Browse CVEs

MEDIUM 5.5 CVE-2022-28786 Improper buffer size check logic in aviextractor library prior to SMR May-2022 Release 1 allows out of bounds read leading to possible temporary deni… Android Mitigation only Fix from $1,6002022-05-03 MEDIUM 5.5 CVE-2022-28787 Improper buffer size check logic in wmfextractor library prior to SMR May-2022 Release 1 allows out of bounds read leading to possible temporary deni… Android Mitigation only Fix from $1,6002022-05-03 MEDIUM 5.5 CVE-2022-28788 Improper buffer size check logic in aviextractor library prior to SMR May-2022 Release 1 allows out of bounds read leading to possible temporary deni… Android Mitigation only Fix from $1,6002022-05-03 MEDIUM 5.5 CVE-2022-20092 In alac decoder, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additi… Android Mitigation only Fix from $1,6002022-05-03 HIGH 7.5 CVE-2021-39809 In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote info… Android Patch available Fix from $1,9502022-04-12 MEDIUM 6.5 CVE-2021-39805 In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information … Android Mitigation only Fix from $1,6002022-04-12 HIGH 7.1 CVE-2022-27823 Improper size check in sapefd_parse_meta_HEADER_old function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds read vi… Android Mitigation only Fix from $1,9502022-04-11 HIGH 7.1 CVE-2022-27824 Improper size check of in sapefd_parse_meta_DESCRIPTION function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds rea… Android Mitigation only Fix from $1,9502022-04-11 HIGH 7.1 CVE-2022-27825 Improper size check in sapefd_parse_meta_HEADER function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds read via a … Android Mitigation only Fix from $1,9502022-04-11 MEDIUM 5.5 CVE-2022-27821 Improper boundary check in Quram Agif library prior to SMR Apr-2022 Release 1 allows attackers to cause denial of service via crafted image file. Android Mitigation only Fix from $1,6002022-04-11 MEDIUM 6.6 CVE-2022-20074 In preloader (partition), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, fo… Android Mitigation only Fix from $1,6002022-04-11 MEDIUM 6.7 CVE-2022-20064 In ccci, there is a possible leak of kernel pointer due to an incorrect bounds check. This could lead to local information disclosure with System exe… Android Mitigation only Fix from $1,6002022-04-11 MEDIUM 6.7 CVE-2022-20065 In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution … Android Mitigation only Fix from $1,6002022-04-11 MEDIUM 6.5 CVE-2022-0806 Data leak in Canvas in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in screen sharing to potentially … Chrome 99.0.4844.51+ Fix from $1,6002022-04-05 MEDIUM 6.5 CVE-2022-0792 Out of bounds read in ANGLE in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… Chrome 99.0.4844.51+ Fix from $1,6002022-04-05 MEDIUM 5.5 CVE-2021-39774 In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with no additional exe… Android Mitigation only Fix from $1,6002022-03-30 HIGH 7.5 CVE-2021-39726 In cd_ParseMsg of cd_codec.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosu… Android Mitigation only Fix from $1,9502022-03-16 HIGH 7.1 CVE-2022-25821 Improper use of SMS buffer pointer in Shannon baseband prior to SMR Mar-2022 Release 1 allows OOB read. Android Mitigation only Fix from $1,9502022-03-10 MEDIUM 5.5 CVE-2022-25819 OOB read vulnerability in hdcp2 device node prior to SMR Mar-2022 Release 1 allow an attacker to view Kernel stack memory. Android Mitigation only Fix from $1,6002022-03-10 HIGH 8.1 CVE-2022-0114 Out of bounds memory access in Blink Serial API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to perform an out of bounds memory r… Chrome 97.0.4692.71+ Fix from $1,9502022-02-12 HIGH 8.8 CVE-2021-4100 Object lifecycle issue in ANGLE in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafte… Chrome 96.0.4664.110+ Fix from $1,9502022-02-11 HIGH 7.5 CVE-2021-39677 In startVideoStream() there is a possibility of an OOB Read in the heap, when the camera buffer is ‘zero’ in size.Product: AndroidVersions: Android-1… Android Mitigation only Fix from $1,9502022-02-11 MEDIUM 5.5 CVE-2021-39664 In LoadedPackage::Load of LoadedArsc.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information … Android Patch available Fix from $1,6002022-02-11 MEDIUM 5.5 CVE-2021-39666 In extract of MediaMetricsItem.h, there is a possible out of bounds read due to improper input validation. This could lead to local information discl… Android Patch available Fix from $1,6002022-02-11 MEDIUM 5.5 CVE-2021-39687 In HandleTransactionIoEvent of actuator_driver.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local inf… Android Mitigation only Fix from $1,6002022-02-11 MEDIUM 5.5 CVE-2021-39688 In TBD of TBD, there is a possible out of bounds read due to TBD. This could lead to local information disclosure with no additional execution privil… Android No fix yet Fix from $1,6002022-02-11 HIGH 8.1 CVE-2022-23592 Tensorflow is an Open Source Machine Learning Framework. TensorFlow's type inference can cause a heap out of bounds read as the bounds checking is do… Tensorflow 2.8.0+ Fix from $1,9502022-02-04 MEDIUM 5.5 CVE-2022-23594 Tensorflow is an Open Source Machine Learning Framework. The TFG dialect of TensorFlow (MLIR) makes several assumptions about the incoming `GraphDef`… Tensorflow Mitigation only Fix from $1,6002022-02-04 HIGH 8.8 CVE-2022-23574 Tensorflow is an Open Source Machine Learning Framework. There is a typo in TensorFlow's `SpecializeType` which results in heap OOB read/write. Due t… Tensorflow after 2.6.2 Fix from $1,9502022-02-04 HIGH 8.8 CVE-2022-23560 Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would allow limited reads and writes outside of ar… Tensorflow after 2.6.2 Fix from $1,9502022-02-04