Browse CVEs

HIGH 7.0 CVE-2021-0955 In pf_write_buf of FuseDaemon.cpp, there is possible memory corruption due to a race condition. This could lead to local escalation of privilege with… Android Mitigation only Fix from $1,9502021-12-15 MEDIUM 6.5 CVE-2021-0964 In C2SoftMP3::process() of C2SoftMp3Dec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote informa… Android Mitigation only Fix from $1,6002021-12-15 MEDIUM 5.5 CVE-2021-0931 In getAlias of BluetoothDevice.java, there is a possible way to create misleading permission dialogs due to missing data filtering. This could lead t… Android Mitigation only Fix from $1,6002021-12-15 MEDIUM 5.0 CVE-2021-0952 In doCropPhoto of PhotoSelectionHandler.java, there is a possible permission bypass due to a confused deputy. This could lead to local information di… Android Mitigation only Fix from $1,6002021-12-15 CRITICAL 9.8 CVE-2021-0889 In Android TV , there is a possible silent pairing due to lack of rate limiting in the pairing flow. This could lead to remote code execution with no… Android Mitigation only Fix from $2,3002021-12-15 HIGH 8.8 CVE-2021-0918 In gatt_process_notification of gatt_cl.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code exe… Android Mitigation only Fix from $1,9502021-12-15 HIGH 7.8 CVE-2021-0649 In stopVpnProfile of Vpn.java, there is a possible VPN profile reset due to a permissions bypass. This could lead to local escalation of privilege CO… Android Mitigation only Fix from $1,9502021-12-15 HIGH 7.8 CVE-2021-0675 In alac decoder, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no a… Android Mitigation only Fix from $1,9502021-12-15 HIGH 7.8 CVE-2021-0799 In ActivityThread.java, there is a possible way to collide the content provider's authorities. This could lead to local escalation of privilege with … Android Mitigation only Fix from $1,9502021-12-15 HIGH 7.3 CVE-2021-0434 In onReceive of BluetoothPermissionRequest.java, there is a possible phishing attack allowing a malicious Bluetooth device to acquire permissions bas… Android Mitigation only Fix from $1,9502021-12-15 HIGH 7.3 CVE-2021-0769 In onCreate of AllowBindAppWidgetActivity.java, there is a possible bypass of user interaction requirements due to unclear UI. This could lead to loc… Android Mitigation only Fix from $1,9502021-12-15 MEDIUM 6.7 CVE-2021-0904 In SRAMROM, there is a possible permission bypass due to an insecure permission setting. This could lead to local escalation of privilege with System… Android Mitigation only Fix from $1,6002021-12-15 MEDIUM 6.5 CVE-2021-0650 In WT_InterpolateNoLoop of eas_wtengine.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote informa… Android Mitigation only Fix from $1,6002021-12-15 MEDIUM 5.5 CVE-2021-0653 In enqueueNotification of NetworkPolicyManagerService.java, there is a possible way to retrieve a trackable identifier due to a missing permission ch… Android Mitigation only Fix from $1,6002021-12-15 MEDIUM 5.5 CVE-2021-0704 In createNoCredentialsPermissionNotification and related functions of AccountManagerService.java, there is a possible way to retrieve accounts from t… Android Mitigation only Fix from $1,6002021-12-15 MEDIUM 5.0 CVE-2021-0919 In getService of IServiceManager.cpp, there is a possible unhandled exception due to an integer overflow. This could lead to local denial of service … Android Mitigation only Fix from $1,6002021-12-15 HIGH 7.8 CVE-2021-25517 An improper input validation vulnerability in LDFW prior to SMR Dec-2021 Release 1 allows attackers to perform arbitrary code execution. Android Mitigation only Fix from $1,9502021-12-08 HIGH 7.5 CVE-2021-25516 An improper check or handling of exceptional conditions in Exynos baseband prior to SMR Dec-2021 Release 1 allows attackers to track locations. Android Mitigation only Fix from $1,9502021-12-08 MEDIUM 6.7 CVE-2021-25518 An improper boundary check in secure_log of LDFW and BL31 prior to SMR Dec-2021 Release 1 allows arbitrary memory write and code execution. Android Mitigation only Fix from $1,6002021-12-08 MEDIUM 6.5 CVE-2021-25514 An improper intent redirection handling in Tags prior to SMR Dec-2021 Release 1 allows attackers to access sensitive information. Android Mitigation only Fix from $1,6002021-12-08 HIGH 7.8 CVE-2021-25510 An improper validation vulnerability in FilterProvider prior to SMR Dec-2021 Release 1 allows local arbitrary code execution. Android Mitigation only Fix from $1,9502021-12-08 HIGH 7.8 CVE-2021-25511 An improper validation vulnerability in FilterProvider prior to SMR Dec-2021 Release 1 allows attackers to write arbitrary files via a path traversal… Android Mitigation only Fix from $1,9502021-12-08 HIGH 7.8 CVE-2021-25512 An improper validation vulnerability in telephony prior to SMR Dec-2021 Release 1 allows attackers to launch certain activities. Android Mitigation only Fix from $1,9502021-12-08 MEDIUM 6.7 CVE-2021-0668 In apusys, there is a possible memory corruption due to incorrect error handling. This could lead to local escalation of privilege with System execut… Android Mitigation only Fix from $1,6002021-11-18 MEDIUM 6.7 CVE-2021-0669 In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution priv… Android Mitigation only Fix from $1,6002021-11-18 MEDIUM 6.7 CVE-2021-0670 In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution priv… Android Mitigation only Fix from $1,6002021-11-18 MEDIUM 6.7 CVE-2021-0671 In apusys, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System executio… Android Mitigation only Fix from $1,6002021-11-18 MEDIUM 5.5 CVE-2021-0672 In Browser app, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no… Android Mitigation only Fix from $1,6002021-11-18 MEDIUM 6.7 CVE-2021-0629 In mdlactl driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execut… Android Mitigation only Fix from $1,6002021-11-18 MEDIUM 6.7 CVE-2021-0655 In mdlactl driver, there is a possible memory corruption due to an incorrect bounds check. This could lead to local escalation of privilege with Syst… Android Mitigation only Fix from $1,6002021-11-18