Browse CVEs

HIGH 7.5 CVE-2020-15265 In Tensorflow before version 2.4.0, an attacker can pass an invalid `axis` value to `tf.quantization.quantize_and_dequantize`. This results in access… Tensorflow 2.4.0+ Fix from $1,9502020-10-21 HIGH 7.5 CVE-2020-15266 In Tensorflow before version 2.4.0, when the `boxes` argument of `tf.image.crop_and_resize` has a very large value, the CPU kernel implementation rec… Tensorflow 2.4.0+ Fix from $1,9502020-10-21 MEDIUM 5.3 CVE-2020-8929 A mis-handling of invalid unicode characters in the Java implementation of Tink versions prior to 1.5 allows an attacker to change the ID part of a c… Tink Java 1.5.0+ Fix from $1,6002020-10-19 HIGH 8.8 CVE-2020-0416 In multiple settings screens, there are possible tapjacking attacks due to an insecure default value. This could lead to local escalation of privileg… Android Patch available Fix from $1,9502020-10-14 HIGH 7.8 CVE-2020-0420 In setUpdatableDriverPath of GpuService.cpp, there is a possible memory corruption due to a missing permission check. This could lead to local escala… Android Patch available Fix from $1,9502020-10-14 HIGH 7.8 CVE-2020-0421 In appendFormatV of String8.cpp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of priv… Android Patch available Fix from $1,9502020-10-14 MEDIUM 5.5 CVE-2020-0419 In generateInfo of PackageInstallerSession.java, there is a possible leak of cross-profile URI data during app installation due to a missing permissi… Android Patch available Fix from $1,6002020-10-14 CRITICAL 9.1 CVE-2020-0283 There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-163008257 Android Mitigation only Fix from $2,3002020-10-14 CRITICAL 9.1 CVE-2020-0339 There is a possible out of bounds read due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-162980705 Android Mitigation only Fix from $2,3002020-10-14 CRITICAL 9.1 CVE-2020-0367 There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-162980455 Android Mitigation only Fix from $2,3002020-10-14 CRITICAL 9.1 CVE-2020-0371 There is a possible out of bounds read due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-163008256 Android No fix yet Fix from $2,3002020-10-14 CRITICAL 9.1 CVE-2020-0376 There is a possible out of bounds read due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-163003156 Android Mitigation only Fix from $2,3002020-10-14 HIGH 7.8 CVE-2020-0408 In remove of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with … Android Mitigation only Fix from $1,9502020-10-14 HIGH 7.5 CVE-2020-0377 In gatt_process_read_by_type_rsp of gatt_cl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote infor… Android Mitigation only Fix from $1,9502020-10-14 HIGH 7.5 CVE-2020-0413 In gatt_process_read_by_type_rsp of gatt_cl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote infor… Android Patch available Fix from $1,9502020-10-14 MEDIUM 6.5 CVE-2020-0411 In ~AACExtractor() of AACExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could lead to remote information disc… Android Patch available Fix from $1,6002020-10-14 MEDIUM 6.5 CVE-2020-0414 In AudioFlinger::RecordThread::threadLoop of audioflinger/Threads.cpp, there is a possible non-silenced audio buffer due to a permissions bypass. Thi… Android Patch available Fix from $1,6002020-10-14 MEDIUM 5.5 CVE-2020-0378 In onWnmFrameReceived of PasspointManager.java, there is a missing permission check. This could lead to local information disclosure of location data… Android Mitigation only Fix from $1,6002020-10-14 MEDIUM 5.5 CVE-2020-0398 In updateMwi of NotificationMgr.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local information disclo… Android Mitigation only Fix from $1,6002020-10-14 MEDIUM 5.5 CVE-2020-0400 In showDataRoamingNotification of NotificationMgr.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to loca… Android Mitigation only Fix from $1,6002020-10-14 MEDIUM 5.5 CVE-2020-0410 In setNotification of SapServer.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local information disclo… Android Patch available Fix from $1,6002020-10-14 MEDIUM 5.5 CVE-2020-0415 In various locations in SystemUI, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosu… Android Patch available Fix from $1,6002020-10-14 MEDIUM 5.5 CVE-2020-0246 In getCarrierPrivilegeStatus of UiccAccessRule.java, there is a missing permission check. This could lead to local information disclosure of EID data… Android Mitigation only Fix from $1,6002020-10-14 HIGH 7.8 CVE-2019-2194 In SurfaceFlinger::createLayer of SurfaceFlinger.cpp, there is a possible arbitrary code execution due to improper casting. This could lead to local … Android Patch available Fix from $1,9502020-10-14 CRITICAL 9.8 CVE-2020-26607 An issue was discovered in TimaService on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. PendingIntent with an empty intent is mis… Android Mitigation only Fix from $2,3002020-10-06 HIGH 7.5 CVE-2020-26604 An issue was discovered in SystemUI on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) software. PendingIntent allows an unprivilege… Android Mitigation only Fix from $1,9502020-10-06 HIGH 7.5 CVE-2020-26605 An issue was discovered on Samsung mobile devices with Q(10.0) and R(11.0) (Exynos chipsets) software. They allow attackers to obtain sensitive infor… Android Mitigation only Fix from $1,9502020-10-06 HIGH 7.5 CVE-2020-26606 An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) software. An attacker can access certain Secure Folder co… Android Mitigation only Fix from $1,9502020-10-06 MEDIUM 5.3 CVE-2020-26603 An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Sticker Center allows directory traversal for an unprivi… Android Mitigation only Fix from $1,6002020-10-06 HIGH 7.5 CVE-2020-26597 An issue was discovered on LG mobile devices with Android OS 9.0 and 10 software. The Wi-Fi subsystem has incorrect input validation, leading to a cr… Android Mitigation only Fix from $1,9502020-10-06