Browse CVEs

HIGH 7.8 CVE-2021-29513 TensorFlow is an end-to-end open source platform for machine learning. Calling TF operations with tensors of non-numeric types when the operations ex… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14 HIGH 7.8 CVE-2021-29515 TensorFlow is an end-to-end open source platform for machine learning. The implementation of `MatrixDiag*` operations(https://github.com/tensorflow/t… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14 HIGH 7.8 CVE-2021-29518 TensorFlow is an end-to-end open source platform for machine learning. In eager mode (default in TF 2.0 and later), session operations are invalid. H… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14 HIGH 7.8 CVE-2021-29530 TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a null pointer dereference by providing an invalid `pe… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14 MEDIUM 5.5 CVE-2021-29516 TensorFlow is an end-to-end open source platform for machine learning. Calling `tf.raw_ops.RaggedTensorToVariant` with arguments specifying an invali… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,6002021-05-14 HIGH 7.5 CVE-2020-28344 An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. System services may crash because of the lack of a NULL … Android Mitigation only Fix from $1,9502020-11-08 HIGH 7.5 CVE-2020-28345 An issue was discovered on LG mobile devices with Android OS 10 software. The Wi-Fi subsystem may crash because of the lack of a NULL parameter check… Android Mitigation only Fix from $1,9502020-11-08 MEDIUM 5.9 CVE-2020-15209 In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, a crafted TFLite model can force a node to have as input a tensor backed by… Tensorflow 1.15.4 / 2.0.3+ Fix from $1,6002020-09-25 MEDIUM 5.3 CVE-2020-15204 In eager mode, TensorFlow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1 does not set the session state. Hence, calling `tf.raw_ops.GetSession… Tensorflow 1.15.4 / 2.0.3+ Fix from $1,6002020-09-25 MEDIUM 5.3 CVE-2020-15190 In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `tf.raw_ops.Switch` operation takes as input a tensor and a boolean and outp… Tensorflow 1.15.4 / 2.0.3+ Fix from $1,6002020-09-25 MEDIUM 5.3 CVE-2020-15191 In Tensorflow before versions 2.2.1 and 2.3.1, if a user passes an invalid argument to `dlpack.to_dlpack` the expected validations will cause variabl… Tensorflow Patch available Fix from $1,6002020-09-25 HIGH 8.8 CVE-2020-15964 Insufficient data validation in media in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially exploit heap corruption via a … Chrome 85.0.4183.121+ Fix from $1,9502020-09-21 HIGH 7.8 CVE-2020-0219 In onCreate of SliceDeepLinkSpringBoard.java there is a possible insecure Intent. This could lead to local elevation of privilege with no additional … Android Patch available Fix from $1,9502020-06-11 HIGH 8.8 CVE-2017-18665 An issue was discovered on Samsung mobile devices with M(6.0) software. There is a NULL pointer exception in WifiService via adb-cmd, causing memory … Android Mitigation only Fix from $1,9502020-04-07 HIGH 7.5 CVE-2017-18664 An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) software. There is a NULL pointer exception in PersonManager, … Android Mitigation only Fix from $1,9502020-04-07 MEDIUM 5.3 CVE-2017-18658 An issue was discovered on Samsung mobile devices with M(6.0) software. The multiwindow_facade API allows attackers to cause a NullPointerException a… Android Mitigation only Fix from $1,6002020-04-07 HIGH 7.5 CVE-2016-11039 An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) (AP + CP MDM9x35, or Qualcomm Onechip) software. There is a NU… Android Mitigation only Fix from $1,9502020-04-07 HIGH 7.5 CVE-2019-20602 An issue was discovered on Samsung mobile devices with N(7.x), O(8.0), and P(9.0) (Qualcomm chipsets) software. The Authnr Trustlet has a NULL pointe… Android Mitigation only Fix from $1,9502020-03-24 HIGH 7.5 CVE-2019-20603 An issue was discovered on Samsung mobile devices with N(7.x), O(8.0), and P(9.0) (Qualcomm chipsets) software. The ESECOMM Trustlet has a NULL point… Android Mitigation only Fix from $1,9502020-03-24 MEDIUM 6.5 CVE-2020-0021 In removeUnusedPackagesLPw of PackageManagerService.java, there is a possible permanent denial-of-service due to a missing package dependency test. T… Android Patch available Fix from $1,6002020-02-13 MEDIUM 6.5 CVE-2011-1802 WebKit in Google Chrome before Blink M11 and M12 does not properly handle counter nodes, which allows remote attackers to cause a denial of service (… Blink Mitigation only Fix from $1,6002019-11-12 HIGH 7.5 CVE-2019-9430 In Bluetooth, there is a possible null pointer dereference due to a missing null check. This could lead to remote denial of service with no additiona… Android Mitigation only Fix from $1,9502019-09-27 HIGH 7.5 CVE-2019-9400 In Bluetooth, there is a possible null pointer dereference due to a missing null check. This could lead to remote denial of service with no additiona… Android Mitigation only Fix from $1,9502019-09-27 MEDIUM 6.5 CVE-2019-9372 In libskia, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional execution privilege… Android Mitigation only Fix from $1,6002019-09-27 HIGH 7.5 CVE-2019-9279 In the wifi hotspot service, there is a possible denial of service due to a null pointer dereference. This could lead to remote denial of service wit… Android Mitigation only Fix from $1,9502019-09-27 MEDIUM 6.5 CVE-2019-9635 NULL pointer dereference in Google TensorFlow before 1.12.2 could cause a denial of service via an invalid GIF file. Tensorflow 1.12.2+ Fix from $1,6002019-04-24 MEDIUM 6.5 CVE-2018-7576 Google TensorFlow 1.6.x and earlier is affected by: Null Pointer Dereference. The type of exploitation is: context-dependent. Tensorflow after 1.6.0 Fix from $1,6002019-04-23 HIGH 7.8 CVE-2018-12014 In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Null pointer dereference vulnerability may… Android Patch available Fix from $1,9502019-02-11 MEDIUM 6.5 CVE-2018-6116 A nullptr dereference in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially perform out of bounds memory ac… Chrome 66.0.3359.117+ Fix from $1,6002018-12-04 HIGH 7.8 CVE-2018-11904 In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, asynchronous callbacks received a pointer… Android Patch available Fix from $1,9502018-09-19