Browse CVEs

MEDIUM 5.5 CVE-2021-25413 Improper sanitization of incoming intent in Samsung Contacts prior to SMR JUN-2021 Release 1 allows local attackers to get permissions to access arbi… Android No fix yet Fix from $1,6002021-06-11 MEDIUM 5.5 CVE-2021-25415 Assuming EL1 is compromised, an improper address validation in RKP prior to SMR JUN-2021 Release 1 allows local attackers to remap EL2 memory as writ… Android Mitigation only Fix from $1,6002021-06-11 HIGH 7.8 CVE-2021-25407 A possible out of bounds write vulnerability in NPU driver prior to SMR JUN-2021 Release 1 allows arbitrary memory write. Android No fix yet Fix from $1,9502021-06-11 HIGH 7.8 CVE-2021-25408 A possible buffer overflow vulnerability in NPU driver prior to SMR JUN-2021 Release 1 allows arbitrary memory write and code execution. Android Mitigation only Fix from $1,9502021-06-11 MEDIUM 6.7 CVE-2021-25396 An improper input validation vulnerability in NPU firmware prior to SMR MAY-2021 Release 1 allows arbitrary memory write and code execution. Android Mitigation only Fix from $1,6002021-06-11 MEDIUM 5.5 CVE-2021-25397 An improper access control vulnerability in TelephonyUI prior to SMR MAY-2021 Release 1 allows local attackers to write arbitrary files of telephony … Android No fix yet Fix from $1,6002021-06-11 CRITICAL 10.0 CVE-2021-25387 An improper input validation vulnerability in sflacfd_get_frm() in libsflacextractor library prior to SMR MAY-2021 Release 1 allows attackers to exec… Android Mitigation only Fix from $2,3002021-06-11 CRITICAL 9.8 CVE-2021-25383 An improper input validation vulnerability in scmn_mfal_read() in libsapeextractor library prior to SMR MAY-2021 Release 1 allows attackers to execut… Android Mitigation only Fix from $2,3002021-06-11 CRITICAL 9.8 CVE-2021-25384 An improper input validation vulnerability in sdfffd_parse_chunk_PROP() with Sample Rate Chunk in libsdffextractor library prior to SMR MAY-2021 Rele… Android Mitigation only Fix from $2,3002021-06-11 CRITICAL 9.8 CVE-2021-25385 An improper input validation vulnerability in sdfffd_parse_chunk_PROP() in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers … Android Mitigation only Fix from $2,3002021-06-11 CRITICAL 9.8 CVE-2021-25386 An improper input validation vulnerability in sdfffd_parse_chunk_FVER() in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers … Android Mitigation only Fix from $2,3002021-06-11 HIGH 7.1 CVE-2021-25388 Improper caller check vulnerability in Knox Core prior to SMR MAY-2021 Release 1 allows attackers to install arbitrary app. Android Mitigation only Fix from $1,9502021-06-11 MEDIUM 6.1 CVE-2021-25389 Improper running task check in S Secure prior to SMR MAY-2021 Release 1 allows attackers to use locked app without authentication. Android Mitigation only Fix from $1,6002021-06-11 MEDIUM 5.5 CVE-2021-25392 Improper protection of backup path configuration in Samsung Dex prior to SMR MAY-2021 Release 1 allows local attackers to get sensitive information v… Android No fix yet Fix from $1,6002021-06-11 MEDIUM 5.5 CVE-2021-25393 Improper sanitization of incoming intent in SecSettings prior to SMR MAY-2021 Release 1 allows local attackers to get permissions to access system ui… Android No fix yet Fix from $1,6002021-06-11 HIGH 7.8 CVE-2021-22548 An attacker can change the pointer to untrusted memory to point to trusted memory region which causes copying trusted memory to trusted memory, if th… Asylo 0.6.2+ Fix from $1,9502021-06-08 HIGH 7.8 CVE-2021-22549 An attacker can modify the address to point to trusted memory to overwrite arbitrary trusted memory. It is recommended to update past 0.6.2 or git co… Asylo 0.6.2+ Fix from $1,9502021-06-08 HIGH 7.8 CVE-2021-22550 An attacker can modify the pointers in enclave memory to overwrite arbitrary memory addresses within the secure enclave. It is recommended to update … Asylo 0.6.3+ Fix from $1,9502021-06-08 HIGH 8.8 CVE-2021-30521 Heap buffer overflow in Autofill in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker to perform out of bounds memory access v… Chrome 91.0.4472.77+ Fix from $1,9502021-06-07 HIGH 8.8 CVE-2021-30522 Use after free in WebAudio in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… Chrome 91.0.4472.77+ Fix from $1,9502021-06-07 HIGH 8.8 CVE-2021-30523 Use after free in WebRTC in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption via a crafted SCTP p… Chrome 91.0.4472.77+ Fix from $1,9502021-06-07 HIGH 8.8 CVE-2021-30524 Use after free in TabStrip in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to potent… Chrome 91.0.4472.77+ Fix from $1,9502021-06-07 HIGH 8.8 CVE-2021-30525 Use after free in TabGroups in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to poten… Chrome 91.0.4472.77+ Fix from $1,9502021-06-07 HIGH 8.8 CVE-2021-30526 Out of bounds write in TabStrip in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to p… Chrome 91.0.4472.77+ Fix from $1,9502021-06-07 HIGH 8.8 CVE-2021-30527 Use after free in WebUI in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to potential… Chrome 91.0.4472.77+ Fix from $1,9502021-06-07 HIGH 8.8 CVE-2021-30528 Use after free in WebAuthentication in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker who had compromised the renderer proc… Chrome 91.0.4472.77+ Fix from $1,9502021-06-07 HIGH 8.8 CVE-2021-30529 Use after free in Bookmarks in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to poten… Chrome 91.0.4472.77+ Fix from $1,9502021-06-07 HIGH 8.8 CVE-2021-30530 Out of bounds memory access in WebAudio in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to perform out of bounds memory access via a… Chrome 91.0.4472.77+ Fix from $1,9502021-06-07 HIGH 8.8 CVE-2021-30535 Double free in ICU in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chrome 91.0.4472.77+ Fix from $1,9502021-06-07 HIGH 8.8 CVE-2021-30542 Use after free in Tab Strip in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to poten… Chrome 91.0.4472.77+ Fix from $1,9502021-06-07