Browse CVEs

MEDIUM 5.5 CVE-2022-29199 TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.LoadA… Tensorflow 2.6.4 / 2.7.2+ Fix from $1,6002022-05-20 MEDIUM 5.5 CVE-2022-29200 TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.LSTMB… Tensorflow 2.6.4 / 2.7.2+ Fix from $1,6002022-05-20 MEDIUM 5.5 CVE-2022-29207 TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, multiple TensorFlow operations misbehav… Tensorflow 2.6.4 / 2.7.2+ Fix from $1,6002022-05-20 MEDIUM 5.5 CVE-2022-29191 TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.GetSe… Tensorflow 2.6.4 / 2.7.2+ Fix from $1,6002022-05-20 MEDIUM 5.5 CVE-2022-29192 TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.Quant… Tensorflow 2.6.4 / 2.7.2+ Fix from $1,6002022-05-20 MEDIUM 5.5 CVE-2022-29194 TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.Delet… Tensorflow 2.6.4 / 2.7.2+ Fix from $1,6002022-05-20 CRITICAL 9.8 CVE-2022-20120 Product: AndroidVersions: Android kernelAndroid ID: A-203213034References: N/A Android No fix yet Fix from $2,3002022-05-10 HIGH 7.0 CVE-2022-20118 In ion_ioctl and related functions of ion.c, there is a possible use after free due to a race condition. This could lead to local escalation of privi… Android Mitigation only Fix from $1,9502022-05-10 MEDIUM 5.5 CVE-2022-20117 In (TBD) of (TBD), there is a possible way to decrypt local data encrypted by the GSC due to improperly used crypto. This could lead to local informa… Android Mitigation only Fix from $1,6002022-05-10 MEDIUM 5.5 CVE-2022-20119 In private_handle_t of mali_gralloc_buffer.h, there is a possible information disclosure due to uninitialized data. This could lead to local informat… Android Mitigation only Fix from $1,6002022-05-10 MEDIUM 5.5 CVE-2022-20121 In getNodeValue of USCCDMPlugin.java, there is a possible disclosure of ICCID due to a missing permission check. This could lead to local information… Android Mitigation only Fix from $1,6002022-05-10 HIGH 7.8 CVE-2021-39738 In CarSetings, there is a possible to pair BT device bypassing user's consent due to a missing permission check. This could lead to local escalation … Android Mitigation only Fix from $1,9502022-05-10 HIGH 7.8 CVE-2022-20113 In mPreference of DefaultUsbConfigurationPreferenceController.java, there is a possible way to enable file transfer mode due to a logic error in the … Android Patch available Fix from $1,9502022-05-10 HIGH 7.8 CVE-2022-20114 In placeCall of TelecomManager.java, there is a possible way for an application to keep itself running with foreground service importance due to a pe… Android Patch available Fix from $1,9502022-05-10 HIGH 7.8 CVE-2022-20116 In onEntryUpdated of OngoingCallController.kt, it is possible to launch non-exported activities due to intent redirection. This could lead to local e… Android Patch available Fix from $1,9502022-05-10 MEDIUM 6.8 CVE-2022-20009 In various functions of the USB gadget subsystem, there is a possible out of bounds write due to a missing bounds check. This could lead to local esc… Android Patch available Fix from $1,6002022-05-10 MEDIUM 6.5 CVE-2022-20010 In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote informati… Android Patch available Fix from $1,6002022-05-10 MEDIUM 5.5 CVE-2022-20011 In getArray of NotificationManagerService.java , there is a possible leak of one user notifications to another due to missing check. This could lead … Android Patch available Fix from $1,6002022-05-10 MEDIUM 5.5 CVE-2022-20112 In getAvailabilityStatus of PrivateDnsPreferenceController.java, there is a possible way for a guest user to change private DNS settings due to a per… Android Mitigation only Fix from $1,6002022-05-10 MEDIUM 5.5 CVE-2022-20115 In broadcastServiceStateChanged of TelephonyRegistry.java, there is a possible way to learn base station information without location permission due … Android Patch available Fix from $1,6002022-05-10 HIGH 7.8 CVE-2022-20004 In checkSlicePermission of SliceManagerService.java, it is possible to access any slice URI due to improper input validation. This could lead to loca… Android Patch available Fix from $1,9502022-05-10 HIGH 7.8 CVE-2022-20005 In validateApkInstallLocked of PackageInstallerSession.java, there is a way to force a mismatch between running code and a parsed APK . This could le… Android Patch available Fix from $1,9502022-05-10 HIGH 7.0 CVE-2022-20006 In several functions of KeyguardServiceWrapper.java and related files,, there is a possible way to briefly view what's under the lockscreen due to a … Android Mitigation only Fix from $1,9502022-05-10 HIGH 7.0 CVE-2022-20007 In startActivityForAttachedApplicationIfNeeded of RootWindowContainer.java, there is a possible way to overlay an app that believes it's still in the… Android Patch available Fix from $1,9502022-05-10 MEDIUM 5.5 CVE-2021-39670 In setStream of WallpaperManager.java, there is a possible way to cause a permanent DoS due to improper input validation. This could lead to local de… Android Patch available Fix from $1,6002022-05-10 MEDIUM 5.5 CVE-2021-39700 In the policies of adbd.te, there was a logic error which caused the CTS Listening Ports Test to report invalid results. This could lead to local inf… Android Mitigation only Fix from $1,6002022-05-10 HIGH 8.4 CVE-2022-20111 In ion, there is a possible use after free due to incorrect error handling. This could lead to local escalation of privilege with no additional execu… Android Mitigation only Fix from $1,9502022-05-03 HIGH 7.8 CVE-2022-21743 In ion, there is a possible use after free due to an integer overflow. This could lead to local escalation of privilege with no additional execution … Android Mitigation only Fix from $1,9502022-05-03 MEDIUM 5.5 CVE-2022-20104 In aee daemon, there is a possible information disclosure due to improper access control. This could lead to local information disclosure with no add… Android Mitigation only Fix from $1,6002022-05-03 MEDIUM 5.5 CVE-2022-20101 In aee daemon, there is a possible information disclosure due to a path traversal. This could lead to local information disclosure with no additional… Android Mitigation only Fix from $1,6002022-05-03