Browse CVEs

MEDIUM 5.5 CVE-2021-0616 In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no addit… Android Mitigation only Fix from $1,6002021-10-25 MEDIUM 5.5 CVE-2021-0617 In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no addit… Android Mitigation only Fix from $1,6002021-10-25 MEDIUM 5.5 CVE-2021-0618 In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no addit… Android Mitigation only Fix from $1,6002021-10-25 MEDIUM 5.5 CVE-2021-0938 In memzero_explicit of compiler-clang.h, there is a possible bypass of defense in depth due to uninitialized data. This could lead to local informati… Android Mitigation only Fix from $1,6002021-10-25 MEDIUM 5.5 CVE-2021-0409 In flv extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no ad… Android Mitigation only Fix from $1,6002021-10-25 MEDIUM 5.5 CVE-2021-0410 In flv extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no ad… Android Mitigation only Fix from $1,6002021-10-25 MEDIUM 5.5 CVE-2021-0411 In flv extractor, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no addition… Android Mitigation only Fix from $1,6002021-10-25 MEDIUM 5.5 CVE-2021-0412 In flv extractor, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no addit… Android Mitigation only Fix from $1,6002021-10-25 MEDIUM 5.5 CVE-2021-0413 In flv extractor, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no addit… Android Mitigation only Fix from $1,6002021-10-25 MEDIUM 5.5 CVE-2021-0414 In flv extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no addit… Android Mitigation only Fix from $1,6002021-10-25 MEDIUM 5.5 CVE-2021-0706 In startListening of PluginManagerImpl.java, there is a possible way to disable arbitrary app components due to a missing permission check. This coul… Android Mitigation only Fix from $1,6002021-10-22 MEDIUM 5.5 CVE-2021-0643 In getAllSubInfoList of SubscriptionController.java, there is a possible way to retrieve a long term identifier without the correct permissions due t… Android Mitigation only Fix from $1,6002021-10-22 MEDIUM 5.5 CVE-2021-0651 In loadLabel of PackageItemInfo.java, there is a possible way to DoS a device by having a long label in an app due to incorrect input validation. Thi… Android Mitigation only Fix from $1,6002021-10-22 HIGH 7.3 CVE-2021-0583 In onCreate of BluetoothPairingDialog, there is a possible way to enable Bluetooth without user consent due to a tapjacking/overlay attack. This coul… Android Mitigation only Fix from $1,9502021-10-11 HIGH 8.0 CVE-2021-25485 Path traversal vulnerability in FactoryAirCommnadManger prior to SMR Oct-2021 Release 1 allows attackers to write file as system UID via BT remote so… Android Mitigation only Fix from $1,9502021-10-06 HIGH 7.5 CVE-2021-25480 A lack of replay attack protection in GUTI REALLOCATION COMMAND message process in Qualcomm modem prior to SMR Oct-2021 Release 1 can lead to remote … Android Mitigation only Fix from $1,9502021-10-06 HIGH 7.2 CVE-2021-25478 A possible stack-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code exec… Android Mitigation only Fix from $1,9502021-10-06 HIGH 7.2 CVE-2021-25479 A possible heap-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execu… Android Mitigation only Fix from $1,9502021-10-06 MEDIUM 6.7 CVE-2021-25481 An improper error handling in Exynos CP booting driver prior to SMR Oct-2021 Release 1 allows local attackers to bypass a Secure Memory Protector of … Android Mitigation only Fix from $1,6002021-10-06 MEDIUM 6.5 CVE-2021-25483 Lack of boundary checking of a buffer in livfivextractor library prior to SMR Oct-2021 Release 1 allows OOB read. Android Mitigation only Fix from $1,6002021-10-06 MEDIUM 6.0 CVE-2021-25490 A keyblob downgrade attack in keymaster prior to SMR Oct-2021 Release 1 allows attacker to trigger IV reuse vulnerability with privileged process. Android Mitigation only Fix from $1,6002021-10-06 MEDIUM 5.5 CVE-2021-25488 Lack of boundary checking of a buffer in recv_data() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read. Android Mitigation only Fix from $1,6002021-10-06 HIGH 7.9 CVE-2021-25470 An improper caller check logic of SMC call in TEEGRIS secure OS prior to SMR Oct-2021 Release 1 can be used to compromise TEE. Android Mitigation only Fix from $1,9502021-10-06 HIGH 7.5 CVE-2021-25471 A lack of replay attack protection in Security Mode Command process prior to SMR Oct-2021 Release 1 can lead to denial of service on mobile network c… Android Mitigation only Fix from $1,9502021-10-06 MEDIUM 6.7 CVE-2021-25467 Assuming system privilege is gained, possible buffer overflow vulnerabilities in the Vision DSP kernel driver prior to SMR Oct-2021 Release 1 allows … Android Mitigation only Fix from $1,6002021-10-06 MEDIUM 6.7 CVE-2021-25469 A possible stack-based buffer overflow vulnerability in Widevine trustlet prior to SMR Oct-2021 Release 1 allows arbitrary code execution. Android Mitigation only Fix from $1,6002021-10-06 MEDIUM 6.7 CVE-2021-25475 A possible heap-based buffer overflow vulnerability in DSP kernel driver prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execu… Android Mitigation only Fix from $1,6002021-10-06 HIGH 7.8 CVE-2021-0635 When extracting the incorrectly formatted flv file, the memory is damaged, the playback interface shows that the video cannot be played, and the log … Android Mitigation only Fix from $1,9502021-10-06 HIGH 7.8 CVE-2021-0636 When extracting the incorrectly formatted avi file, the memory is damaged, the playback interface shows that the video cannot be played, and the log … Android Mitigation only Fix from $1,9502021-10-06 MEDIUM 5.5 CVE-2021-0680 In system properties, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure w… Android Mitigation only Fix from $1,6002021-10-06