Browse CVEs

MEDIUM 5.5 CVE-2023-48346 In video decoder, there is a possible improper input validation. This could lead to local denial of service with no additional execution privileges n… Android No fix yet Fix from $1,6002024-01-18 CRITICAL 9.8 CVE-2023-48425 U-Boot vulnerability resulting in persistent Code Execution  Chromecast Firmware 2023-10-01+ Fix from $2,3002023-12-11 HIGH 7.8 CVE-2023-40097 In hasPermissionForActivity of PackageManagerHelper.java, there is a possible URI grant due to improper input validation. This could lead to local es… Android Patch available Fix from $1,9502023-12-04 MEDIUM 5.5 CVE-2022-48457 In TeleService, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional exec… Android Mitigation only Fix from $1,6002023-11-01 MEDIUM 5.5 CVE-2022-48458 In TeleService, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional exec… Android Mitigation only Fix from $1,6002023-11-01 MEDIUM 5.5 CVE-2022-48459 In TeleService, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional exec… Android Mitigation only Fix from $1,6002023-11-01 HIGH 7.5 CVE-2023-21391 In Messaging, there is a possible way to disable the messaging application due to improper input validation. This could lead to remote denial of serv… Android 14.0+ Fix from $1,9502023-10-30 MEDIUM 6.7 CVE-2023-32826 In camera middleware, there is a possible out of bounds write due to a missing input validation. This could lead to local escalation of privilege wit… Android Mitigation only Fix from $1,6002023-10-02 MEDIUM 6.7 CVE-2023-32827 In camera middleware, there is a possible out of bounds write due to a missing input validation. This could lead to local escalation of privilege wit… Android Mitigation only Fix from $1,6002023-10-02 HIGH 7.5 CVE-2023-33914 In NIA0 algorithm in Security Mode Command, there is a possible missing verification incorrect input. This could lead to remote information disclosur… Android No fix yet Fix from $1,9502023-09-04 HIGH 8.8 CVE-2023-4357EPSS 47% Insufficient validation of untrusted input in XML in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to bypass file access restriction… Chrome 116.0.5845.96+ Fix from $1,9502023-08-15 MEDIUM 5.5 CVE-2023-21284 In multiple functions of DevicePolicyManager.java, there is a possible way to prevent enabling the Find my Device feature due to improper input valid… Android Patch available Fix from $1,6002023-08-14 HIGH 7.8 CVE-2023-21272 In readFrom of Uri.java, there is a possible bad URI permission grant due to improper input validation. This could lead to local escalation of privil… Android Patch available Fix from $1,9502023-08-14 MEDIUM 6.5 CVE-2022-4911 Insufficient data validation in DevTools in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass content security policy via a cr… Chrome 106.0.5249.62+ Fix from $1,6002023-07-29 MEDIUM 6.5 CVE-2022-4925 Insufficient validation of untrusted input in QUIC in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to perform header splitting via m… Chrome 97.0.4692.71+ Fix from $1,6002023-07-29 HIGH 7.3 CVE-2023-21251 In onCreate of ConfirmDialog.java, there is a possible way to connect to VNP bypassing user's consent due to improper input validation. This could le… Android Patch available Fix from $1,9502023-07-13 HIGH 7.8 CVE-2023-21192 In setInputMethodWithSubtypeIdLocked of InputMethodManagerService.java, there is a possible way to setup input methods that are not enabled due to im… Android Mitigation only Fix from $1,9502023-06-28 HIGH 7.8 CVE-2023-21138 In onNullBinding of CallRedirectionProcessor.java, there is a possible long lived connection due to improper input validation. This could lead to loc… Android Patch available Fix from $1,9502023-06-15 MEDIUM 5.5 CVE-2023-21136 In multiple functions of JobStore.java, there is a possible way to cause a crash on startup due to improper input validation. This could lead to loca… Android Mitigation only Fix from $1,6002023-06-15 MEDIUM 5.5 CVE-2023-21143 In multiple functions of multiple files, there is a possible way to make the device unusable due to improper input validation. This could lead to loc… Android Patch available Fix from $1,6002023-06-15 HIGH 7.8 CVE-2023-21121 In onResume of AppManagementFragment.java, there is a possible way to prevent users from forgetting a previously connected VPN due to improper input … Android Mitigation only Fix from $1,9502023-06-15 HIGH 7.8 CVE-2023-21135 In onCreate of NotificationAccessSettings.java, there is a possible failure to persist notifications settings due to improper input validation. This … Android Patch available Fix from $1,9502023-06-15 MEDIUM 6.7 CVE-2023-20708 In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System exe… Android Mitigation only Fix from $1,6002023-05-15 MEDIUM 6.7 CVE-2023-20718 In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… Android Mitigation only Fix from $1,6002023-05-15 MEDIUM 6.7 CVE-2023-20720 In pqframework, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System ex… Android Mitigation only Fix from $1,6002023-05-15 MEDIUM 6.7 CVE-2023-20721 In isp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execut… Android Mitigation only Fix from $1,6002023-05-15 MEDIUM 6.7 CVE-2023-20722 In m4u, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execut… Android Mitigation only Fix from $1,6002023-05-15 MEDIUM 5.5 CVE-2023-21111 In several functions of PhoneAccountRegistrar.java, there is a possible way to prevent an access to emergency services due to improper input validati… Android Patch available Fix from $1,6002023-05-15 MEDIUM 6.7 CVE-2023-20707 In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… Android Mitigation only Fix from $1,6002023-05-15 MEDIUM 5.5 CVE-2023-20704 In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional exec… Android Mitigation only Fix from $1,6002023-05-15