Browse CVEs

MEDIUM 6.7 CVE-2025-20777 In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious ac… Android Mitigation only Fix from $1,6002025-12-02 HIGH 7.8 CVE-2025-20767 In display, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a malicious actor… Android Mitigation only Fix from $1,9502025-12-02 MEDIUM 6.7 CVE-2025-20769 In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious ac… Android Mitigation only Fix from $1,6002025-12-02 HIGH 7.8 CVE-2025-20763 In mmdvfs, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious act… Android Mitigation only Fix from $1,9502025-12-02 HIGH 7.8 CVE-2025-20764 In smi, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor … Android Mitigation only Fix from $1,9502025-12-02 HIGH 8.8 CVE-2025-13042 Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.166 allowed a remote attacker to potentially exploit heap corruption via a cr… Chrome 142.0.7444.162+ Fix from $1,9502025-11-12 HIGH 8.8 CVE-2025-12727 Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.137 allowed a remote attacker to potentially exploit heap corruption via a cr… Chrome 142.0.7444.134 / 142.0.7444.135+ Fix from $1,9502025-11-10 HIGH 8.1 CVE-2025-11458 Heap buffer overflow in Sync in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to perform an out of bounds memory read via a crafted … Chrome 141.0.7390.65+ Fix from $1,9502025-11-06 HIGH 8.8 CVE-2025-11205 Heap buffer overflow in WebGPU in Google Chrome prior to 141.0.7390.54 allowed a remote attacker who had compromised the renderer process to potentia… Chrome 141.0.7390.54+ Fix from $1,9502025-11-06 HIGH 7.1 CVE-2025-11206 Heap buffer overflow in Video in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform a sandbox escape via a crafted… Chrome 141.0.7390.54+ Fix from $1,9502025-11-06 MEDIUM 6.7 CVE-2025-20749 In charger, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious ac… Android Mitigation only Fix from $1,6002025-11-04 HIGH 7.8 CVE-2025-20723 In gnss driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malic… Android Mitigation only Fix from $1,9502025-10-14 MEDIUM 5.5 CVE-2025-32316 In gralloc4, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with no additiona… Android Mitigation only Fix from $1,6002025-09-05 HIGH 7.8 CVE-2025-48540 In processTransactInternal of RpcState.cpp, there is a possible local out of memory write due to a logic error in the code. This could lead to local … Android Patch available Fix from $1,9502025-09-04 HIGH 7.3 CVE-2025-36907 In draw_surface_image() of abl/android/lib/draw/draw.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to loc… Android Mitigation only Fix from $1,9502025-09-04 MEDIUM 6.7 CVE-2025-36908 In lwis_top_register_io of lwis_device_top.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local esca… Android Mitigation only Fix from $1,6002025-09-04 CRITICAL 9.8 CVE-2025-36897 In unknown of cd_CnMsgCodecUserApi.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code executi… Android Mitigation only Fix from $2,3002025-09-04 HIGH 7.8 CVE-2025-36903 In lwis_io_buffer_write, there is a possible OOB read/write due to improper input validation. This could lead to local escalation of privilege with n… Android Mitigation only Fix from $1,9502025-09-04 HIGH 7.8 CVE-2025-36887 In wl_cfgscan_update_v3_schedscan_results() of wl_cfgscan.c, there is a possible out of bounds write due to an incorrect bounds check. This could le… Android Mitigation only Fix from $1,9502025-09-04 HIGH 7.8 CVE-2024-56190 In wl_update_hidden_ap_ie() of wl_cfgscan.c, there is a possible out of bounds write due to improper input validation. This could lead to local escal… Android Mitigation only Fix from $1,9502025-09-04 HIGH 7.8 CVE-2024-49730 In FuseDaemon.cpp, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with no additio… Android Mitigation only Fix from $1,9502025-09-02 HIGH 8.8 CVE-2025-9132 Out of bounds write in V8 in Google Chrome prior to 139.0.7258.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… Chrome 139.0.7258.138+ Fix from $1,9502025-08-20 HIGH 8.8 CVE-2025-8901 Out of bounds write in ANGLE in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to perform out of bounds memory access via a crafted … Chrome 139.0.7258.127+ Fix from $1,9502025-08-13 MEDIUM 6.7 CVE-2025-20698 In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious … Android Mitigation only Fix from $1,6002025-08-04 MEDIUM 6.7 CVE-2025-20697 In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious … Android Mitigation only Fix from $1,6002025-08-04 HIGH 8.8 CVE-2025-5419 KEVEPSS 8% Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a cra… Chrome 137.0.3296.62 / 137.0.7151.68+ Fix from $1,9502025-06-03 HIGH 8.8 CVE-2025-5280 Out of bounds write in V8 in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… Chrome 137.0.7151.55+ Fix from $1,9502025-05-27 HIGH 7.8 CVE-2025-20979 Out-of-bounds write in libsavscmn prior to Android 15 allows local attackers to execute arbitrary code. Android 15.0+ Fix from $1,9502025-05-07 MEDIUM 5.5 CVE-2025-20980 Out-of-bounds write in libsavscmn prior to Android 15 allows local attackers to cause memory corruption. Android 15.0+ Fix from $1,6002025-05-07 HIGH 7.5 CVE-2025-0649 Incorrect JSON input stringification in Google's Tensorflow serving versions up to 2.18.0 allows for potentially unbounded recursion leading to serve… Tensorflow Serving after 2.18.0 Fix from $1,9502025-05-06