Browse CVEs

HIGH 7.8 CVE-2021-41225 TensorFlow is an open source platform for machine learning. In affected versions TensorFlow's Grappler optimizer has a use of unitialized variable. I… Tensorflow 2.4.4 / 2.5.2+ Fix from $1,9502021-11-05 MEDIUM 6.7 CVE-2021-0634 In display driver, there is a possible memory corruption due to uninitialized data. This could lead to local escalation of privilege with System exec… Android Mitigation only Fix from $1,6002021-10-25 MEDIUM 5.5 CVE-2021-0938 In memzero_explicit of compiler-clang.h, there is a possible bypass of defense in depth due to uninitialized data. This could lead to local informati… Android Mitigation only Fix from $1,6002021-10-25 HIGH 7.1 CVE-2021-37682 TensorFlow is an end-to-end open source platform for machine learning. In affected versions all TFLite operations that use quantization can be made t… Tensorflow 2.3.4 / 2.4.3+ Fix from $1,9502021-08-12 HIGH 8.8 CVE-2021-30578 Uninitialized use in Media in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform out of bounds memory access via a crafted HTM… Chrome 92.0.4515.107+ Fix from $1,9502021-08-03 HIGH 7.8 CVE-2021-0526 In memory management driver, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with… Android Mitigation only Fix from $1,9502021-06-21 HIGH 7.8 CVE-2021-0530 In memory management driver, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with… Android Mitigation only Fix from $1,9502021-06-21 HIGH 7.8 CVE-2021-0495 In memory management driver, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with… Android Mitigation only Fix from $1,9502021-06-11 HIGH 8.8 CVE-2021-0473 In rw_t3t_process_error of rw_t3t.cc, there is a possible double free due to uninitialized data. This could lead to remote code execution over NFC wi… Android Patch available Fix from $1,9502021-06-11 MEDIUM 5.5 CVE-2021-29580 TensorFlow is an end-to-end open source platform for machine learning. The implementation of `tf.raw_ops.FractionalMaxPoolGrad` triggers an undefined… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,6002021-05-14 MEDIUM 5.5 CVE-2021-29581 TensorFlow is an end-to-end open source platform for machine learning. Due to lack of validation in `tf.raw_ops.CTCBeamSearchDecoder`, an attacker ca… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,6002021-05-14 MEDIUM 5.5 CVE-2021-21218 Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from proces… Chrome 90.0.4430.72+ Fix from $1,6002021-04-26 MEDIUM 5.5 CVE-2021-0463 In convertToHidl of convert.cpp, there is a possible out of bounds read due to uninitialized data from ReturnFrameworkMessage. This could lead to loc… Android Mitigation only Fix from $1,6002021-03-10 HIGH 8.8 CVE-2021-21190 Uninitialized data in PDFium in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from proces… Chrome 89.0.4389.72+ Fix from $1,9502021-03-09 MEDIUM 6.5 CVE-2020-16042 Uninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to obtain potentially sensitive information from process mem… Chrome 87.0.4280.88+ Fix from $1,6002021-01-08 MEDIUM 5.3 CVE-2020-26266 In affected versions of TensorFlow under certain cases a saved model can trigger use of uninitialized values during code execution. This is caused by… Tensorflow 1.15.5 / 2.0.4+ Fix from $1,6002020-12-10 MEDIUM 5.5 CVE-2020-15989 Uninitialized data in PDFium in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from proces… Chrome 86.0.4240.75+ Fix from $1,6002020-11-03 MEDIUM 6.5 CVE-2020-0411 In ~AACExtractor() of AACExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could lead to remote information disc… Android Patch available Fix from $1,6002020-10-14 HIGH 7.1 CVE-2020-15193 In Tensorflow before versions 2.2.1 and 2.3.1, the implementation of `dlpack.to_dlpack` can be made to use uninitialized memory resulting in further … Tensorflow Patch available Fix from $1,9502020-09-25 HIGH 7.5 CVE-2020-0300 In NFC, there is a possible out of bounds read due to uninitialized data. This could lead to remote information disclosure with no additional executi… Android Mitigation only Fix from $1,9502020-09-18 MEDIUM 6.7 CVE-2020-0326 In NFC, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with System execution pri… Android Mitigation only Fix from $1,6002020-09-18 MEDIUM 6.5 CVE-2020-0361 In libDRCdec, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no addition… Android Mitigation only Fix from $1,6002020-09-17 MEDIUM 6.5 CVE-2020-0340 In libcodec2_soft_mp3dec, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with… Android Mitigation only Fix from $1,6002020-09-17 HIGH 8.8 CVE-2020-0321 In the mp3 extractor, there is a possible out of bounds write due to uninitialized data. This could lead to remote code execution with no additional … Android Mitigation only Fix from $1,9502020-09-17 MEDIUM 6.5 CVE-2020-0195 In ihevcd_iquant_itrans_recon_ctb of ihevcd_iquant_itrans_recon_ctb.c and related functions, there is a possible information disclosure due to uninit… Android Patch available Fix from $1,6002020-06-11 MEDIUM 5.5 CVE-2020-0101 In BnCrypto::onTransact of ICrypto.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information di… Android Patch available Fix from $1,6002020-05-14 MEDIUM 6.8 CVE-2019-20785 An issue was discovered on LG mobile devices with Android OS 8.0 and 8.1 software for the DTAG carrier. RILD in the radio layer uses an uninitialized… Android Mitigation only Fix from $1,6002020-04-17 MEDIUM 6.3 CVE-2020-6444 Uninitialized use in WebRTC in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… Chrome 81.0.4044.92+ Fix from $1,6002020-04-13 MEDIUM 6.5 CVE-2020-0049 In onReadBuffer() of StreamingSource.cpp, there is a possible information disclosure due to uninitialized data. This could lead to remote information… Android Mitigation only Fix from $1,6002020-03-10 MEDIUM 5.5 CVE-2020-0048 In onTransact of IAudioFlinger.cpp, there is a possible stack information leak due to uninitialized data. This could lead to local information disclo… Android Mitigation only Fix from $1,6002020-03-10