Browse CVEs

CRITICAL 9.8 CVE-2019-2130 In CompilationJob::FinalizeJob of compiler.cc, there is a possible remote code execution due to type confusion. This could lead to escalation of priv… Android Mitigation only Fix from $2,3002019-08-20 HIGH 7.8 CVE-2019-2120 In OatFileAssistant::GenerateOatFile of oat_file_assistant.cc, there is a possible file corruption issue due to an insecure default value. This could… Android Mitigation only Fix from $1,9502019-08-20 HIGH 7.8 CVE-2019-2127 In AudioInputDescriptor::setClientActive of AudioInputDescriptor.cpp, there is possible memory corruption due to a use after free. This could lead to… Android Mitigation only Fix from $1,9502019-08-20 HIGH 7.8 CVE-2019-2128 In ACELP_4t64_fx of c4t64fx.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privileg… Android Mitigation only Fix from $1,9502019-08-20 HIGH 7.8 CVE-2019-2131 An application with overlay permission can display overlays on top of settings UI. This could lead to local escalation of privilege with no additiona… Android Mitigation only Fix from $1,9502019-08-20 HIGH 7.8 CVE-2019-2132 It is possible to overlay the VPN dialog by a malicious application. This could lead to local escalation of privilege with no additional execution pr… Android Mitigation only Fix from $1,9502019-08-20 HIGH 7.8 CVE-2019-2133 In Mfc_Transceive of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escala… Android Mitigation only Fix from $1,9502019-08-20 HIGH 7.8 CVE-2019-2134 In phFriNfc_ExtnsTransceive of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local… Android Mitigation only Fix from $1,9502019-08-20 HIGH 7.3 CVE-2019-2122 In LockTaskController.lockKeyguardIfNeeded of the LockTaskController.java, there was a difference in the handling of the default case between the Win… Android Mitigation only Fix from $1,9502019-08-20 HIGH 7.3 CVE-2019-2125 In ChangeDefaultDialerDialog.java, there is a possible escalation of privilege due to an overlay attack. This could lead to local escalation of privi… Android Mitigation only Fix from $1,9502019-08-20 HIGH 7.0 CVE-2019-2121 In ActivityManagerService.attachApplication of ActivityManagerService, there is a possible race condition. This could lead to local escalation of pri… Android Mitigation only Fix from $1,9502019-08-20 MEDIUM 6.5 CVE-2019-2129 In extract3GPPGlobalDescriptions of TextDescriptions.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to re… Android Mitigation only Fix from $1,6002019-08-20 MEDIUM 5.5 CVE-2019-14783 On Samsung mobile devices with N(7.x), and O(8.x), P(9.0) software, FotaAgent allows a malicious application to create privileged files. The Samsung … Android No fix yet Fix from $1,6002019-08-08 MEDIUM 6.5 CVE-2019-10379 Jenkins Google Cloud Messaging Notification Plugin 1.0 and earlier stores credentials unencrypted in its global configuration file on the Jenkins mas… Cloud Messaging Notification after 1.0 Fix from $1,6002019-08-07 CRITICAL 9.8 CVE-2019-1010200 Voice Builder Prior to commit c145d4604df67e6fc625992412eef0bf9a85e26b and f6660e6d8f0d1d931359d591dbdec580fef36d36 is affected by: CWE-78: Improper … Voice Builder Patch available Fix from $2,3002019-07-23 CRITICAL 9.8 CVE-2019-2111 In loop of DnsTlsSocket.cpp, there is a possible heap memory corruption due to a use after free. This could lead to remote code execution in the netd… Android Mitigation only Fix from $2,3002019-07-08 HIGH 8.8 CVE-2019-2105 In FileInputStream::Read of file_input_stream.cc, there is a possible memory corruption due to uninitialized data. This could lead to remote code exe… Android Mitigation only Fix from $1,9502019-07-08 HIGH 8.8 CVE-2019-2106 In ihevcd_sao_shift_ctb of ihevcd_sao.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execut… Android Mitigation only Fix from $1,9502019-07-08 HIGH 8.8 CVE-2019-2107EPSS 9% In ihevcd_parse_pps of ihevcd_parse_headers.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code … Android No fix yet Fix from $1,9502019-07-08 HIGH 8.8 CVE-2019-2109 In MakeMPEG4VideoCodecSpecificData of AVIExtractor.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to … Android Mitigation only Fix from $1,9502019-07-08 HIGH 7.8 CVE-2019-2112 In several functions of alarm.cc, there is possible memory corruption due to a use after free. This could lead to local code execution with no additi… Android Mitigation only Fix from $1,9502019-07-08 HIGH 7.5 CVE-2019-2116 In save_attr_seq of sdp_discovery.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to remote information disc… Android Mitigation only Fix from $1,9502019-07-08 MEDIUM 5.5 CVE-2019-2104 In HIDL, safe_union, and other C++ structs/unions being sent to application processes, there are uninitialized fields. This could lead to local infor… Android Mitigation only Fix from $1,6002019-07-08 MEDIUM 5.5 CVE-2019-2113 In setup wizard there is a bypass of some checks when wifi connection is skipped. This could lead to factory reset protection bypass with no addition… Android Mitigation only Fix from $1,6002019-07-08 MEDIUM 5.5 CVE-2019-2117 In checkQueryPermission of TelephonyProvider.java, there is a possible disclosure of secure data due to a missing permission check. This could lead t… Android Mitigation only Fix from $1,6002019-07-08 MEDIUM 5.5 CVE-2019-2118 In various functions of Parcel.cpp, there are uninitialized or partially initialized stack variables. These could lead to local information disclosur… Android Mitigation only Fix from $1,6002019-07-08 MEDIUM 5.5 CVE-2019-2119 In multiple functions of key_store_service.cpp, there is a possible Information Disclosure due to improper locking. This could lead to local informat… Android Mitigation only Fix from $1,6002019-07-08 HIGH 8.8 CVE-2019-5829 Integer overflow in download manager in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially perform out of bounds memory acc… Chrome 75.0.3770.80+ Fix from $1,9502019-06-27 HIGH 8.8 CVE-2019-5831 Object lifecycle issue in V8 in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… Chrome 75.0.3770.80+ Fix from $1,9502019-06-27 HIGH 8.8 CVE-2019-5836 Heap buffer overflow in ANGLE in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially exploit heap corruption via a crafted H… Chrome 75.0.3770.80+ Fix from $1,9502019-06-27