Browse CVEs

MEDIUM 5.5 CVE-2024-32914 In tpu_get_int_state of tpu.c, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure … Android Mitigation only Fix from $1,6002024-06-13 CRITICAL 9.8 CVE-2024-32905 In circ_read of link_device_memory_legacy.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code… Android Mitigation only Fix from $2,3002024-06-13 HIGH 7.8 CVE-2024-32896 KEV there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution pr… Android No fix yet Fix from $1,9502024-06-13 HIGH 7.8 CVE-2024-32900 In lwis_fence_signal of lwis_debug.c, there is a possible Use after Free due to improper locking. This could lead to local escalation of privilege fr… Android Mitigation only Fix from $1,9502024-06-13 HIGH 7.8 CVE-2024-32901 In v4l2_smfc_qbuf of smfc-v4l2-ioctls.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o… Android Mitigation only Fix from $1,9502024-06-13 HIGH 7.8 CVE-2024-32903 In prepare_response_locked of lwis_transaction.c, there is a possible out of bounds write due to improper input validation. This could lead to local … Android Mitigation only Fix from $1,9502024-06-13 HIGH 7.8 CVE-2024-32906 In AcvpOnMessage of avcp.cpp, there is a possible EOP due to uninitialized data. This could lead to local escalation of privilege with no additional … Android Mitigation only Fix from $1,9502024-06-13 HIGH 7.8 CVE-2024-32907 In memcall_add of memlog.c, there is a possible buffer overflow due to improper input validation. This could lead to local escalation of privilege wi… Android Mitigation only Fix from $1,9502024-06-13 HIGH 7.8 CVE-2024-32908 In sec_media_protect of media.c, there is a possible permission bypass due to a race condition. This could lead to local escalation of privilege with… Android Mitigation only Fix from $1,9502024-06-13 HIGH 7.5 CVE-2024-32902 Remote prevention of access to cellular service with no user interaction (for example, crashing the cellular radio service with a malformed packet) Android No fix yet Fix from $1,9502024-06-13 HIGH 7.0 CVE-2024-32899 In gpu_pm_power_off_top_nolock of pixel_gpu_power.c, there is a possible compromise of protected memory due to a race condition. This could lead to l… Android Mitigation only Fix from $1,9502024-06-13 MEDIUM 5.9 CVE-2024-32897 In ProtocolCdmaCallWaitingIndAdapter::GetCwInfo() of protocolsmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. Th… Android Mitigation only Fix from $1,6002024-06-13 HIGH 7.8 CVE-2024-32892 In handle_init of goodix/main/main.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege w… Android Mitigation only Fix from $1,9502024-06-13 HIGH 7.8 CVE-2024-32895 In BCMFASTPATH of dhd_msgbuf.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privile… Android Mitigation only Fix from $1,9502024-06-13 HIGH 7.5 CVE-2024-32894 In bc_get_converted_received_bearer of bc_utilities.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remot… Android Mitigation only Fix from $1,9502024-06-13 HIGH 7.0 CVE-2024-32891 In sec_media_unprotect of media.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege wi… Android Mitigation only Fix from $1,9502024-06-13 MEDIUM 5.5 CVE-2024-32893 In _s5e9865_mif_set_rate of exynos_dvfs.c, there is a possible out of bounds read due to improper casting. This could lead to local information discl… Android Mitigation only Fix from $1,6002024-06-13 CRITICAL 9.8 CVE-2024-29786 In pktproc_fill_data_addr_without_bm of link_rx_pktproc.c, there is a possible out of bounds write due to a missing bounds check. This could lead to … Android Mitigation only Fix from $2,3002024-06-13 HIGH 7.8 CVE-2024-29784 In prepare_response of lwis_periodic_io.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of… Android Mitigation only Fix from $1,9502024-06-13 HIGH 7.8 CVE-2024-29787 In lwis_process_transactions_in_queue of lwis_transaction.c, there is a possible use after free due to a use after free. This could lead to local esc… Android Mitigation only Fix from $1,9502024-06-13 HIGH 7.5 CVE-2024-29781 In ss_AnalyzeOssReturnResUssdArgIe of ss_OssAsnManagement.c, there is a possible out of bounds read due to improper input validation. This could lead… Android Mitigation only Fix from $1,9502024-06-13 MEDIUM 5.5 CVE-2024-29785 In aur_get_state of aurora.c, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure w… Android No fix yet Fix from $1,6002024-06-13 MEDIUM 5.5 CVE-2024-29780 In hwbcc_ns_deprivilege of trusty/user/base/lib/hwbcc/client/hwbcc.c, there is a possible uninitialized stack data disclosure due to uninitialized da… Android Mitigation only Fix from $1,6002024-06-13 HIGH 8.8 CVE-2024-5841 Use after free in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… Chrome 126.0.6478.54+ Fix from $1,9502024-06-11 HIGH 8.8 CVE-2024-5842 Use after free in Browser UI in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures… Chrome 126.0.6478.54+ Fix from $1,9502024-06-11 HIGH 8.8 CVE-2024-5844 Heap buffer overflow in Tab Strip in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform an out of bounds memory read via a cra… Chrome 126.0.6478.54+ Fix from $1,9502024-06-11 HIGH 8.8 CVE-2024-5845 Use after free in Audio in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF fi… Chrome 126.0.6478.54+ Fix from $1,9502024-06-11 HIGH 8.8 CVE-2024-5846 Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF f… Chrome 126.0.6478.54+ Fix from $1,9502024-06-11 HIGH 8.8 CVE-2024-5847 Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF f… Chrome 126.0.6478.54+ Fix from $1,9502024-06-11 MEDIUM 6.5 CVE-2024-5843 Inappropriate implementation in Downloads in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to obfuscate security UI via a malicious … Chrome 126.0.6478.54+ Fix from $1,6002024-06-11