Page 72 of 100 — Google CVEs from a corpus of 15879, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-29207 | Medium | 5.5 | 2022-05-20 | TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, multiple TensorFlow operations misbehave in eager… |
CVE-2022-29200 | Medium | 5.5 | 2022-05-20 | TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.LSTMBlockCell`… |
CVE-2022-29199 | Medium | 5.5 | 2022-05-20 | TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.LoadAndRemapMat… |
CVE-2022-29198 | Medium | 5.5 | 2022-05-20 | TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.SparseTensorToC… |
CVE-2022-29197 | Medium | 5.5 | 2022-05-20 | TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.UnsortedSegment… |
CVE-2022-29196 | Medium | 5.5 | 2022-05-20 | TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.Conv3DBackpropF… |
CVE-2022-29195 | Medium | 5.5 | 2022-05-20 | TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.StagePeek` does… |
CVE-2022-29193 | Medium | 5.5 | 2022-05-20 | TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.TensorSummaryV2… |
CVE-2022-29194 | Medium | 5.5 | 2022-05-20 | TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.DeleteSessionTe… |
CVE-2022-29192 | Medium | 5.5 | 2022-05-20 | TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.QuantizeAndDequ… |
CVE-2022-29191 | Medium | 5.5 | 2022-05-20 | TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.GetSessionTenso… |
CVE-2022-20121 | Medium | 5.5 | 2022-05-10 | In getNodeValue of USCCDMPlugin.java, there is a possible disclosure of ICCID due to a missing permission check. This could lead to local information disclosur… |
CVE-2022-20120 | Critical | 9.8 | 2022-05-10 | Product: AndroidVersions: Android kernelAndroid ID: A-203213034References: N/A |
CVE-2022-20119 | Medium | 5.5 | 2022-05-10 | In private_handle_t of mali_gralloc_buffer.h, there is a possible information disclosure due to uninitialized data. This could lead to local information disclo… |
CVE-2022-20118 | High | 7.0 | 2022-05-10 | In ion_ioctl and related functions of ion.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with… |
CVE-2022-20117 | Medium | 5.5 | 2022-05-10 | In (TBD) of (TBD), there is a possible way to decrypt local data encrypted by the GSC due to improperly used crypto. This could lead to local information discl… |
CVE-2021-39738 | High | 7.8 | 2022-05-10 | In CarSetings, there is a possible to pair BT device bypassing user's consent due to a missing permission check. This could lead to local escalation of privile… |
CVE-2022-20116 | High | 7.8 | 2022-05-10 | In onEntryUpdated of OngoingCallController.kt, it is possible to launch non-exported activities due to intent redirection. This could lead to local escalation… |
CVE-2022-20115 | Medium | 5.5 | 2022-05-10 | In broadcastServiceStateChanged of TelephonyRegistry.java, there is a possible way to learn base station information without location permission due to a missi… |
CVE-2022-20114 | High | 7.8 | 2022-05-10 | In placeCall of TelecomManager.java, there is a possible way for an application to keep itself running with foreground service importance due to a permissions… |
CVE-2022-20113 | High | 7.8 | 2022-05-10 | In mPreference of DefaultUsbConfigurationPreferenceController.java, there is a possible way to enable file transfer mode due to a logic error in the code. This… |
CVE-2022-20112 | Medium | 5.5 | 2022-05-10 | In getAvailabilityStatus of PrivateDnsPreferenceController.java, there is a possible way for a guest user to change private DNS settings due to a permissions b… |
CVE-2022-20011 | Medium | 5.5 | 2022-05-10 | In getArray of NotificationManagerService.java , there is a possible leak of one user notifications to another due to missing check. This could lead to local i… |
CVE-2022-20010 | Medium | 6.5 | 2022-05-10 | In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclos… |
CVE-2022-20009 | Medium | 6.8 | 2022-05-10 | In various functions of the USB gadget subsystem, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of… |
CVE-2022-20008 | Medium | 4.6 | 2022-05-10 | In mmc_blk_read_single of block.c, there is a possible way to read kernel heap memory due to uninitialized data. This could lead to local information disclosur… |
CVE-2022-20007 | High | 7.0 | 2022-05-10 | In startActivityForAttachedApplicationIfNeeded of RootWindowContainer.java, there is a possible way to overlay an app that believes it's still in the foregroun… |
