Browse CVEs

HIGH 8.1 CVE-2019-11516 An issue was discovered in the Bluetooth component of the Cypress (formerly owned by Broadcom) Wireless IoT codebase. Extended Inquiry Responses (EIR… Android No fix yet Fix from $1,9502020-02-05 HIGH 7.8 CVE-2019-19273 On Samsung mobile devices with O(8.0) and P(9.0) software and an Exynos 8895 chipset, RKP (aka the Samsung Hypervisor EL2 implementation) allows arbi… Android No fix yet Fix from $1,9502020-02-04 HIGH 7.5 CVE-2020-5215 In TensorFlow before 1.15.2 and 2.0.1, converting a string (from Python) to a tf.float16 value results in a segmentation fault in eager mode as the f… Tensorflow 1.15.2 / 2.0.1+ Fix from $1,9502020-01-28 HIGH 7.8 CVE-2015-1530 media/libmedia/IAudioPolicyService.cpp in Android before 5.1 allows attackers to execute arbitrary code with media_server privileges or cause a denia… Android 5.1+ Fix from $1,9502020-01-24 MEDIUM 5.5 CVE-2015-1525 audio/AudioPolicyManagerBase.cpp in Android before 5.1 allows attackers to cause a denial of service (audio_policy application outage) via a crafted … Android 5.1+ Fix from $1,6002020-01-24 CRITICAL 9.8 CVE-2013-6792 Google Android prior to 4.4 has an APK Signature Security Bypass Vulnerability Android 4.4+ Fix from $2,3002020-01-23 MEDIUM 6.5 CVE-2019-13722 Inappropriate implementation in WebRTC in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a … Chrome 79.0.3945.79+ Fix from $1,6002020-01-14 HIGH 8.8 CVE-2020-6377 Use after free in audio in Google Chrome prior to 79.0.3945.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 79.0.3945.117+ Fix from $1,9502020-01-10 HIGH 8.8 CVE-2019-13767EPSS 16% Use after free in media picker in Google Chrome prior to 79.0.3945.88 allowed a remote attacker who had compromised the renderer process to potential… Chrome 79.0.3945.88+ Fix from $1,9502020-01-10 MEDIUM 6.7 CVE-2020-0003 In onCreate of InstallStart.java, there is a possible package validation bypass due to a time-of-check time-of-use vulnerability. This could lead to … Android Mitigation only Fix from $1,6002020-01-08 MEDIUM 6.5 CVE-2020-0006 In rw_i93_send_cmd_write_single_block of rw_i93.cc, there is a possible information disclosure of heap memory due to uninitialized data. This could l… Android Patch available Fix from $1,6002020-01-08 MEDIUM 5.5 CVE-2020-0004 In generateCrop of WallpaperManagerService.java, there is a possible sysui crash due to image exceeding maximum texture size. This could lead to loca… Android Patch available Fix from $1,6002020-01-08 MEDIUM 5.5 CVE-2020-0007 In flattenString8 of Sensor.cpp, there is a possible information disclosure of heap memory due to uninitialized data. This could lead to local inform… Android Mitigation only Fix from $1,6002020-01-08 HIGH 8.8 CVE-2020-0002 In ih264d_init_decoder of ih264d_api.c, there is a possible out of bounds write due to a use after free. This could lead to remote code execution wit… Android Patch available Fix from $1,9502020-01-08 HIGH 7.8 CVE-2020-0001 In getProcessRecordLocked of ActivityManagerService.java isolated apps are not handled correctly. This could lead to local escalation of privilege wi… Android Mitigation only Fix from $1,9502020-01-08 MEDIUM 5.5 CVE-2016-5346 An Information Disclosure vulnerability exists in the Google Pixel/Pixel SL Qualcomm Avtimer Driver due to a NULL pointer dereference when processing… Android 7.0+ Fix from $1,6002020-01-08 MEDIUM 6.5 CVE-2014-9908 A Denial of Service vulnerability exists in Google Android 4.4.4, 5.0.2, and 5.1.1, which allows malicious users to block Bluetooh access (Android Bu… Android Patch available Fix from $1,6002020-01-08 MEDIUM 5.5 CVE-2019-9465 In the Titan M handling of cryptographic operations, there is a possible information disclosure due to an unusual root cause. This could lead to loca… Android 10.0+ Fix from $1,6002020-01-07 MEDIUM 6.7 CVE-2019-9470 In dma_sblk_start of abc-pcie.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privil… Android Mitigation only Fix from $1,6002020-01-06 MEDIUM 6.7 CVE-2019-9471 In set_outbound_iatu of abc-pcie.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri… Android Mitigation only Fix from $1,6002020-01-06 MEDIUM 5.5 CVE-2019-9472 In DCRYPTO_equals of compare.c, there is a possible timing attack due to improperly used crypto. This could lead to local information disclosure with… Android Mitigation only Fix from $1,6002020-01-06 HIGH 7.8 CVE-2019-9468 In export_key_der of export_key.cpp, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with … Android 10.0+ Fix from $1,9502020-01-06 HIGH 7.8 CVE-2019-9469 In km_compute_shared_hmac of km4.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of … Android Mitigation only Fix from $1,9502020-01-06 MEDIUM 6.5 CVE-2019-13765 Use-after-free in content delivery manager in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to potentially exploit heap corruption vi… Chrome 78.0.3904.70+ Fix from $1,6002020-01-03 MEDIUM 6.5 CVE-2019-13766 Use-after-free in accessibility in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted… Chrome 77.0.3865.75+ Fix from $1,6002020-01-03 MEDIUM 6.5 CVE-2019-5844 Out of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a cra… Chrome 73.0.3683.75+ Fix from $1,6002020-01-03 MEDIUM 6.5 CVE-2019-5845 Out of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a cra… Chrome 73.0.3683.75+ Fix from $1,6002020-01-03 MEDIUM 6.5 CVE-2019-5846 Out of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a cra… Chrome 73.0.3683.75+ Fix from $1,6002020-01-03 CRITICAL 9.8 CVE-2019-16778 In TensorFlow before 1.15, a heap buffer overflow in UnsortedSegmentSum can be produced when the Index template argument is int32. In this case data_… Tensorflow 1.15.0+ Fix from $2,3002019-12-16 HIGH 8.8 CVE-2019-13764EPSS 6% Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… Chrome 79.0.3945.79+ Fix from $1,9502019-12-10