Browse CVEs

MEDIUM 6.7 CVE-2020-0012 In fpc_ta_pn_get_unencrypted_image of fpc_ta_pn.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local es… Android Mitigation only Fix from $1,6002020-03-10 MEDIUM 5.0 CVE-2020-0031 In triggerAugmentedAutofillLocked and related functions of Session.java, it is possible for Augmented Autofill to display sensitive information to th… Android Mitigation only Fix from $1,6002020-03-10 CRITICAL 10.0 CVE-2015-0565EPSS 14% NaCl in 2015 allowed the CLFLUSH instruction, making rowhammer attacks possible. Native Client Mitigation only Fix from $2,3002020-02-25 HIGH 8.0 CVE-2020-8860 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung Galaxy S10 Firmware G973FXXS3ASJA, O(8.x), … Android Mitigation only Fix from $1,9502020-02-22 MEDIUM 5.5 CVE-2020-0014 It is possible for a malicious application to construct a TYPE_TOAST window manually and make that window clickable. This could lead to a local escal… Android Mitigation only Fix from $1,6002020-02-13 HIGH 7.5 CVE-2011-3901 Android SQLite Journal before 4.0.1 has an information disclosure vulnerability. Android No fix yet Fix from $1,9502020-02-12 HIGH 7.5 CVE-2009-5139 The SIP implementation on the Gizmo5 software phone provides hashed credentials in a response to an invalid authentication challenge, which makes it … Gizmo5 No fix yet Fix from $1,9502020-02-12 HIGH 8.1 CVE-2019-11516 An issue was discovered in the Bluetooth component of the Cypress (formerly owned by Broadcom) Wireless IoT codebase. Extended Inquiry Responses (EIR… Android No fix yet Fix from $1,9502020-02-05 HIGH 7.8 CVE-2019-19273 On Samsung mobile devices with O(8.0) and P(9.0) software and an Exynos 8895 chipset, RKP (aka the Samsung Hypervisor EL2 implementation) allows arbi… Android No fix yet Fix from $1,9502020-02-04 MEDIUM 6.7 CVE-2020-0003 In onCreate of InstallStart.java, there is a possible package validation bypass due to a time-of-check time-of-use vulnerability. This could lead to … Android Mitigation only Fix from $1,6002020-01-08 MEDIUM 5.5 CVE-2020-0007 In flattenString8 of Sensor.cpp, there is a possible information disclosure of heap memory due to uninitialized data. This could lead to local inform… Android Mitigation only Fix from $1,6002020-01-08 HIGH 7.8 CVE-2020-0001 In getProcessRecordLocked of ActivityManagerService.java isolated apps are not handled correctly. This could lead to local escalation of privilege wi… Android Mitigation only Fix from $1,9502020-01-08 MEDIUM 6.7 CVE-2019-9470 In dma_sblk_start of abc-pcie.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privil… Android Mitigation only Fix from $1,6002020-01-06 MEDIUM 6.7 CVE-2019-9471 In set_outbound_iatu of abc-pcie.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri… Android Mitigation only Fix from $1,6002020-01-06 MEDIUM 5.5 CVE-2019-9472 In DCRYPTO_equals of compare.c, there is a possible timing attack due to improperly used crypto. This could lead to local information disclosure with… Android Mitigation only Fix from $1,6002020-01-06 HIGH 7.8 CVE-2019-9469 In km_compute_shared_hmac of km4.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of … Android Mitigation only Fix from $1,9502020-01-06 HIGH 7.8 CVE-2019-2222 n ihevcd_parse_slice_data of ihevcd_parse_slice.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote c… Android Mitigation only Fix from $1,9502019-12-06 HIGH 7.8 CVE-2019-2223 In ihevcd_ref_list of ihevcd_ref_list.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execut… Android Mitigation only Fix from $1,9502019-12-06 MEDIUM 5.5 CVE-2019-2220 In checkOperation of AppOpsService.java, there is a possible bypass of user interaction requirements due to mishandling application suspend. This cou… Android Mitigation only Fix from $1,6002019-12-06 MEDIUM 5.5 CVE-2019-2226 In device_class_to_int of device_class.cc, there is a possible out of bounds read due to improper casting. This could lead to local information discl… Android Mitigation only Fix from $1,6002019-12-06 MEDIUM 5.5 CVE-2019-2228 In array_find of array.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure in… Android Mitigation only Fix from $1,6002019-12-06 HIGH 7.8 CVE-2019-2217 In setCpuVulkanInUse of GpuStats.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege w… Android Mitigation only Fix from $1,9502019-12-06 HIGH 7.8 CVE-2019-2218 In createSessionInternal of PackageInstallerService.java, there is a possible improper permission grant due to a missing permission check. This could… Android Mitigation only Fix from $1,9502019-12-06 HIGH 7.8 CVE-2019-2210 In load_logging_config of qmi_vs_service.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalati… Android Mitigation only Fix from $1,9502019-11-13 MEDIUM 6.7 CVE-2019-9467 In the Bootloader, there is a possible kernel command injection due to missing command sanitization. This could lead to a local elevation of privileg… Android Mitigation only Fix from $1,6002019-11-13 HIGH 7.5 CVE-2019-2211 In createProjectionMapForQuery of TvProvider.java, there is possible SQL injection. This could lead to local information disclosure with no additiona… Android Mitigation only Fix from $1,9502019-11-13 HIGH 7.4 CVE-2019-2213 In binder_free_transaction of binder.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege … Android Mitigation only Fix from $1,9502019-11-13 MEDIUM 6.8 CVE-2019-2233 In getUserCount and getCount of UserSwitcherController.java, there is possible new user creation due to a logic error. This could lead to local escal… Android Mitigation only Fix from $1,6002019-11-13 MEDIUM 5.5 CVE-2019-2209 In BTA_DmPinReply of bta_dm_api.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information dis… Android Mitigation only Fix from $1,6002019-11-13 MEDIUM 5.5 CVE-2019-2212 In poisson_distribution of random, there is an out of bounds read. This could lead to local information disclosure with no additional execution privi… Android Mitigation only Fix from $1,6002019-11-13