CVE-2022-20006 | High | 7.0 | 2022-05-10 | In several functions of KeyguardServiceWrapper.java and related files,, there is a possible way to briefly view what's under the lockscreen due to a race condi… |
CVE-2022-20005 | High | 7.8 | 2022-05-10 | In validateApkInstallLocked of PackageInstallerSession.java, there is a way to force a mismatch between running code and a parsed APK . This could lead to loca… |
CVE-2022-20004 | High | 7.8 | 2022-05-10 | In checkSlicePermission of SliceManagerService.java, it is possible to access any slice URI due to improper input validation. This could lead to local escalati… |
CVE-2021-39700 | Medium | 5.5 | 2022-05-10 | In the policies of adbd.te, there was a logic error which caused the CTS Listening Ports Test to report invalid results. This could lead to local information d… |
CVE-2021-39670 | Medium | 5.5 | 2022-05-10 | In setStream of WallpaperManager.java, there is a possible way to cause a permanent DoS due to improper input validation. This could lead to local denial of se… |
CVE-2022-21743 | High | 7.8 | 2022-05-03 | In ion, there is a possible use after free due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges… |
CVE-2022-20111 | High | 8.4 | 2022-05-03 | In ion, there is a possible use after free due to incorrect error handling. This could lead to local escalation of privilege with no additional execution privi… |
CVE-2022-20108 | Medium | 6.7 | 2022-05-03 | In voice service, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local escalation of privilege with System ex… |
CVE-2022-20107 | Medium | 4.4 | 2022-05-03 | In subtitle service, there is a possible application crash due to an integer overflow. This could lead to local denial of service with System execution privile… |
CVE-2022-20106 | Medium | 6.7 | 2022-05-03 | In MM service, there is a possible out of bounds write due to a heap-based buffer overflow. This could lead to local escalation of privilege with System execut… |
CVE-2022-20105 | Medium | 6.7 | 2022-05-03 | In MM service, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local escalation of privilege with System execu… |
CVE-2022-20104 | Medium | 5.5 | 2022-05-03 | In aee daemon, there is a possible information disclosure due to improper access control. This could lead to local information disclosure with no additional ex… |
CVE-2022-20103 | Medium | 4.4 | 2022-05-03 | In aee daemon, there is a possible information disclosure due to symbolic link following. This could lead to local information disclosure with System execution… |
CVE-2022-20102 | Medium | 4.4 | 2022-05-03 | In aee daemon, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with System execut… |
CVE-2022-20101 | Medium | 5.5 | 2022-05-03 | In aee daemon, there is a possible information disclosure due to a path traversal. This could lead to local information disclosure with no additional execution… |
CVE-2022-28788 | Medium | 4.0 | 2022-05-03 | Improper buffer size check logic in aviextractor library prior to SMR May-2022 Release 1 allows out of bounds read leading to possible temporary denial of serv… |
CVE-2022-28787 | Medium | 4.0 | 2022-05-03 | Improper buffer size check logic in wmfextractor library prior to SMR May-2022 Release 1 allows out of bounds read leading to possible temporary denial of serv… |
CVE-2022-28786 | Medium | 4.0 | 2022-05-03 | Improper buffer size check logic in aviextractor library prior to SMR May-2022 Release 1 allows out of bounds read leading to possible temporary denial of serv… |
CVE-2022-28785 | Medium | 4.0 | 2022-05-03 | Improper buffer size check logic in aviextractor library prior to SMR May-2022 Release 1 allows out of bounds read leading to possible temporary denial of serv… |
CVE-2022-28784 | Medium | 4.0 | 2022-05-03 | Path traversal vulnerability in Galaxy Themes prior to SMR May-2022 Release 1 allows attackers to list file names in arbitrary directory as system user. The pa… |
CVE-2022-28783 | Medium | 6.2 | 2022-05-03 | Improper validation of removing package name in Galaxy Themes prior to SMR May-2022 Release 1 allows attackers to uninstall arbitrary packages without permissi… |
CVE-2022-28782 | Medium | 4.6 | 2022-05-03 | Improper access control vulnerability in Contents To Window prior to SMR May-2022 Release 1 allows physical attacker to install package before completion of Se… |
