Browse CVEs

CRITICAL 9.8 CVE-2018-9418 In handle_app_cur_val_response of dtif_rc.cc, there is a possible stack buffer overflow due to a missing bounds check. This could lead to remote code… Android Patch available Fix from $2,3002024-12-02 HIGH 7.5 CVE-2017-13319 In pvmp3_get_main_data_size of pvmp3_get_main_data_size.cpp, there is a possible buffer overread due to a missing bounds check. This could lead to re… Android Patch available Fix from $1,9502024-11-27 MEDIUM 5.5 CVE-2024-40659 In getRegistration of RemoteProvisioningService.java, there is a possible way to permanently disable the AndroidKeyStore key generation feature by up… Android Patch available Fix from $1,6002024-09-11 HIGH 8.8 CVE-2024-8198 Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potential… Chrome 128.0.6613.113+ Fix from $1,9502024-08-28 HIGH 7.5 CVE-2024-34727 In sdpu_compare_uuid_with_attr of sdp_utils.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote infor… Android Mitigation only Fix from $1,9502024-08-15 HIGH 8.8 CVE-2024-7534 Heap buffer overflow in Layout in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted… Chrome 127.0.6533.99+ Fix from $1,9502024-08-06 HIGH 7.8 CVE-2024-32907 In memcall_add of memlog.c, there is a possible buffer overflow due to improper input validation. This could lead to local escalation of privilege wi… Android Mitigation only Fix from $1,9502024-06-13 MEDIUM 6.2 CVE-2024-25984 In dumpBatteryDefend of dump_power.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information di… Android Mitigation only Fix from $1,6002024-03-11 MEDIUM 6.7 CVE-2023-32859 In meta, there is a possible classic buffer overflow due to a missing bounds check. This could lead to local escalation of privilege with System exec… Android Mitigation only Fix from $1,6002023-12-04 MEDIUM 6.7 CVE-2023-32860 In display, there is a possible classic buffer overflow due to a missing bounds check. This could lead to local escalation of privilege with System e… Android Mitigation only Fix from $1,6002023-12-04 MEDIUM 5.5 CVE-2023-21243 In validateForCommonR1andR2 of PasspointConfiguration.java, there is a possible way to inflate the size of a config file with no limits due to a buff… Android Patch available Fix from $1,6002023-07-13 MEDIUM 5.5 CVE-2023-21136 In multiple functions of JobStore.java, there is a possible way to cause a crash on startup due to improper input validation. This could lead to loca… Android Mitigation only Fix from $1,6002023-06-15 MEDIUM 5.5 CVE-2023-21143 In multiple functions of multiple files, there is a possible way to make the device unusable due to improper input validation. This could lead to loc… Android Patch available Fix from $1,6002023-06-15 HIGH 7.8 CVE-2023-21135 In onCreate of NotificationAccessSettings.java, there is a possible failure to persist notifications settings due to improper input validation. This … Android Patch available Fix from $1,9502023-06-15 MEDIUM 5.5 CVE-2022-47487 In thermal service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service local denial of… Android Mitigation only Fix from $1,6002023-05-09 MEDIUM 5.5 CVE-2022-47335 In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service. Android No fix yet Fix from $1,6002023-04-11 MEDIUM 5.5 CVE-2022-47336 In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service. Android No fix yet Fix from $1,6002023-04-11 MEDIUM 5.5 CVE-2022-47362 In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service. Android No fix yet Fix from $1,6002023-04-11 MEDIUM 5.5 CVE-2022-47463 In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service. Android No fix yet Fix from $1,6002023-04-11 MEDIUM 5.5 CVE-2022-47464 In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service. Android Mitigation only Fix from $1,6002023-04-11 CRITICAL 9.8 CVE-2023-25664 TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, there is a heap buffer overflow in TAvgPoolGrad. A f… Tensorflow 2.12.0+ Fix from $2,3002023-03-25 MEDIUM 6.7 CVE-2023-20624 In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execut… Android Mitigation only Fix from $1,6002023-03-07 MEDIUM 5.5 CVE-2022-39118 In sprd_sysdump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. Android Mitigation only Fix from $1,6002023-01-04 MEDIUM 5.5 CVE-2022-42756 In sensor driver, there is a possible buffer overflow due to a missing bounds check. This could lead to local denial of service in kernel. Android No fix yet Fix from $1,6002022-12-06 MEDIUM 5.5 CVE-2022-42760 In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. Android Mitigation only Fix from $1,6002022-12-06 HIGH 8.1 CVE-2022-41894 TensorFlow is an open source platform for machine learning. The reference kernel of the `CONV_3D_TRANSPOSE` TensorFlow Lite operator wrongly incremen… Tensorflow 2.8.4 / 2.9.3+ Fix from $1,9502022-11-18 MEDIUM 5.5 CVE-2022-39121 In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. Android Mitigation only Fix from $1,6002022-10-14 MEDIUM 5.5 CVE-2022-39122 In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. Android Mitigation only Fix from $1,6002022-10-14 MEDIUM 5.5 CVE-2022-39120 In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. Android Mitigation only Fix from $1,6002022-10-14 MEDIUM 5.5 CVE-2022-29210 TensorFlow is an open source platform for machine learning. In version 2.8.0, the `TensorKey` hash function used total estimated `AllocatedBytes()`, … Tensorflow Patch available Fix from $1,6002022-05-21