Browse CVEs

MEDIUM 5.5 CVE-2021-0518 In Wi-Fi, there is a possible leak of location-sensitive data due to a missing permission check. This could lead to local information disclosure with… Android Mitigation only Fix from $1,6002021-07-14 MEDIUM 5.5 CVE-2021-0588 In processInboundMessage of MceStateMachine.java, there is a possible SMS disclosure due to a missing permission check. This could lead to local info… Android Mitigation only Fix from $1,6002021-07-14 MEDIUM 5.5 CVE-2021-0597 In notifyProfileAdded and notifyProfileRemoved of SipService.java, there is a possible way to retrieve SIP account names due to a missing permission … Android Mitigation only Fix from $1,6002021-07-14 MEDIUM 5.5 CVE-2021-0599 In scheduleTimeoutLocked of NotificationRecord.java, there is a possible disclosure of a sensitive identifier via broadcasted intent due to a confuse… Android Mitigation only Fix from $1,6002021-07-14 MEDIUM 5.5 CVE-2021-0601 In encodeFrames of avc_enc_fuzzer.cpp, there is a possible out of bounds write due to a double free. This could lead to local information disclosure … Android Mitigation only Fix from $1,6002021-07-14 MEDIUM 5.5 CVE-2021-0604 In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible way to share private files over Bluetooth due to a confused deputy. This co… Android Patch available Fix from $1,6002021-07-14 MEDIUM 5.5 CVE-2021-0654 In isRealSnapshot of TaskThumbnailView.java, there is possible data exposure due to a missing permission check. This could lead to local information … Android Mitigation only Fix from $1,6002021-07-14 HIGH 7.8 CVE-2021-25428 Improper validation check vulnerability in PackageManager prior to SMR July-2021 Release 1 allows untrusted applications to get dangerous level permi… Android Mitigation only Fix from $1,9502021-07-08 HIGH 7.5 CVE-2021-25426 Improper component protection vulnerability in SmsViewerActivity of Samsung Message prior to SMR July-2021 Release 1 allows untrusted applications to… Android No fix yet Fix from $1,9502021-07-08 MEDIUM 6.5 CVE-2021-25427 SQL injection vulnerability in Bluetooth prior to SMR July-2021 Release 1 allows unauthorized access to paired device information Android Mitigation only Fix from $1,6002021-07-08 HIGH 8.8 CVE-2021-30557EPSS 12% Use after free in TabGroups in Google Chrome prior to 91.0.4472.114 allowed an attacker who convinced a user to install a malicious extension to pote… Chrome 91.0.4472.114+ Fix from $1,9502021-07-02 HIGH 8.8 CVE-2021-30554 KEVEPSS 7% Use after free in WebGL in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 91.0.4472.114+ Fix from $1,9502021-07-02 HIGH 8.8 CVE-2021-30555 Use after free in Sharing in Google Chrome prior to 91.0.4472.114 allowed an attacker who convinced a user to install a malicious extension to potent… Chrome 91.0.4472.114+ Fix from $1,9502021-07-02 HIGH 8.8 CVE-2021-30556 Use after free in WebAudio in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… Chrome 91.0.4472.114+ Fix from $1,9502021-07-02 CRITICAL 9.1 CVE-2021-35958 TensorFlow through 2.5.0 allows attackers to overwrite arbitrary files via a crafted archive when tf.keras.utils.get_file is used with extract=True. … Tensorflow after 2.5.0 Fix from $2,3002021-06-30 HIGH 7.8 CVE-2021-22545 An attacker can craft a specific IdaPro *.i64 file that will cause the BinDiff plugin to load an invalid memory offset. This can allow the attacker t… Bindiff 7.0+ Fix from $1,9502021-06-29 HIGH 7.8 CVE-2021-0536 In dropFile of WiFiInstaller, there is a way to delete files accessible to CertInstaller due to a confused deputy. This could lead to local escalatio… Android Mitigation only Fix from $1,9502021-06-22 HIGH 7.8 CVE-2021-0539 In archiveStoredConversation of MmsService.java, there is a possible way to archive message conversation without user consent due to a missing permis… Android Mitigation only Fix from $1,9502021-06-22 HIGH 7.8 CVE-2021-0547 In onReceive of NetInitiatedActivity.java, there is a possible way to supply an attacker-controlled value to a GPS HAL handler due to a missing permi… Android Mitigation only Fix from $1,9502021-06-22 HIGH 7.8 CVE-2021-0548 In rw_i93_send_to_lower of rw_i93.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p… Android Mitigation only Fix from $1,9502021-06-22 HIGH 7.8 CVE-2021-0550 In onLoadFailed of AnnotateActivity.java, there is a possible way to gain WRITE_EXTERNAL_STORAGE permissions without user consent due to a confused d… Android Mitigation only Fix from $1,9502021-06-22 HIGH 7.8 CVE-2021-0607 In iaxxx_calc_i2s_div of iaxxx-codec.c, there is a possible hardware port write with user controlled data due to a missing bounds check. This could l… Android Mitigation only Fix from $1,9502021-06-22 HIGH 7.8 CVE-2021-0608 In handleAppLaunch of AppLaunchActivity.java, there is a possible arbitrary activity launch due to a confused deputy. This could lead to local escala… Android Mitigation only Fix from $1,9502021-06-22 HIGH 7.3 CVE-2021-0537 In onCreate of WiFiInstaller.java, there is a possible way to install a malicious Hotspot 2.0 configuration due to a tapjacking/overlay attack. This … Android Patch available Fix from $1,9502021-06-22 HIGH 7.3 CVE-2021-0538 In onCreate of EmergencyCallbackModeExitDialog.java, there is a possible exit of emergency callback mode due to a tapjacking/overlay attack. This cou… Android Mitigation only Fix from $1,9502021-06-22 HIGH 7.3 CVE-2021-0553 In onBindViewHolder of AppSwitchPreference.java, there is a possible bypass of device admin setttings due to unclear UI. This could lead to local esc… Android Mitigation only Fix from $1,9502021-06-22 MEDIUM 6.7 CVE-2021-0540 In halWrapperDataCallback of hal_wrapper.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati… Android Mitigation only Fix from $1,6002021-06-22 MEDIUM 6.7 CVE-2021-0543 In phNxpNciHal_process_ext_rsp of phNxpNciHal_ext.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local es… Android Mitigation only Fix from $1,6002021-06-22 MEDIUM 6.7 CVE-2021-0544 In phNxpNciHal_print_res_status of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local es… Android Mitigation only Fix from $1,6002021-06-22 MEDIUM 6.7 CVE-2021-0545 In phNxpNciHal_print_res_status of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local es… Android Mitigation only Fix from $1,6002021-06-22