Browse CVEs

MEDIUM 5.5 CVE-2022-39130 In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. Android Mitigation only Fix from $1,6002022-12-06 CRITICAL 9.8 CVE-2022-41900 TensorFlow is an open source platform for machine learning. The security vulnerability results in FractionalMax(AVG)Pool with illegal pooling_ratio. … Tensorflow 2.8.4 / 2.9.3+ Fix from $2,3002022-11-18 HIGH 7.5 CVE-2022-41897 TensorFlow is an open source platform for machine learning. If `FractionMaxPoolGrad` is given outsize inputs `row_pooling_sequence` and `col_pooling_… Tensorflow 2.8.4 / 2.9.3+ Fix from $1,9502022-11-18 HIGH 7.5 CVE-2022-41895 TensorFlow is an open source platform for machine learning. If `MirrorPadGrad` is given outsize input `paddings`, TensorFlow will give a heap OOB err… Tensorflow 2.8.4 / 2.9.3+ Fix from $1,9502022-11-18 CRITICAL 9.1 CVE-2022-41880 TensorFlow is an open source platform for machine learning. When the `BaseCandidateSamplerOp` function receives a value in `true_classes` larger than… Tensorflow 2.8.4 / 2.9.3+ Fix from $2,3002022-11-18 HIGH 7.5 CVE-2022-41883 TensorFlow is an open source platform for machine learning. When ops that have specified input sizes receive a differing number of inputs, the execut… Tensorflow Patch available Fix from $1,9502022-11-18 MEDIUM 5.5 CVE-2022-32602 In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no addition… Android Mitigation only Fix from $1,6002022-11-08 MEDIUM 6.7 CVE-2022-21778 In vpu, there is a possible information disclosure due to an incorrect bounds check. This could lead to local escalation of privilege with System exe… Android Mitigation only Fix from $1,6002022-11-08 HIGH 7.5 CVE-2022-20418 In pickStartSeq of AAVCAssembler.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information dis… Android Patch available Fix from $1,9502022-10-11 HIGH 7.5 CVE-2022-20410 In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to an integer overflow. This could lead to remote informa… Android Patch available Fix from $1,9502022-10-11 MEDIUM 6.7 CVE-2022-20412 In fdt_next_tag of fdt.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege w… Android Patch available Fix from $1,6002022-10-11 CRITICAL 9.1 CVE-2022-35937 TensorFlow is an open source platform for machine learning. The `GatherNd` function takes arguments that determine the sizes of inputs and outputs. I… Tensorflow 2.7.2 / 2.8.1+ Fix from $2,3002022-09-16 CRITICAL 9.1 CVE-2022-35938 TensorFlow is an open source platform for machine learning. The `GatherNd` function takes arguments that determine the sizes of inputs and outputs. I… Tensorflow 2.7.2 / 2.8.1+ Fix from $2,3002022-09-16 CRITICAL 9.8 CVE-2021-0942 The path in this case is a little bit convoluted. The end result is that via an ioctl an untrusted app can control the ui32PageIndex offset in the ex… Android Mitigation only Fix from $2,3002022-09-13 MEDIUM 5.5 CVE-2022-36854 Out of bound read in libapexjni.media.samsung.so prior to SMR Sep-2022 Release 1 allows attacker access unauthorized information. Android Mitigation only Fix from $1,6002022-09-09 MEDIUM 6.5 CVE-2022-2605 Out of bounds read in Dawn in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… Chrome 104.0.5112.79+ Fix from $1,6002022-08-12 HIGH 7.5 CVE-2022-20401 In SAEMM_RetrievEPLMNList of SAEMM_ContextManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remo… Android Mitigation only Fix from $1,9502022-08-11 HIGH 7.5 CVE-2022-20375 In LteRrcNrProAsnDecode of LteRrcNr_Codec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial o… Android Mitigation only Fix from $1,9502022-08-11 MEDIUM 6.5 CVE-2022-20346 In updateAudioTrackInfoFromESDS_MPEG4Audio of MPEG4Extractor.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could… Android Patch available Fix from $1,6002022-08-10 MEDIUM 5.5 CVE-2022-20350 In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to trick the victim to grant notification access to the wrong app… Android Patch available Fix from $1,6002022-08-10 CRITICAL 9.3 CVE-2022-2010 Out of bounds read in compositing in Google Chrome prior to 102.0.5005.115 allowed a remote attacker who had compromised the renderer process to pote… Chrome 102.0.5005.115+ Fix from $2,3002022-07-28 MEDIUM 6.5 CVE-2022-1858 Out of bounds read in DevTools in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to perform an out of bounds memory read via specific… Chrome 102.0.5005.61+ Fix from $1,6002022-07-27 HIGH 7.5 CVE-2022-20224 In AT_SKIP_REST of bta_hf_client_at.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote informatio… Android Patch available Fix from $1,9502022-07-13 MEDIUM 6.5 CVE-2022-20221 In avrc_ctrl_pars_vendor_cmd of avrc_pars_ct.cc, there is a possible out of bounds read due to improper input validation. This could lead to remote i… Android Patch available Fix from $1,6002022-07-13 MEDIUM 5.5 CVE-2022-20227 In USB driver, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with User execut… Android Patch available Fix from $1,6002022-07-13 MEDIUM 6.7 CVE-2022-20201 In getAppSize of InstalldNativeService.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation… Android Mitigation only Fix from $1,6002022-06-15 HIGH 7.5 CVE-2022-20123 In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote i… Android Mitigation only Fix from $1,9502022-06-15 HIGH 7.5 CVE-2022-20131 In nci_proc_rf_management_ntf of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informa… Android Mitigation only Fix from $1,9502022-06-15 MEDIUM 6.5 CVE-2022-20010 In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote informati… Android Patch available Fix from $1,6002022-05-10 MEDIUM 5.5 CVE-2022-28785 Improper buffer size check logic in aviextractor library prior to SMR May-2022 Release 1 allows out of bounds read leading to possible temporary deni… Android Mitigation only Fix from $1,6002022-05-03