Browse CVEs

MEDIUM 5.5 CVE-2022-38679 In music service, there is a missing permission check. This could lead to local denial of service in music service with no additional execution privi… Android Mitigation only Fix from $1,6002022-10-14 MEDIUM 5.5 CVE-2022-38687 In messaging service, there is a missing permission check. This could lead to local denial of service in messaging service with no additional executi… Android No fix yet Fix from $1,6002022-10-14 MEDIUM 5.5 CVE-2022-38677 In cell service, there is a missing permission check. This could lead to local denial of service in cell service with no additional execution privile… Android No fix yet Fix from $1,6002022-10-14 MEDIUM 5.5 CVE-2022-20425 In addAutomaticZenRule of ZenModeHelper.java, there is a possible permanent degradation of performance due to resource exhaustion. This could lead to… Android Patch available Fix from $1,6002022-10-11 MEDIUM 5.5 CVE-2022-29202 TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.ragged.consta… Tensorflow 2.6.4 / 2.7.2+ Fix from $1,6002022-05-20 MEDIUM 5.5 CVE-2022-25326 fscrypt through v0.3.2 creates a world-writable directory by default when setting up a filesystem, allowing unprivileged users to exhaust filesystem … Fscrypt after 0.3.2 Fix from $1,6002022-02-25 HIGH 7.5 CVE-2022-23591 Tensorflow is an Open Source Machine Learning Framework. The `GraphDef` format in TensorFlow does not allow self recursive functions. The runtime ass… Tensorflow after 2.6.2 Fix from $1,9502022-02-04 MEDIUM 6.5 CVE-2022-23580 Tensorflow is an Open Source Machine Learning Framework. During shape inference, TensorFlow can allocate a large vector based on a value from a tenso… Tensorflow after 2.6.2 Fix from $1,6002022-02-04 HIGH 7.5 CVE-2021-22553 Any git operation is passed through Jetty and a session is created. No expiry is set for the session and Jetty does not automatically dispose of the … Gerrit 2.15.22 / 2.16.26+ Fix from $1,9502021-02-17 HIGH 7.5 CVE-2020-0441 In Message and toBundle of Notification.java, there is a possible resource exhaustion due to improper input validation. This could lead to remote den… Android Patch available Fix from $1,9502020-11-10 MEDIUM 6.5 CVE-2020-0173 In Parse_lins of eas_mdls.c, there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with… Android Patch available Fix from $1,6002020-06-11 MEDIUM 6.5 CVE-2020-0088 In parseTrackFragmentRun of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation. This could lead to remote den… Android Mitigation only Fix from $1,6002020-03-15 MEDIUM 6.5 CVE-2011-1459 The WebKit::WebPluginContainerImpl::handleEvent function in Google Chrome before Blink M11 allows an attacker to cause a denial of service (crash) vi… Blink Patch available Fix from $1,6002019-11-05 HIGH 7.5 CVE-2019-5043 An exploitable denial-of-service vulnerability exists in the Weave daemon of the Nest Cam IQ Indoor, version 4620002. A set of TCP connections can ca… Nest Cam Iq Indoor Firmware No fix yet Fix from $1,9502019-10-31 MEDIUM 6.5 CVE-2019-9349 In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no addi… Android Mitigation only Fix from $1,6002019-09-27 MEDIUM 6.5 CVE-2017-13233 In ihevcd_ctb_boundary_strength_pbslice of libhevc, there is possible resource exhaustion. This could lead to a remote temporary denial of service wi… Android Mitigation only Fix from $1,6002018-02-12 HIGH 7.5 CVE-2017-13211 In bta_scan_results_cb_impl of btif_ble_scanner.cc, there is possible resource exhaustion if a large number of repeated BLE scan results are received… Android Mitigation only Fix from $1,9502018-01-12 HIGH 7.8 CVE-2017-8247 In all Qualcomm products with Android releases from CAF using the Linux kernel, if there is more than one thread doing the device open operation, the… Android after 8.0 Fix from $1,9502017-09-21 HIGH 7.8 CVE-2017-8264 A userspace process can cause a Denial of Service in the camera driver in all Qualcomm products with Android releases from CAF using the Linux kernel. Android Patch available Fix from $1,9502017-08-11 MEDIUM 5.5 CVE-2017-0690 A denial of service vulnerability in the Android media framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. And… Android Mitigation only Fix from $1,6002017-07-06 MEDIUM 5.0 CVE-2011-3954 Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service (application crash) via vectors that trigger a large amount of … Chrome 17.0.963.46+ Fix from $1,6002012-02-09 HIGH 7.5 CVE-2011-0985 Google Chrome before 9.0.597.94 does not properly perform process termination upon memory exhaustion, which has unspecified impact and remote attack … Chrome 9.0.597.94+ Fix from $1,9502011-02-10