Browse CVEs

MEDIUM 5.5 CVE-2021-37670 TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can read from outside of bounds of heap alloc… Tensorflow 2.3.4 / 2.4.3+ Fix from $1,6002021-08-12 MEDIUM 5.5 CVE-2021-37672 TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can read from outside of bounds of heap alloc… Tensorflow 2.3.4 / 2.4.3+ Fix from $1,6002021-08-12 HIGH 7.1 CVE-2021-37664 TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can read from outside of bounds of heap alloc… Tensorflow 2.3.4 / 2.4.3+ Fix from $1,9502021-08-12 HIGH 7.8 CVE-2021-37651 TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation for `tf.raw_ops.FractionalAvgPoolGrad`… Tensorflow 2.3.4 / 2.4.3+ Fix from $1,9502021-08-12 HIGH 7.8 CVE-2021-37659 TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a re… Tensorflow 2.3.4 / 2.4.3+ Fix from $1,9502021-08-12 HIGH 7.3 CVE-2021-37655 TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a read from outside of bounds of … Tensorflow 2.3.4 / 2.4.3+ Fix from $1,9502021-08-12 HIGH 7.1 CVE-2021-37654 TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a crash via a `CHECK`-fail in deb… Tensorflow 2.3.4 / 2.4.3+ Fix from $1,9502021-08-12 HIGH 7.1 CVE-2021-37635 TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of sparse reduction operations in Tens… Tensorflow 2.3.4 / 2.4.3+ Fix from $1,9502021-08-12 HIGH 7.1 CVE-2021-37641 TensorFlow is an end-to-end open source platform for machine learning. In affected versions if the arguments to `tf.raw_ops.RaggedGather` don't deter… Tensorflow 2.3.4 / 2.4.3+ Fix from $1,9502021-08-12 HIGH 7.8 CVE-2021-37639 TensorFlow is an end-to-end open source platform for machine learning. When restoring tensors via raw APIs, if the tensor name is not provided, Tenso… Tensorflow 2.3.4 / 2.4.3+ Fix from $1,9502021-08-12 MEDIUM 5.5 CVE-2021-22552 An untrusted memory read vulnerability in Asylo versions up to 0.6.1 allows an untrusted attacker to pass a syscall number in MessageReader that is t… Asylo after 0.6.1 Fix from $1,6002021-08-02 HIGH 7.5 CVE-2021-0596 In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote i… Android Mitigation only Fix from $1,9502021-07-14 MEDIUM 6.5 CVE-2021-0558 In fillMainDataBuf of pvmp3_framedecoder.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote informa… Android Mitigation only Fix from $1,6002021-06-22 MEDIUM 6.5 CVE-2021-0559 In Lag_max of p_ol_wgh.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure wi… Android Mitigation only Fix from $1,6002021-06-22 MEDIUM 5.5 CVE-2021-0556 In getBlockSum of fastcodemb.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosu… Android Mitigation only Fix from $1,6002021-06-22 MEDIUM 5.5 CVE-2021-0562 In RasterIntraUpdate of motion_est.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information… Android Mitigation only Fix from $1,6002021-06-22 MEDIUM 5.5 CVE-2021-0563 In ih264e_fmt_conv_422i_to_420sp of ih264e_fmt_conv.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local… Android Mitigation only Fix from $1,6002021-06-22 CRITICAL 9.8 CVE-2021-0516 In p2p_process_prov_disc_req of p2p_pd.c, there is a possible out of bounds read and write due to a use after free. This could lead to remote escalat… Android Patch available Fix from $2,3002021-06-21 HIGH 7.5 CVE-2021-0522 In ConnectionHandler::SdpCb of connection_handler.cc, there is a possible out of bounds read due to a use after free. This could lead to remote infor… Android Patch available Fix from $1,9502021-06-21 MEDIUM 6.5 CVE-2021-0504 In avrc_pars_browse_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informati… Android Patch available Fix from $1,6002021-06-21 HIGH 8.1 CVE-2021-30536 Out of bounds read in V8 in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML … Chrome 91.0.4472.77+ Fix from $1,9502021-06-07 HIGH 8.1 CVE-2021-30511 Out of bounds read in Tab Groups in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to install a malicious extension to… Chrome 90.0.4430.212+ Fix from $1,9502021-06-04 HIGH 7.1 CVE-2021-29613 TensorFlow is an end-to-end open source platform for machine learning. Incomplete validation in `tf.raw_ops.CTCLoss` allows an attacker to trigger an… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14 HIGH 7.8 CVE-2021-29606 TensorFlow is an end-to-end open source platform for machine learning. A specially crafted TFLite model could trigger an OOB read on heap in the TFLi… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14 HIGH 7.8 CVE-2021-29583 TensorFlow is an end-to-end open source platform for machine learning. The implementation of `tf.raw_ops.FusedBatchNorm` is vulnerable to a heap buff… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14 HIGH 7.1 CVE-2021-29582 TensorFlow is an end-to-end open source platform for machine learning. Due to lack of validation in `tf.raw_ops.Dequantize`, an attacker can trigger … Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14 HIGH 7.1 CVE-2021-29590 TensorFlow is an end-to-end open source platform for machine learning. The implementations of the `Minimum` and `Maximum` TFLite operators can be use… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14 HIGH 7.1 CVE-2021-29553 TensorFlow is an end-to-end open source platform for machine learning. An attacker can read data outside of bounds of heap allocated buffer in `tf.ra… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14 HIGH 7.1 CVE-2021-29559 TensorFlow is an end-to-end open source platform for machine learning. An attacker can access data outside of bounds of heap allocated array in `tf.r… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14 HIGH 7.1 CVE-2021-29560 TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a heap buffer overflow in `tf.raw_ops.RaggedTensorToTens… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14