Browse CVEs

MEDIUM 6.7 CVE-2020-0186 In hal_fd_init of hal_fd.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privile… Android Patch available Fix from $1,6002020-06-11 HIGH 8.8 CVE-2020-0168 In impeg2_fmt_conv_yuv420p_to_yuv420sp_uv of impeg2_format_conv.c, there is a possible out of bounds write due to a missing bounds check. This could … Android Patch available Fix from $1,9502020-06-11 MEDIUM 6.7 CVE-2020-0165 In phNxpNciHal_NfcDep_cmd_ext of phNxpNciHal_NfcDepSWPrio.cc, there is a possible out of bounds write due to a missing bounds check. This could lead … Android Patch available Fix from $1,6002020-06-11 HIGH 7.8 CVE-2020-0150 In rw_t3t_message_set_block_list of rw_t3t.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escala… Android Patch available Fix from $1,9502020-06-11 HIGH 7.8 CVE-2020-0155 In phNxpNciHal_send_ese_hal_cmd of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to loca… Android Patch available Fix from $1,9502020-06-11 MEDIUM 6.7 CVE-2020-0153 In phNxpNciHal_write_ext of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escal… Android Patch available Fix from $1,6002020-06-11 CRITICAL 9.8 CVE-2020-0138 In get_element_attr_rsp of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code executio… Android Patch available Fix from $2,3002020-06-11 HIGH 8.8 CVE-2020-0131 In parseChunk of MPEG4Extractor.cpp, there is a possible out of bounds write due to incompletely initialized data. This could lead to remote code exe… Android Patch available Fix from $1,9502020-06-11 HIGH 7.8 CVE-2020-0129 In SetData of btm_ble_multi_adv.cc, there is a possible out-of-bound write due to an incorrect bounds check. This could lead to local escalation of p… Android Patch available Fix from $1,9502020-06-11 HIGH 7.8 CVE-2020-0136 In multiple locations of Parcel.cpp, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privi… Android Patch available Fix from $1,9502020-06-11 MEDIUM 6.7 CVE-2020-0124 In markBootComplete of InstalldNativeService.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local esc… Android Patch available Fix from $1,6002020-06-11 CRITICAL 9.8 CVE-2020-0117 In aes_cmac of aes_cmac.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution in the bluet… Android Patch available Fix from $2,3002020-06-10 HIGH 7.8 CVE-2020-0118 In addListener of RegionSamplingThread.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escala… Android Patch available Fix from $1,9502020-06-10 HIGH 8.8 CVE-2020-6419 Out of bounds write in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 81.0.4044.92+ Fix from $1,9502020-06-03 HIGH 8.8 CVE-2020-6453 Inappropriate implementation in V8 in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a cra… Chrome 80.0.3987.162+ Fix from $1,9502020-06-03 HIGH 8.8 CVE-2020-6474 Use after free in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… Chrome 83.0.4103.61+ Fix from $1,9502020-05-21 HIGH 8.8 CVE-2020-6463 Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 81.0.4044.122+ Fix from $1,9502020-05-21 HIGH 8.8 CVE-2020-6464 Type confusion in Blink in Google Chrome prior to 81.0.4044.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 81.0.4044.138+ Fix from $1,9502020-05-21 HIGH 8.8 CVE-2020-6467 Use after free in WebRTC in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 83.0.4103.61+ Fix from $1,9502020-05-21 HIGH 8.8 CVE-2020-6468EPSS 6% Type confusion in V8 in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chrome 83.0.4103.61+ Fix from $1,9502020-05-21 HIGH 8.8 CVE-2020-6458 Out of bounds read and write in PDFium in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a… Chrome 81.0.4044.122+ Fix from $1,9502020-05-21 HIGH 8.8 CVE-2020-6459 Use after free in payments in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… Chrome 81.0.4044.122+ Fix from $1,9502020-05-21 CRITICAL 9.8 CVE-2020-0103 In a2dp_aac_decoder_cleanup of a2dp_aac_decoder.cc, there is a possible invalid free due to memory corruption. This could lead to remote code executi… Android Patch available Fix from $2,3002020-05-14 HIGH 7.8 CVE-2020-0102 In GattServer::SendResponse of gatt_server.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local esc… Android Patch available Fix from $1,9502020-05-14 HIGH 7.8 CVE-2020-0110 In psi_write of psi.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with n… Android 1.41.1054.0+ Fix from $1,9502020-05-14 MEDIUM 6.7 CVE-2020-0220 In crus_afe_callback of msm-cirrus-playback.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escala… Android Mitigation only Fix from $1,6002020-05-14 HIGH 7.8 CVE-2020-0094 In setImageHeight and setImageWidth of ExifUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to lo… Android Patch available Fix from $1,9502020-05-14 CRITICAL 9.8 CVE-2020-12753 An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. Arbitrary code execution can occur via the bootloader… Android No fix yet Fix from $2,3002020-05-11 CRITICAL 9.8 CVE-2020-12746 An issue was discovered on Samsung mobile devices with O(8.X), P(9.0), and Q(10.0) (Exynos chipsets) software. Attackers can bypass the Secure Bootlo… Android Mitigation only Fix from $2,3002020-05-11 CRITICAL 9.8 CVE-2020-12747 An issue was discovered on Samsung mobile devices with Q(10.0) (Exynos980 9630 and Exynos990 9830 chipsets) software. The Bootloader has a heap-based… Android Mitigation only Fix from $2,3002020-05-11