Browse CVEs

HIGH 7.8 CVE-2021-0576 In flv extractor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no add… Android Mitigation only Fix from $1,9502021-08-17 HIGH 7.8 CVE-2021-0593 In sendDevicePickedIntent of DevicePickerFragment.java, there is a possible way to invoke a privileged broadcast receiver due to a confused deputy. T… Android Patch available Fix from $1,9502021-08-17 HIGH 7.8 CVE-2021-0640 In noteAtomLogged of StatsdStats.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p… Android Mitigation only Fix from $1,9502021-08-17 HIGH 7.8 CVE-2021-0645 In shouldBlockFromTree of ExternalStorageProvider.java, there is a possible permissions bypass. This could lead to local escalation of privilege, all… Android Patch available Fix from $1,9502021-08-17 HIGH 7.3 CVE-2021-0591 In sendReplyIntentToReceiver of BluetoothPermissionActivity.java, there is a possible way to invoke privileged broadcast receivers due to a confused … Android Patch available Fix from $1,9502021-08-17 MEDIUM 6.5 CVE-2021-0578 In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a proximal … Android Mitigation only Fix from $1,6002021-08-17 MEDIUM 6.5 CVE-2021-0579 In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a proximal … Android Mitigation only Fix from $1,6002021-08-17 MEDIUM 6.5 CVE-2021-0580 In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a proximal … Android Mitigation only Fix from $1,6002021-08-17 MEDIUM 6.5 CVE-2021-0581 In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a proximal … Android Mitigation only Fix from $1,6002021-08-17 MEDIUM 6.5 CVE-2021-0582 In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a proximal … Android Mitigation only Fix from $1,6002021-08-17 MEDIUM 5.5 CVE-2021-0584 In verifyBufferObject of Parcel.cpp, there is a possible out of bounds read due to an improper input validation. This could lead to local information… Android Patch available Fix from $1,6002021-08-17 MEDIUM 5.5 CVE-2021-0639 In multiple functions of libl3oemcrypto.cpp, there is a possible weakness in the existing obfuscation mechanism due to the way sensitive data is hand… Android Mitigation only Fix from $1,6002021-08-17 MEDIUM 5.5 CVE-2021-0641 In getAvailableSubscriptionInfoList of SubscriptionController.java, there is a possible disclosure of unique identifiers due to a missing permission … Android Patch available Fix from $1,6002021-08-17 MEDIUM 5.5 CVE-2021-0642 In onResume of VoicemailSettingsFragment.java, there is a possible way to retrieve a trackable identifier without permissions due to a missing permis… Android Patch available Fix from $1,6002021-08-17 MEDIUM 6.6 CVE-2021-37690 TensorFlow is an end-to-end open source platform for machine learning. In affected versions when running shape functions, some functions (such as `Mu… Tensorflow 2.3.4 / 2.4.3+ Fix from $1,6002021-08-13 HIGH 8.8 CVE-2021-37678 TensorFlow is an end-to-end open source platform for machine learning. In affected versions TensorFlow and Keras can be tricked to perform arbitrary … Tensorflow 2.3.4 / 2.4.3+ Fix from $1,9502021-08-12 HIGH 7.8 CVE-2021-37679 TensorFlow is an end-to-end open source platform for machine learning. In affected versions it is possible to nest a `tf.map_fn` within another `tf.m… Tensorflow 2.3.4 / 2.4.3+ Fix from $1,9502021-08-12 HIGH 7.1 CVE-2021-37682 TensorFlow is an end-to-end open source platform for machine learning. In affected versions all TFLite operations that use quantization can be made t… Tensorflow 2.3.4 / 2.4.3+ Fix from $1,9502021-08-12 MEDIUM 5.5 CVE-2021-37677 TensorFlow is an end-to-end open source platform for machine learning. In affected versions the shape inference code for `tf.raw_ops.Dequantize` has … Tensorflow 2.3.4 / 2.4.3+ Fix from $1,6002021-08-12 MEDIUM 5.5 CVE-2021-37683 TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of division in TFLite is [vulnerable t… Tensorflow 2.3.4 / 2.4.3+ Fix from $1,6002021-08-12 MEDIUM 5.5 CVE-2021-37684 TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementations of pooling in TFLite are vulnerable t… Tensorflow 2.3.4 / 2.4.3+ Fix from $1,6002021-08-12 MEDIUM 5.5 CVE-2021-37685 TensorFlow is an end-to-end open source platform for machine learning. In affected versions TFLite's [`expand_dims.cc`](https://github.com/tensorflow… Tensorflow 2.3.4 / 2.4.3+ Fix from $1,6002021-08-12 MEDIUM 5.5 CVE-2021-37687 TensorFlow is an end-to-end open source platform for machine learning. In affected versions TFLite's [`GatherNd` implementation](https://github.com/t… Tensorflow 2.3.4 / 2.4.3+ Fix from $1,6002021-08-12 MEDIUM 5.5 CVE-2021-37691 TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can craft a TFLite model that would trigger a… Tensorflow 2.3.4 / 2.4.3+ Fix from $1,6002021-08-12 MEDIUM 5.5 CVE-2021-37692 TensorFlow is an end-to-end open source platform for machine learning. In affected versions under certain conditions, Go code can trigger a segfault … Tensorflow 2.6.0+ Fix from $1,6002021-08-12 HIGH 7.8 CVE-2021-37663 TensorFlow is an end-to-end open source platform for machine learning. In affected versions due to incomplete validation in `tf.raw_ops.QuantizeV2`, … Tensorflow 2.3.4 / 2.4.3+ Fix from $1,9502021-08-12 HIGH 7.8 CVE-2021-37665 TensorFlow is an end-to-end open source platform for machine learning. In affected versions due to incomplete validation in MKL implementation of req… Tensorflow 2.3.4 / 2.4.3+ Fix from $1,9502021-08-12 MEDIUM 5.5 CVE-2021-37668 TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause denial of service in applications s… Tensorflow 2.3.4 / 2.4.3+ Fix from $1,6002021-08-12 MEDIUM 5.5 CVE-2021-37669 TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause denial of service in applications s… Tensorflow 2.3.4 / 2.4.3+ Fix from $1,6002021-08-12 MEDIUM 5.5 CVE-2021-37670 TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can read from outside of bounds of heap alloc… Tensorflow 2.3.4 / 2.4.3+ Fix from $1,6002021-08-12