Browse CVEs

HIGH 7.8 CVE-2024-53838 In Exynos_parsing_user_data_registered_itu_t_t35 of VendorVideoAPI.cpp, there is a possible out of bounds write due to an incorrect bounds check. Thi… Android Mitigation only Fix from $1,9502025-01-03 HIGH 7.8 CVE-2024-53840 there is a possible biometric bypass due to an unusual root cause. This could lead to local escalation of privilege with no additional execution priv… Android No fix yet Fix from $1,9502025-01-03 HIGH 7.8 CVE-2024-53841 In startListeningForDeviceStateChanges, there is a possible Permission Bypass due to a confused deputy. This could lead to local escalation of privil… Android Mitigation only Fix from $1,9502025-01-03 HIGH 7.5 CVE-2024-53834 In sms_DisplayHexDumpOfPrivacyBuffer of sms_Utilities.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to … Android Mitigation only Fix from $1,9502025-01-03 MEDIUM 6.7 CVE-2024-53836 In wbrc_bt_dev_write of wb_regon_coordinator.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation… Android Mitigation only Fix from $1,6002025-01-03 MEDIUM 5.5 CVE-2024-53839 In GetCellInfoList() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local inform… Android Mitigation only Fix from $1,6002025-01-03 HIGH 7.8 CVE-2024-43769 In isPackageDeviceAdmin of PackageManagerService.java, there is a possible edge case which could prevent the uninstallation of CloudDpc due to a logi… Android Mitigation only Fix from $1,9502025-01-03 HIGH 8.8 CVE-2024-43767 In prepare_to_draw_into_mask of SkBlurMaskFilterImpl.cpp, there is a possible heap overflow due to improper input validation. This could lead to remo… Android Mitigation only Fix from $1,9502025-01-03 HIGH 7.8 CVE-2024-43077 In DevmemValidateFlags of devicemem_server.c , there is a possible out of bounds write due to memory corruption. This could lead to local escalation … Android Mitigation only Fix from $1,9502025-01-03 HIGH 7.8 CVE-2024-43097 In resizeToAtLeast of SkRegion.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privil… Android Patch available Fix from $1,9502025-01-03 HIGH 7.8 CVE-2024-43762 In multiple locations, there is a possible way to avoid unbinding of a service from the system due to a logic error in the code. This could lead to l… Android Patch available Fix from $1,9502025-01-03 HIGH 7.8 CVE-2024-43764 In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to partially bypass lock screen. This could lead to local escalation of pr… Android Patch available Fix from $1,9502025-01-03 HIGH 7.8 CVE-2024-43768 In skia_alloc_func of SkDeflate.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privi… Android Mitigation only Fix from $1,9502025-01-03 HIGH 8.8 CVE-2024-12693 Out of bounds memory access in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to execute arbitrary code inside a sandbox via a… Chrome 131.0.6778.204+ Fix from $1,9502024-12-18 HIGH 8.8 CVE-2024-12694 Use after free in Compositing in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to potentially exploit heap corruption via a crafted… Chrome 131.0.6778.204+ Fix from $1,9502024-12-18 HIGH 8.8 CVE-2024-12695 Out of bounds write in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted… Chrome 131.0.6778.204+ Fix from $1,9502024-12-18 HIGH 8.8 CVE-2024-12692EPSS 7% Type Confusion in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… Chrome 131.0.6778.204+ Fix from $1,9502024-12-18 HIGH 7.8 CVE-2024-47038 In dhd_prot_flowrings_pool_release of dhd_msgbuf.c, there is a possible outcof bounds write due to a missing bounds check. This could lead to localce… Android Mitigation only Fix from $1,9502024-12-18 HIGH 7.8 CVE-2024-47040 There is a possible UAF due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges ne… Android Mitigation only Fix from $1,9502024-12-18 MEDIUM 5.5 CVE-2024-47039 In isSlotMarkedSuccessful of BootControl.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local  informa… Android Mitigation only Fix from $1,6002024-12-18 HIGH 8.8 CVE-2024-12381 Type Confusion in V8 in Google Chrome prior to 131.0.6778.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… Chrome 131.0.6778.139+ Fix from $1,9502024-12-12 HIGH 8.8 CVE-2024-12382 Use after free in Translate in Google Chrome prior to 131.0.6778.139 allowed a remote attacker to potentially exploit heap corruption via a crafted H… Chrome 131.0.6778.139+ Fix from $1,9502024-12-12 MEDIUM 5.5 CVE-2024-12236 A security issue exists in Vertex Gemini API for customers using VPC-SC. By utilizing a custom crafted file URI for image input, data exfiltration is… Vertex Gemini Api Mitigation only Fix from $1,6002024-12-10 CRITICAL 9.8 CVE-2018-9388 In store_upgrade and store_cmd of drivers/input/touchscreen/stm/ftm4_pdc.c, there are out of bound writes due to missing bounds checks or integer und… Android Mitigation only Fix from $2,3002024-12-05 MEDIUM 6.7 CVE-2018-9386 In reboot_block_command of htc reboot_block driver, there is a possible stack buffer overflow due to a missing bounds check. This could lead to … Android Mitigation only Fix from $1,6002024-12-05 MEDIUM 6.7 CVE-2018-9390 In procfile_write of gl_proc.c, there is a possible out of bounds read of a function pointer due to an incorrect bounds check. This could lead t… Android Mitigation only Fix from $1,6002024-12-05 MEDIUM 6.7 CVE-2018-9391 In update_gps_sv and output_vzw_debug of vendor/mediatek/proprietary/hardware/connectivity/gps/gps_hal/src/gpshal_wor ker.c, there is a possi… Android Mitigation only Fix from $1,6002024-12-05 MEDIUM 6.7 CVE-2017-13308 In tscpu_write_GPIO_out and mtkts_Abts_write of mtk_ts_Abts.c, there is a possible buffer overflow in an sscanf due to improper input validation. Thi… Android Mitigation only Fix from $1,6002024-12-05 MEDIUM 6.7 CVE-2018-9416 In sg_remove_scat of scsi/sg.c, there is a possible memory corruption due to an unusual root cause. This could lead to local escalation of privil… Android Mitigation only Fix from $1,6002024-12-05 MEDIUM 6.7 CVE-2018-9439 In __unregister_prot_hook and packet_release of af_packet.c, there is a possible use-after-free due to improper locking. This could lead to local… Android Mitigation only Fix from $1,6002024-12-05