Browse CVEs

HIGH 8.1 CVE-2022-21728 Tensorflow is an Open Source Machine Learning Framework. The implementation of shape inference for `ReverseSequence` does not fully validate the valu… Tensorflow after 2.6.2 Fix from $1,9502022-02-03 HIGH 8.1 CVE-2022-21730 Tensorflow is an Open Source Machine Learning Framework. The implementation of `FractionalAvgPoolGrad` does not consider cases where the input tensor… Tensorflow after 2.6.2 Fix from $1,9502022-02-03 HIGH 8.8 CVE-2022-21726 Tensorflow is an Open Source Machine Learning Framework. The implementation of `Dequantize` does not fully validate the value of `axis` and can resul… Tensorflow after 2.6.2 Fix from $1,9502022-02-03 MEDIUM 5.5 CVE-2022-22271 A missing input validation before memory copy in TIMA trustlet prior to SMR Jan-2022 Release 1 allows attackers to copy data from arbitrary memory. Android Mitigation only Fix from $1,6002022-01-10 MEDIUM 5.5 CVE-2021-0674 In alac decoder, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no add… Android Mitigation only Fix from $1,6002021-12-17 MEDIUM 5.5 CVE-2021-1041 In (TBD) of (TBD), there is a possible out of bounds read due to memory corruption. This could lead to local information disclosure with no additiona… Android Patch available Fix from $1,6002021-12-15 HIGH 7.5 CVE-2021-1002 In WT_Interpolate of eas_wtengine.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disc… Android Mitigation only Fix from $1,9502021-12-15 MEDIUM 5.5 CVE-2021-0998 In 'ih264e_find_bskip_params()' of ih264e_me.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local inform… Android Patch available Fix from $1,6002021-12-15 MEDIUM 5.5 CVE-2021-1001 In PVInitVideoEncoder of mp4enc_api.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information d… Android Mitigation only Fix from $1,6002021-12-15 MEDIUM 6.5 CVE-2021-0976 In toBARK of floor0.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no… Android Patch available Fix from $1,6002021-12-15 HIGH 7.8 CVE-2021-0924 In xhci_vendor_get_ops of xhci.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privil… Android Mitigation only Fix from $1,9502021-12-15 HIGH 7.5 CVE-2021-0925 In rw_t4t_sm_detect_ndef of rw_t4t.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information… Android Mitigation only Fix from $1,9502021-12-15 MEDIUM 6.5 CVE-2021-0650 In WT_InterpolateNoLoop of eas_wtengine.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote informa… Android Mitigation only Fix from $1,6002021-12-15 MEDIUM 5.5 CVE-2021-0620 In asf extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no addit… Android Mitigation only Fix from $1,6002021-11-18 MEDIUM 5.5 CVE-2021-0622 In asf extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no addit… Android Mitigation only Fix from $1,6002021-11-18 MEDIUM 5.5 CVE-2021-0624 In flv extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no addit… Android Mitigation only Fix from $1,6002021-11-18 MEDIUM 5.5 CVE-2021-0619 In ape extractor, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no addit… Android Mitigation only Fix from $1,6002021-11-18 MEDIUM 5.5 CVE-2021-41227 TensorFlow is an open source platform for machine learning. In affected versions the `ImmutableConst` operation in TensorFlow can be tricked into rea… Tensorflow 2.4.4 / 2.5.2+ Fix from $1,6002021-11-05 HIGH 7.8 CVE-2021-41219 TensorFlow is an open source platform for machine learning. In affected versions the code for sparse matrix multiplication is vulnerable to undefined… Tensorflow 2.4.4 / 2.5.2+ Fix from $1,9502021-11-05 HIGH 7.1 CVE-2021-41223 TensorFlow is an open source platform for machine learning. In affected versions the implementation of `FusedBatchNorm` kernels is vulnerable to a he… Tensorflow 2.4.4 / 2.5.2+ Fix from $1,9502021-11-05 HIGH 7.1 CVE-2021-41224 TensorFlow is an open source platform for machine learning. In affected versions the implementation of `SparseFillEmptyRows` can be made to trigger a… Tensorflow 2.4.4 / 2.5.2+ Fix from $1,9502021-11-05 HIGH 7.1 CVE-2021-41226 TensorFlow is an open source platform for machine learning. In affected versions the implementation of `SparseBinCount` is vulnerable to a heap OOB a… Tensorflow 2.4.4 / 2.5.2+ Fix from $1,9502021-11-05 HIGH 7.1 CVE-2021-41205 TensorFlow is an open source platform for machine learning. In affected versions the shape inference functions for the `QuantizeAndDequantizeV*` oper… Tensorflow 2.4.4 / 2.5.2+ Fix from $1,9502021-11-05 HIGH 7.1 CVE-2021-41211 TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for `QuantizeV2` can trigger a read outside… Tensorflow Patch available Fix from $1,9502021-11-05 HIGH 7.1 CVE-2021-41212 TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for `tf.ragged.cross` can trigger a read ou… Tensorflow 2.4.4 / 2.5.2+ Fix from $1,9502021-11-05 HIGH 7.1 CVE-2021-41210 TensorFlow is an open source platform for machine learning. In affected versions the shape inference functions for `SparseCountSparseOutput` can trig… Tensorflow 2.4.4 / 2.5.2+ Fix from $1,9502021-11-05 MEDIUM 6.5 CVE-2020-16048 Out of bounds read in ANGLE allowed a remote attacker to obtain sensitive data via a crafted HTML page. Angle Mitigation only Fix from $1,6002021-11-02 HIGH 8.8 CVE-2021-37992 Out of bounds read in WebAudio in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted … Chrome 95.0.4638.54+ Fix from $1,9502021-11-02 HIGH 7.5 CVE-2021-0631 In wifi driver, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execut… Android Mitigation only Fix from $1,9502021-10-25 MEDIUM 6.7 CVE-2021-0941 In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege … Android Mitigation only Fix from $1,6002021-10-25