRITICAL 9.8 CVE-2020-25282 An issue was discovered on LG mobile devices with Android OS 10 software. The lguicc software (for the LG Universal Integrated Circuit Card) allows a… Android Mitigation only Fix from $2,3002020-09-11 CRITICAL 9.8 CVE-2020-25283 An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. BT manager allows attackers to bypass intended access re… Android Mitigation only Fix from $2,3002020-09-11 CRITICAL 9.8 CVE-2020-25279 An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos chipsets) software. The baseband component has a buffer ov… Android Mitigation only Fix from $2,3002020-09-11 CRITICAL 9.8 CVE-2020-25278 An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The Quram image codec library allows attackers to overwr… Android Mitigation only Fix from $2,3002020-09-11 CRITICAL 9.8 CVE-2020-25058 An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9, and 10 software. The network_management service does not properly restrict … Android Mitigation only Fix from $2,3002020-08-31 CRITICAL 9.8 CVE-2020-25061 An issue was discovered on LG mobile devices with Android OS 9 and 10 software on the VZW network. lge_property allows property overwrites. The LG ID… Android No fix yet Fix from $2,3002020-08-31 CRITICAL 9.8 CVE-2020-25062 An issue was discovered on LG mobile devices with Android OS 9 and 10 software. LGTelephonyProvider allows a bypass of intended privilege restriction… Android Mitigation only Fix from $2,3002020-08-31 CRITICAL 9.8 CVE-2020-25049 An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. StatusBarService has insufficient DEX access control. The Samsung… Android Mitigation only Fix from $2,3002020-08-31 CRITICAL 9.8 CVE-2020-25052 An issue was discovered on Samsung mobile devices with Q(10.0) (exynos9830 chipsets) software. H-Arx allows attackers to execute arbitrary code or ca… Android Mitigation only Fix from $2,3002020-08-31 CRITICAL 9.8 CVE-2020-25053 An issue was discovered on Samsung mobile devices with Q(10.0) (exynos9830 chipsets) software. RKP allows arbitrary code execution. The Samsung ID is… Android Mitigation only Fix from $2,3002020-08-31 CRITICAL 9.8 CVE-2020-25055 An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The persona service allows attackers (who control an unp… Android Mitigation only Fix from $2,3002020-08-31 CRITICAL 9.8 CVE-2020-25057 An issue was discovered on LG mobile devices with Android OS 10 software. MDMService does not properly restrict APK installations. The LG ID is LVE-S… Android Mitigation only Fix from $2,3002020-08-31 CRITICAL 9.6 CVE-2020-8904 An arbitrary memory overwrite vulnerability in the trusted memory of Asylo exists in versions prior to 0.6.0. As the ecall_restore function fails to … Asylo 0.6.0+ Fix from $2,3002020-08-12 CRITICAL 9.1 CVE-2020-0260 There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-152225183 Android Mitigation only Fix from $2,3002020-08-11 CRITICAL 9.8 CVE-2020-0252 There is a possible memory corruption due to a use after free.Product: AndroidVersions: Android SoCAndroid ID: A-152236803 Android Mitigation only Fix from $2,3002020-08-11 CRITICAL 9.8 CVE-2020-0253 There is a possible memory corruption due to a use after free.Product: AndroidVersions: Android SoCAndroid ID: A-152647365 Android No fix yet Fix from $2,3002020-08-11