Browse CVEs

HIGH 7.5 CVE-2022-35972 TensorFlow is an open source platform for machine learning. If `QuantizedBiasAdd` is given `min_input`, `max_input`, `min_bias`, `max_bias` tensors o… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35973 TensorFlow is an open source platform for machine learning. If `QuantizedMatMul` is given nonscalar input for: `min_a`, `max_a`, `min_b`, or `max_b` … Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35974 TensorFlow is an open source platform for machine learning. If `QuantizeDownAndShrinkRange` is given nonscalar inputs for `input_min` or `input_max`,… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35964 TensorFlow is an open source platform for machine learning. The implementation of `BlockLSTMGradV2` does not fully validate its inputs. This results … Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.8 CVE-2022-20392 In declareDuplicatePermission of ParsedPermissionUtils.java, there is a possible way to obtain a dangerous permission without user consent due to imp… Android Patch available Fix from $1,9502022-09-13 HIGH 7.5 CVE-2022-36853 Intent redirection in Photo Editor prior to SMR Sep-2022 Release 1 allows attacker to get sensitive information. Android Mitigation only Fix from $1,9502022-09-09 MEDIUM 5.5 CVE-2022-36854 Out of bound read in libapexjni.media.samsung.so prior to SMR Sep-2022 Release 1 allows attacker access unauthorized information. Android Mitigation only Fix from $1,6002022-09-09 MEDIUM 6.5 CVE-2022-2618 Insufficient validation of untrusted input in Internals in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to bypass download restrict… Chrome 104.0.5112.79+ Fix from $1,6002022-08-12 MEDIUM 6.7 CVE-2022-20314 In KeyChain, there is a possible spoof keychain chooser activity request due to improper input validation. This could lead to local escalation of pri… Android Mitigation only Fix from $1,6002022-08-12 MEDIUM 5.0 CVE-2022-20266 In Companion, there is a possible way to keep a service running with elevated importance without showing foreground service notification due to impro… Android Mitigation only Fix from $1,6002022-08-12 HIGH 7.8 CVE-2022-20356 In shouldAllowFgsWhileInUsePermissionLocked of ActiveServices.java, there is a possible way to start foreground service from background due to improp… Android Patch available Fix from $1,9502022-08-10 MEDIUM 5.5 CVE-2022-20355 In get of PacProxyService.java, there is a possible system service crash due to improper input validation. This could lead to local denial of service… Android Patch available Fix from $1,6002022-08-10 MEDIUM 5.5 CVE-2022-20350 In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to trick the victim to grant notification access to the wrong app… Android Patch available Fix from $1,6002022-08-10 MEDIUM 5.5 CVE-2022-20353 In onSaveRingtone of DefaultRingtonePreference.java, there is a possible inappropriate file read due to improper input validation. This could lead to… Android Patch available Fix from $1,6002022-08-10 CRITICAL 9.8 CVE-2022-33719 Improper input validation in baseband prior to SMR Aug-2022 Release 1 allows attackers to cause integer overflow to heap overflow. Android Mitigation only Fix from $2,3002022-08-05 MEDIUM 5.5 CVE-2022-33715 Improper access control and path traversal vulnerability in LauncherProvider prior to SMR Aug-2022 Release 1 allow local attacker to access files of … Android Mitigation only Fix from $1,6002022-08-05 MEDIUM 6.5 CVE-2022-1500 Insufficient data validation in Dev Tools in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass content security policy via a c… Chrome 101.0.4951.41+ Fix from $1,6002022-07-26 HIGH 7.8 CVE-2022-33703 Improper validation vulnerability in CACertificateInfo prior to SMR Jul-2022 Release 1 allows attackers to launch certain activities. Android Mitigation only Fix from $1,9502022-07-12 HIGH 7.8 CVE-2022-33704 Improper validation vulnerability in ucmRetParcelable of KnoxSDK prior to SMR Jul-2022 Release 1 allows attackers to launch certain activities. Android Mitigation only Fix from $1,9502022-07-12 HIGH 7.8 CVE-2022-30754 Implicit Intent hijacking vulnerability in AppLinker prior to SMR Jul-2022 Release 1 allow allows attackers to launch certain activities with privile… Android Mitigation only Fix from $1,9502022-07-12 HIGH 7.8 CVE-2022-30756 Implicit Intent hijacking vulnerability in Finder prior to SMR Jul-2022 Release 1 allow allows attackers to launch certain activities with privilege … Android Mitigation only Fix from $1,9502022-07-12 MEDIUM 5.5 CVE-2022-20205 In isFileUri of FileUtil.java, there is a possible way to bypass the check for a file:// scheme due to improper input validation. This could lead to … Android Mitigation only Fix from $1,6002022-06-15 HIGH 7.8 CVE-2022-20186 In kbase_mem_alias of mali_kbase_mem_linux.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local… Android No fix yet Fix from $1,9502022-06-15 HIGH 7.8 CVE-2022-20156 In unflatten of GraphicBuffer.cpp, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation… Android Mitigation only Fix from $1,9502022-06-15 HIGH 7.8 CVE-2022-20134 In readArguments of CallSubjectDialog.java, there is a possible way to trick the user to call the wrong phone number due to improper input validation… Android Mitigation only Fix from $1,9502022-06-15 MEDIUM 5.5 CVE-2022-20129 In registerPhoneAccount of PhoneAccountRegistrar.java, there is a possible way to prevent the user from selecting a phone account due to improper inp… Android Mitigation only Fix from $1,6002022-06-15 CRITICAL 9.1 CVE-2022-30711 Improper validation vulnerability in FeedsInfo prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities. Android Mitigation only Fix from $2,3002022-06-07 CRITICAL 9.1 CVE-2022-30712 Improper validation vulnerability in KfaOptions prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities. Android No fix yet Fix from $2,3002022-06-07 CRITICAL 9.1 CVE-2022-30713 Improper validation vulnerability in LSOItemData prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities. Android Mitigation only Fix from $2,3002022-06-07 HIGH 7.8 CVE-2022-30726 Unprotected component vulnerability in DeviceSearchTrampoline in SecSettingsIntelligence prior to SMR Jun-2022 Release 1 allows local attackers to la… Android Mitigation only Fix from $1,9502022-06-07