CVE-2022-28781 | High | 7.7 | 2022-05-03 | Improper input validation in Settings prior to SMR-May-2022 Release 1 allows attackers to launch arbitrary activity with system privilege. The patch adds prope… |
CVE-2022-28780 | Medium | 5.0 | 2022-05-03 | Improper access control vulnerability in Weather prior to SMR May-2022 Release 1 allows that attackers can access location information that set in Weather with… |
CVE-2022-20110 | High | 7.0 | 2022-05-03 | In ion, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges ne… |
CVE-2022-20109 | High | 7.8 | 2022-05-03 | In ion, there is a possible use after free due to improper update of reference count. This could lead to local escalation of privilege with no additional execu… |
CVE-2022-20100 | Medium | 4.4 | 2022-05-03 | In aee daemon, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with System execut… |
CVE-2022-20099 | High | 7.8 | 2022-05-03 | In aee daemon, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution… |
CVE-2022-20098 | Medium | 4.4 | 2022-05-03 | In aee daemon, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with System execut… |
CVE-2022-20097 | Medium | 4.7 | 2022-05-03 | In aee daemon, there is a possible information disclosure due to a race condition. This could lead to local information disclosure with no additional execution… |
CVE-2022-20096 | Medium | 4.4 | 2022-05-03 | In camera, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution privileg… |
CVE-2022-20095 | Medium | 6.7 | 2022-05-03 | In imgsensor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2022-20094 | Medium | 6.7 | 2022-05-03 | In imgsensor, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution… |
CVE-2022-20093 | High | 7.8 | 2022-05-03 | In telephony, there is a possible way to disable receiving SMS messages due to a missing permission check. This could lead to local escalation of privilege wit… |
CVE-2022-20092 | Medium | 5.5 | 2022-05-03 | In alac decoder, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execu… |
CVE-2022-20091 | Medium | 6.4 | 2022-05-03 | In aee driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges ne… |
CVE-2022-20090 | Medium | 6.4 | 2022-05-03 | In aee driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges ne… |
CVE-2022-20089 | Medium | 6.7 | 2022-05-03 | In aee driver, there is a possible memory corruption due to active debug code. This could lead to local escalation of privilege with System execution privilege… |
CVE-2022-20088 | High | 7.8 | 2022-05-03 | In aee driver, there is a possible reference count mistake due to incorrect error handling. This could lead to local escalation of privilege with System execut… |
CVE-2022-20087 | Medium | 6.7 | 2022-05-03 | In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2022-20085 | Medium | 6.7 | 2022-05-03 | In netdiag, there is a possible symbolic link following due to an improper link resolution. This could lead to local escalation of privilege with System execut… |
CVE-2022-20084 | High | 7.8 | 2022-05-03 | In telephony, there is a possible way to disable receiving emergency broadcasts due to a missing permission check. This could lead to local escalation of privi… |
CVE-2022-0882 | Medium | 5.3 | 2022-05-03 | A bug exists where an attacker can read the kernel log through exposed Zircon kernel addresses without the required capability ZX_RSRC_KIND_ROOT. It is recomme… |
CVE-2021-22573 | High | 8.7 | 2022-05-03 | The vulnerability is that IDToken verifier does not verify if token is properly signed. Signature verification makes sure that the token's payload comes from v… |
CVE-2021-22556 | Medium | 5.3 | 2022-05-03 | The Security Team discovered an integer overflow bug that allows an attacker with code execution to issue memory cache invalidation operations on pages that th… |
CVE-2022-25647 | High | 7.7 | 2022-05-01 | The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which… |
CVE-2021-39814 | Medium | 6.7 | 2022-04-12 | In ppmp_validate_wsm of drm_fw.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege wi… |
CVE-2021-39812 | High | 7.8 | 2022-04-12 | In TBD of TBD, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with no additional execution pr… |
CVE-2021-39809 | High | 7.5 | 2022-04-12 | In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information di… |
