Browse CVEs

HIGH 7.8 CVE-2021-0497 In memory management driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no … Android Mitigation only Fix from $1,9502021-06-11 HIGH 7.8 CVE-2021-0498 In memory management driver, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with no add… Android Mitigation only Fix from $1,9502021-06-11 MEDIUM 5.5 CVE-2019-9475 In /proc/net of the kernel filesystem, there is a possible information leak due to a permissions bypass. This could lead to local information disclos… Android Mitigation only Fix from $1,6002021-06-11 HIGH 7.8 CVE-2021-25412 An improper access control vulnerability in genericssoservice prior to SMR JUN-2021 Release 1 allows local attackers to execute protected activity wi… Android Mitigation only Fix from $1,9502021-06-11 HIGH 7.8 CVE-2021-25414 Improper sanitization of incoming intent in Samsung Contacts prior to SMR JUN-2021 Release 1 allows local attackers to copy or overwrite arbitrary fi… Android No fix yet Fix from $1,9502021-06-11 HIGH 7.5 CVE-2021-25417 Improper authorization in SDP SDK prior to SMR JUN-2021 Release 1 allows access to internal storage. Android Mitigation only Fix from $1,9502021-06-11 HIGH 7.1 CVE-2021-25410 Improper access control of a component in CallBGProvider prior to SMR JUN-2021 Release 1 allows local attackers to access arbitrary files with an esc… Android No fix yet Fix from $1,9502021-06-11 MEDIUM 6.5 CVE-2021-25416 Assuming EL1 is compromised, an improper address validation in RKP prior to SMR JUN-2021 Release 1 allows local attackers to create executable kernel… Android Mitigation only Fix from $1,6002021-06-11 MEDIUM 5.5 CVE-2021-25413 Improper sanitization of incoming intent in Samsung Contacts prior to SMR JUN-2021 Release 1 allows local attackers to get permissions to access arbi… Android No fix yet Fix from $1,6002021-06-11 MEDIUM 5.5 CVE-2021-25415 Assuming EL1 is compromised, an improper address validation in RKP prior to SMR JUN-2021 Release 1 allows local attackers to remap EL2 memory as writ… Android Mitigation only Fix from $1,6002021-06-11 HIGH 7.8 CVE-2021-25407 A possible out of bounds write vulnerability in NPU driver prior to SMR JUN-2021 Release 1 allows arbitrary memory write. Android No fix yet Fix from $1,9502021-06-11 HIGH 7.8 CVE-2021-25408 A possible buffer overflow vulnerability in NPU driver prior to SMR JUN-2021 Release 1 allows arbitrary memory write and code execution. Android Mitigation only Fix from $1,9502021-06-11 MEDIUM 6.7 CVE-2021-25396 An improper input validation vulnerability in NPU firmware prior to SMR MAY-2021 Release 1 allows arbitrary memory write and code execution. Android Mitigation only Fix from $1,6002021-06-11 MEDIUM 5.5 CVE-2021-25397 An improper access control vulnerability in TelephonyUI prior to SMR MAY-2021 Release 1 allows local attackers to write arbitrary files of telephony … Android No fix yet Fix from $1,6002021-06-11 CRITICAL 10.0 CVE-2021-25387 An improper input validation vulnerability in sflacfd_get_frm() in libsflacextractor library prior to SMR MAY-2021 Release 1 allows attackers to exec… Android Mitigation only Fix from $2,3002021-06-11 CRITICAL 9.8 CVE-2021-25383 An improper input validation vulnerability in scmn_mfal_read() in libsapeextractor library prior to SMR MAY-2021 Release 1 allows attackers to execut… Android Mitigation only Fix from $2,3002021-06-11 CRITICAL 9.8 CVE-2021-25384 An improper input validation vulnerability in sdfffd_parse_chunk_PROP() with Sample Rate Chunk in libsdffextractor library prior to SMR MAY-2021 Rele… Android Mitigation only Fix from $2,3002021-06-11 CRITICAL 9.8 CVE-2021-25385 An improper input validation vulnerability in sdfffd_parse_chunk_PROP() in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers … Android Mitigation only Fix from $2,3002021-06-11 CRITICAL 9.8 CVE-2021-25386 An improper input validation vulnerability in sdfffd_parse_chunk_FVER() in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers … Android Mitigation only Fix from $2,3002021-06-11 HIGH 7.1 CVE-2021-25388 Improper caller check vulnerability in Knox Core prior to SMR MAY-2021 Release 1 allows attackers to install arbitrary app. Android Mitigation only Fix from $1,9502021-06-11 MEDIUM 6.1 CVE-2021-25389 Improper running task check in S Secure prior to SMR MAY-2021 Release 1 allows attackers to use locked app without authentication. Android Mitigation only Fix from $1,6002021-06-11 MEDIUM 5.5 CVE-2021-25392 Improper protection of backup path configuration in Samsung Dex prior to SMR MAY-2021 Release 1 allows local attackers to get sensitive information v… Android No fix yet Fix from $1,6002021-06-11 MEDIUM 5.5 CVE-2021-25393 Improper sanitization of incoming intent in SecSettings prior to SMR MAY-2021 Release 1 allows local attackers to get permissions to access system ui… Android No fix yet Fix from $1,6002021-06-11 MEDIUM 5.5 CVE-2021-25382 An improper authorization of using debugging command in Secure Folder prior to SMR Oct-2020 Release 1 allows unauthorized access to contents in Secur… Android Mitigation only Fix from $1,6002021-04-23 HIGH 7.8 CVE-2021-0445 In start of WelcomeActivity.java, there is a possible residual profile due to a confused deputy. This could lead to local escalation of privilege wit… Android Mitigation only Fix from $1,9502021-04-13 MEDIUM 6.6 CVE-2021-0468 In LK, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege for an attacker… Android Mitigation only Fix from $1,6002021-04-13 CRITICAL 9.8 CVE-2021-25360 An improper input validation vulnerability in libswmfextractor library prior to SMR APR-2021 Release 1 allows attackers to execute arbitrary code on … Android Mitigation only Fix from $2,3002021-04-09 HIGH 8.8 CVE-2021-25356 An improper caller check vulnerability in Managed Provisioning prior to SMR APR-2021 Release 1 allows unprivileged application to install arbitrary a… Android No fix yet Fix from $1,9502021-04-09 HIGH 8.8 CVE-2021-25361 An improper access control vulnerability in stickerCenter prior to SMR APR-2021 Release 1 allows local attackers to read or write arbitrary files of … Android Mitigation only Fix from $1,9502021-04-09 HIGH 7.8 CVE-2021-25365 An improper exception control in softsimd prior to SMR APR-2021 Release 1 allows unprivileged applications to access the API in softsimd. Android Mitigation only Fix from $1,9502021-04-09