Browse CVEs

HIGH 7.8 CVE-2020-0046 In DrmPlugin::releaseSecureStops of DrmPlugin.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local es… Android Mitigation only Fix from $1,9502020-03-10 MEDIUM 6.4 CVE-2020-0045 In StatsService::command of StatsService.cpp, there is possible memory corruption due to a race condition. This could lead to local escalation of pri… Android Mitigation only Fix from $1,6002020-03-10 HIGH 7.8 CVE-2020-0069 KEV In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missin… Android 9.1.0.340 / 10.0.0.177+ Fix from $1,9502020-03-10 HIGH 8.8 CVE-2020-0032 In ih264d_release_display_bufs of ih264d_utils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote co… Android Mitigation only Fix from $1,9502020-03-10 HIGH 7.8 CVE-2020-0033 In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to stale pointer. This could lead to local escalation of pr… Android Mitigation only Fix from $1,9502020-03-10 MEDIUM 6.7 CVE-2020-0010 In fpc_ta_get_build_info of fpc_ta_kpi.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation … Android Mitigation only Fix from $1,6002020-03-10 MEDIUM 6.7 CVE-2020-0011 In get_auth_result of fpc_ta_hw_auth.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of… Android Mitigation only Fix from $1,6002020-03-10 MEDIUM 6.7 CVE-2020-0012 In fpc_ta_pn_get_unencrypted_image of fpc_ta_pn.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local es… Android Mitigation only Fix from $1,6002020-03-10 HIGH 8.8 CVE-2020-6407 Out of bounds memory access in streams in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a… Chrome 80.0.3987.122+ Fix from $1,9502020-02-27 HIGH 8.0 CVE-2020-8860 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung Galaxy S10 Firmware G973FXXS3ASJA, O(8.x), … Android Mitigation only Fix from $1,9502020-02-22 HIGH 7.8 CVE-2020-0027 In HidRawSensor::batch of HidRawSensor.cpp, there is a possible out of bounds write due to an unexpected switch fallthrough. This could lead to local… Android Patch available Fix from $1,9502020-02-13 HIGH 7.8 CVE-2020-0026 In Parcel::continueWrite of Parcel.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege… Android Patch available Fix from $1,9502020-02-13 MEDIUM 6.7 CVE-2020-0005 In btm_read_remote_ext_features_complete of btm_acl.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to loc… Android Patch available Fix from $1,6002020-02-13 HIGH 8.8 CVE-2020-6415 Inappropriate implementation in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption vi… Chrome 80.0.3987.87+ Fix from $1,9502020-02-11 HIGH 8.8 CVE-2020-6404 Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a c… Chrome 80.0.3987.87+ Fix from $1,9502020-02-11 HIGH 8.8 CVE-2020-6387 Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted v… Chrome 80.0.3987.87+ Fix from $1,9502020-02-11 HIGH 8.8 CVE-2020-6389 Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted v… Chrome 80.0.3987.87+ Fix from $1,9502020-02-11 HIGH 8.8 CVE-2020-6390 Out of bounds memory access in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a … Chrome 80.0.3987.87+ Fix from $1,9502020-02-11 HIGH 8.8 CVE-2020-6378 Use after free in speech in Google Chrome prior to 79.0.3945.130 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 79.0.3945.130+ Fix from $1,9502020-02-11 HIGH 8.8 CVE-2020-6379 Use after free in V8 in Google Chrome prior to 79.0.3945.130 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chrome 79.0.3945.130+ Fix from $1,9502020-02-11 HIGH 8.1 CVE-2019-11516 An issue was discovered in the Bluetooth component of the Cypress (formerly owned by Broadcom) Wireless IoT codebase. Extended Inquiry Responses (EIR… Android No fix yet Fix from $1,9502020-02-05 HIGH 7.8 CVE-2019-19273 On Samsung mobile devices with O(8.0) and P(9.0) software and an Exynos 8895 chipset, RKP (aka the Samsung Hypervisor EL2 implementation) allows arbi… Android No fix yet Fix from $1,9502020-02-04 MEDIUM 6.5 CVE-2019-13722 Inappropriate implementation in WebRTC in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a … Chrome 79.0.3945.79+ Fix from $1,6002020-01-14 HIGH 8.8 CVE-2019-13767EPSS 16% Use after free in media picker in Google Chrome prior to 79.0.3945.88 allowed a remote attacker who had compromised the renderer process to potential… Chrome 79.0.3945.88+ Fix from $1,9502020-01-10 HIGH 8.8 CVE-2020-0002 In ih264d_init_decoder of ih264d_api.c, there is a possible out of bounds write due to a use after free. This could lead to remote code execution wit… Android Patch available Fix from $1,9502020-01-08 MEDIUM 6.7 CVE-2019-9470 In dma_sblk_start of abc-pcie.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privil… Android Mitigation only Fix from $1,6002020-01-06 MEDIUM 6.7 CVE-2019-9471 In set_outbound_iatu of abc-pcie.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri… Android Mitigation only Fix from $1,6002020-01-06 HIGH 7.8 CVE-2019-9468 In export_key_der of export_key.cpp, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with … Android 10.0+ Fix from $1,9502020-01-06 HIGH 7.8 CVE-2019-9469 In km_compute_shared_hmac of km4.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of … Android Mitigation only Fix from $1,9502020-01-06 MEDIUM 6.5 CVE-2019-13765 Use-after-free in content delivery manager in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to potentially exploit heap corruption vi… Chrome 78.0.3904.70+ Fix from $1,6002020-01-03