Browse CVEs

MEDIUM 5.5 CVE-2020-0019 In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local information disclosure in the kernel with no addition… Android Mitigation only Fix from $1,6002020-12-14 HIGH 7.8 CVE-2020-0466 In do_epoll_ctl and ep_loop_check_proc of eventpoll.c, there is a possible use after free due to a logic error. This could lead to local escalation o… Android Patch available Fix from $1,9502020-12-14 HIGH 7.5 CVE-2020-0460 In createNameCredentialDialog of CertInstaller.java, there exists the possibility of improperly installed certificates due to a logic error. This cou… Android Patch available Fix from $1,9502020-12-14 HIGH 7.5 CVE-2020-0463 In sdp_server_handle_client_req of sdp_server.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote inf… Android Patch available Fix from $1,9502020-12-14 MEDIUM 6.8 CVE-2020-0465 In various methods of hid-multitouch.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of… Android Patch available Fix from $1,6002020-12-14 MEDIUM 5.5 CVE-2020-0464 In resolv_cache_lookup of res_cache.cpp, there is a possible side channel information disclosure. This could lead to local information disclosure of … Android Patch available Fix from $1,6002020-12-14 MEDIUM 5.5 CVE-2020-0467 In onUserStopped of Vpn.java, there is a possible resetting of user preferences due to a logic issue. This could lead to local information disclosure… Android Patch available Fix from $1,6002020-12-14 MEDIUM 5.5 CVE-2020-0468 In listen() and related functions of TelephonyRegistry.java, there is a possible permissions bypass of location permissions due to a missing permissi… Android Patch available Fix from $1,6002020-12-14 MEDIUM 5.5 CVE-2020-0469 In addEscrowToken of LockSettingsService.java, there is a possible loss of the synthetic password due to logic error. This could lead to local denial… Android Patch available Fix from $1,6002020-12-14 MEDIUM 5.5 CVE-2020-0470 In extend_frame_highbd of restoration.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information… Android Patch available Fix from $1,6002020-12-14 CRITICAL 9.8 CVE-2020-0455 There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-170372514 Android Mitigation only Fix from $2,3002020-12-14 CRITICAL 9.8 CVE-2020-0457 There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-170367562 Android No fix yet Fix from $2,3002020-12-14 HIGH 7.8 CVE-2020-0099 In addWindow of WindowManagerService.java, there is a possible window overlay attack due to an insecure default value. This could lead to local escal… Android Patch available Fix from $1,9502020-12-14 HIGH 7.8 CVE-2020-0440 In createVirtualDisplay of DisplayManagerService.java, there is a possible way to create a trusted virtual display due to a missing permission check.… Android Patch available Fix from $1,9502020-12-14 HIGH 7.8 CVE-2020-0444 In audit_free_lsm_field of auditfilter.c, there is a possible bad kfree due to a logic error in audit_data_to_entry. This could lead to local escalat… Android Patch available Fix from $1,9502020-12-14 HIGH 7.8 CVE-2020-0458 In SPDIFEncoder::writeBurstBufferBytes and related methods of SPDIFEncoder.cpp, there is a possible out of bounds write due to an integer overflow. T… Android Patch available Fix from $1,9502020-12-14 HIGH 7.8 CVE-2020-26267 In affected versions of TensorFlow the tf.raw_ops.DataFormatVecPermute API does not validate the src_format and dst_format attributes. The code assum… Tensorflow 1.15.5 / 2.0.4+ Fix from $1,9502020-12-10 HIGH 7.5 CVE-2020-26269 In TensorFlow release candidate versions 2.4.0rc*, the general implementation for matching filesystem paths to globbing pattern is vulnerable to an a… Tensorflow Patch available Fix from $1,9502020-12-10 MEDIUM 5.3 CVE-2020-26266 In affected versions of TensorFlow under certain cases a saved model can trigger use of uninitialized values during code execution. This is caused by… Tensorflow 1.15.5 / 2.0.4+ Fix from $1,6002020-12-10 MEDIUM 5.3 CVE-2020-7765 This affects the package @firebase/util before 0.3.4. This vulnerability relates to the deepExtend function within the DeepCopy.ts file. Depending on… Firebase\/util 0.3.4+ Fix from $1,6002020-11-16 MEDIUM 5.5 CVE-2020-0454 In callCallbackForRequest of ConnectivityService.java, there is a possible permission bypass due to a missing permission check. This could lead to lo… Android No fix yet Fix from $1,6002020-11-10 CRITICAL 9.8 CVE-2020-0445 There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-168264527 Android No fix yet Fix from $2,3002020-11-10 CRITICAL 9.8 CVE-2020-0446 There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-168264528 Android Mitigation only Fix from $2,3002020-11-10 CRITICAL 9.8 CVE-2020-0447 There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-168251617 Android Mitigation only Fix from $2,3002020-11-10 HIGH 8.8 CVE-2020-0449 In btm_sec_disconnected of btm_sec.cc, there is a possible memory corruption due to a use after free. This could lead to remote code execution in the… Android Patch available Fix from $1,9502020-11-10 HIGH 8.8 CVE-2020-0451 In sbrDecoder_AssignQmfChannels2SbrChannels of sbrdecoder.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead… Android Patch available Fix from $1,9502020-11-10 HIGH 7.5 CVE-2020-0441 In Message and toBundle of Notification.java, there is a possible resource exhaustion due to improper input validation. This could lead to remote den… Android Patch available Fix from $1,9502020-11-10 HIGH 7.5 CVE-2020-0442 In Message and toBundle of Notification.java, there is a possible UI slowdown or crash due to improper input validation. This could lead to remote de… Android Patch available Fix from $1,9502020-11-10 MEDIUM 6.5 CVE-2020-0450 In rw_i93_sm_format of rw_i93.cc, there is a possible out of bounds read due to uninitialized data. This could lead to remote information disclosure … Android Patch available Fix from $1,6002020-11-10 MEDIUM 5.5 CVE-2020-0443 In LocaleList of LocaleList.java, there is a possible forced reboot due to an uncaught exception. This could lead to local denial of service requirin… Android Patch available Fix from $1,6002020-11-10