CVE-2021-39808 | High | 7.8 | 2022-04-12 | In createNotificationChannelGroup of PreferencesHelper.java, there is a possible way for a service to run in foreground without user notification due to improp… |
CVE-2021-39807 | High | 7.8 | 2022-04-12 | In handleNfcStateChanged of SecureNfcEnabler.java, there is a possible way to enable NFC from the Guest account due to a missing permission check. This could l… |
CVE-2021-39805 | Medium | 6.5 | 2022-04-12 | In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure… |
CVE-2021-39804 | Medium | 6.5 | 2022-04-12 | In reinit of HeifDecoderImpl.cpp, there is a possible crash due to a missing null check. This could lead to remote persistent denial of service in the file pic… |
CVE-2021-39803 | Medium | 6.5 | 2022-04-12 | In ~Impl of C2AllocatorIon.cpp, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with no additi… |
CVE-2021-39802 | High | 7.8 | 2022-04-12 | In change_pte_range of mprotect.c , there is a possible way to make a shared mmap writable due to a permissions bypass. This could lead to local escalation of… |
CVE-2021-39801 | High | 7.8 | 2022-04-12 | In ion_ioctl of ion-ioctl.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional ex… |
CVE-2021-39800 | Medium | 5.5 | 2022-04-12 | In ion_ioctl of ion-ioctl.c, there is a possible way to leak kernel head data due to a use after free. This could lead to local information disclosure with no… |
CVE-2021-39799 | High | 7.8 | 2022-04-12 | In AttributionSource of AttributionSource.java, there is a possible permission bypass due to improper input validation. This could lead to local escalation of… |
CVE-2021-39798 | High | 7.8 | 2022-04-12 | In Bitmap_createFromParcel of Bitmap.cpp, there is a possible arbitrary code execution due to a missing bounds check. This could lead to local escalation of pr… |
CVE-2021-39797 | High | 7.8 | 2022-04-12 | In several functions of of LauncherApps.java, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation… |
CVE-2021-39796 | High | 7.3 | 2022-04-12 | In HarmfulAppWarningActivity of HarmfulAppWarningActivity.java, there is a possible way to trick victim to install harmful app due to a tapjacking/overlay atta… |
CVE-2021-39794 | High | 7.8 | 2022-04-12 | In broadcastPortInfo of AdbService.java, there is a possible way for apps to run code as the shell user, if wireless debugging is enabled, due to a missing per… |
CVE-2021-0707 | High | 7.8 | 2022-04-12 | In dma_buf_release of dma-buf.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additi… |
CVE-2021-0694 | High | 7.8 | 2022-04-12 | In setServiceForegroundInnerLocked of ActiveServices.java, there is a possible way for a background application to regain foreground permissions due to insuffi… |
CVE-2022-27837 | Medium | 4.4 | 2022-04-11 | A vulnerability using PendingIntent in Accessibility prior to version 12.5.3.2 in Android R(11.0) and 13.0.1.1 in Android S(12.0) allows attacker to access the… |
CVE-2022-27836 | High | 8.4 | 2022-04-11 | Improper access control and path traversal vulnerability in Storage Manager and Storage Manager Service prior to SMR Apr-2022 Release 1 allow local attackers t… |
CVE-2022-27835 | High | 7.6 | 2022-04-11 | Improper boundary check in UWB firmware prior to SMR Apr-2022 Release 1 allows arbitrary memory write. |
CVE-2022-27834 | Low | 2.9 | 2022-04-11 | Use after free vulnerability in dsp_context_unload_graph function of DSP driver prior to SMR Apr-2022 Release 1 allows attackers to perform malicious actions. |
CVE-2022-27833 | Medium | 4.4 | 2022-04-11 | Improper input validation in DSP driver prior to SMR Apr-2022 Release 1 allows out-of-bounds write by integer overflow. |
CVE-2022-27832 | Medium | 4.0 | 2022-04-11 | Improper boundary check in media.extractor library prior to SMR Apr-2022 Release 1 allows attackers to cause denial of service via a crafted media file. |
CVE-2022-27831 | Low | 2.9 | 2022-04-11 | Improper boundary check in sflvd_rdbuf_bits of libsflvextractor prior to SMR Apr-2022 Release 1 allows attackers to read out of bounds memory. |
CVE-2022-27830 | High | 8.5 | 2022-04-11 | Improper validation vulnerability in SemBlurInfo prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities. |
CVE-2022-27829 | High | 8.5 | 2022-04-11 | Improper validation vulnerability in VerifyCredentialResponse prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities. |