Browse CVEs

MEDIUM 6.5 CVE-2019-2140 In libxaac, there is a possible information disclosure due to uninitialized data. This could lead to information disclosure with no additional execut… Android Mitigation only Fix from $1,6002019-09-27 HIGH 8.8 CVE-2019-2105 In FileInputStream::Read of file_input_stream.cc, there is a possible memory corruption due to uninitialized data. This could lead to remote code exe… Android Mitigation only Fix from $1,9502019-07-08 MEDIUM 5.5 CVE-2019-2104 In HIDL, safe_union, and other C++ structs/unions being sent to application processes, there are uninitialized fields. This could lead to local infor… Android Mitigation only Fix from $1,6002019-07-08 MEDIUM 5.5 CVE-2019-2118 In various functions of Parcel.cpp, there are uninitialized or partially initialized stack variables. These could lead to local information disclosur… Android Mitigation only Fix from $1,6002019-07-08 MEDIUM 6.5 CVE-2019-5818 Uninitialized data in media in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from proces… Chrome 74.0.3729.108+ Fix from $1,6002019-06-27 MEDIUM 5.5 CVE-2019-2004 In publishKeyEvent, publishMotionEvent and sendUnchainedFinishedSignal of InputTransport.cpp, there are uninitialized data leading to local informati… Android Mitigation only Fix from $1,6002019-06-19 MEDIUM 5.5 CVE-2018-12011 In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Uninitialized data for socket address lead… Android Patch available Fix from $1,6002019-02-11 HIGH 7.8 CVE-2018-9557 In really_install_package of install.cpp, there is a possible free of arbitrary memory due to uninitialized data. This could lead to local escalation… Android Mitigation only Fix from $1,9502018-12-06 MEDIUM 5.5 CVE-2018-9499 In readVector of iCrypto.cpp, there is a possible invalid read due to uninitialized data. This could lead to local information disclosure from the DR… Android Patch available Fix from $1,6002018-10-02