Browse CVEs

MEDIUM 5.5 CVE-2021-39745 In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information … Android Mitigation only Fix from $1,6002022-03-30 MEDIUM 5.5 CVE-2021-39747 In Settings Provider, there is a possible way to list values of non-readable global settings due to a permissions bypass. This could lead to local in… Android Mitigation only Fix from $1,6002022-03-30 MEDIUM 5.5 CVE-2021-39748 In InputMethodEditor, there is a possible way to access some files accessible to Settings due to an unsafe PendingIntent. This could lead to local in… Android Mitigation only Fix from $1,6002022-03-30 MEDIUM 5.5 CVE-2021-39751 In Settings, there is a possible way to read Bluetooth device names without proper permissions due to a missing permission check. This could lead to … Android Mitigation only Fix from $1,6002022-03-30 MEDIUM 5.5 CVE-2021-39753 In DomainVerificationService, there is a possible way to access app domain verification information due to a missing permission check. This could lea… Android Mitigation only Fix from $1,6002022-03-30 MEDIUM 5.5 CVE-2021-39754 In ContextImpl, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosu… Android Mitigation only Fix from $1,6002022-03-30 MEDIUM 5.5 CVE-2021-39755 In DevicePolicyManager, there is a possible way to reveal the existence of an installed package without proper query permissions due to side channel … Android Mitigation only Fix from $1,6002022-03-30 MEDIUM 5.5 CVE-2021-39756 In Framework, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure… Android Mitigation only Fix from $1,6002022-03-30 MEDIUM 5.5 CVE-2021-39757 In PermissionController, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with U… Android Mitigation only Fix from $1,6002022-03-30 MEDIUM 5.5 CVE-2021-39760 In AudioService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclos… Android Mitigation only Fix from $1,6002022-03-30 MEDIUM 5.5 CVE-2021-39761 In Media, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. Th… Android Mitigation only Fix from $1,6002022-03-30 HIGH 7.8 CVE-2021-1000 In createBluetoothDeviceSlice of ConnectedDevicesSliceProvider.java, there is a possible permission bypass due to an unsafe PendingIntent. This could… Android Mitigation only Fix from $1,9502022-03-30 HIGH 7.8 CVE-2021-1033 In createGeneralSlice of ConnectedDevicesSliceProvider.java.java, there is a possible permission bypass due to an unsafe PendingIntent. This could le… Android Mitigation only Fix from $1,9502022-03-30 HIGH 7.8 CVE-2022-0343 A local attacker, as a different local user, may be able to send a HTTP request to 127.0.0.1:10000 after the user (typically a developer) manually in… Perfetto after 24.2 Fix from $1,9502022-03-29 MEDIUM 5.5 CVE-2021-22572 On unix-like systems, the system temporary directory is shared between all users on that system. The root cause is File.createTempFile creates files … Data Transfer Project 0.3.57+ Fix from $1,6002022-03-29 CRITICAL 9.1 CVE-2021-46743 In Firebase PHP-JWT before 6.0.0, an algorithm-confusion issue (e.g., RS256 / HS256) exists via the kid (aka Key ID) header, when multiple types of k… Firebase Php Jwt 6.0.0+ Fix from $2,3002022-03-29 MEDIUM 5.5 CVE-2021-22571 A local attacker could read files from some other users' SA360 reports stored in the /tmp folder during staging process before the files are loaded i… Sa360 Webquery To Bigquery Exporter 1.0.3+ Fix from $1,6002022-03-18 CRITICAL 9.8 CVE-2021-39737 Product: AndroidVersions: Android kernelAndroid ID: A-208229524References: N/A Android No fix yet Fix from $2,3002022-03-16 HIGH 7.8 CVE-2021-39732 In copy_io_entries of lwis_ioctl.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privil… Android Mitigation only Fix from $1,9502022-03-16 HIGH 7.8 CVE-2021-39734 In sendMessage of OneToOneChatImpl.java (? TBD), there is a possible way to send an RCS message without permissions due to a missing permission check… Android Mitigation only Fix from $1,9502022-03-16 HIGH 7.8 CVE-2021-39793 KEV In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the code. This could lead to loca… Android Mitigation only Fix from $1,9502022-03-16 MEDIUM 6.7 CVE-2021-39729 In the TitanM chip, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with Syst… Android Mitigation only Fix from $1,6002022-03-16 MEDIUM 6.7 CVE-2021-39731 In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds write due to an incorrect bounds check. This… Android Mitigation only Fix from $1,6002022-03-16 MEDIUM 6.7 CVE-2021-39733 In amcs_cdev_unlocked_ioctl of audiometrics.c, there is a possible out of bounds write due to improper input validation. This could lead to local esc… Android Mitigation only Fix from $1,6002022-03-16 MEDIUM 6.7 CVE-2021-39736 In prepare_io_entry and prepare_response of lwis_ioctl.c and lwis_periodic_io.c, there is a possible out of bounds write due to an integer overflow. … Android Mitigation only Fix from $1,6002022-03-16 MEDIUM 6.4 CVE-2021-39735 In gasket_alloc_coherent_memory of gasket_page_table.c, there is a possible memory corruption due to a race condition. This could lead to local escal… Android Mitigation only Fix from $1,6002022-03-16 CRITICAL 9.8 CVE-2021-39708 In gatt_process_notification of gatt_cl.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escal… Android Mitigation only Fix from $2,3002022-03-16 CRITICAL 9.8 CVE-2021-39710 Product: AndroidVersions: Android kernelAndroid ID: A-202160245References: N/A Android No fix yet Fix from $2,3002022-03-16 CRITICAL 9.8 CVE-2021-39720 Product: AndroidVersions: Android kernelAndroid ID: A-207433926References: N/A Android No fix yet Fix from $2,3002022-03-16 CRITICAL 9.8 CVE-2021-39723 Product: AndroidVersions: Android kernelAndroid ID: A-209014813References: N/A Android No fix yet Fix from $2,3002022-03-16