cve.bz

google vulnerabilities, newest first, page 166

Filter
  1. 9.1CVE-2022-35937EPSS 0.6%

    TensorFlow is an open source platform for machine learning. The `GatherNd` function takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds…

  2. 7.5CVE-2022-35935EPSS 0.5%

    TensorFlow is an open source platform for machine learning. The implementation of SobolSampleOp is vulnerable to a denial of service via CHECK-failure (assertion failure) caused by assuming `input(0)`, `input(1)`, and `input(2)` to be scal…

  3. 7.5CVE-2022-35934EPSS 0.5%

    TensorFlow is an open source platform for machine learning. The implementation of tf.reshape op in TensorFlow is vulnerable to a denial of service via CHECK-failure (assertion failure) caused by overflowing the number of elements in a tens…

  4. 7.8CVE-2022-20364EPSS 0.1%

    In sysmmu_unmap of TBD, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation…

  5. 6.7CVE-2022-20231EPSS 0.1%

    In smc_intc_request_fiq of arm_gic.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for ex…

  6. 5.5CVE-2022-20399EPSS 0.10%

    In the SEPolicy configuration of system apps, there is a possible access to the 'ip' utility due to an insecure default value. This could lead to local information disclosure of network data with no additional execution privileges needed. …

  7. 7.8CVE-2022-20398EPSS 0.10%

    In addOrUpdateNetwork of WifiServiceImpl.java, there is a possible way for a guest user to configure Wi-Fi due to a permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interactio…

  8. 5.5CVE-2022-20396EPSS 0.08%

    In SettingsActivity.java, there is a possible way to make a device discoverable over Bluetooth, without permission or user interaction, due to a permissions bypass. This could lead to local escalation of privilege with no additional execut…

  9. 7.8CVE-2022-20395EPSS 0.1%

    In checkAccess of MediaProvider.java, there is a possible file deletion due to a path traversal error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for expl…

  10. 5.5CVE-2022-20393EPSS 0.1%

    In extract3GPPGlobalDescriptions of TextDescriptions.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure from the media server with no additional execution privileges need…

  11. 7.8CVE-2022-20392EPSS 0.1%

    In declareDuplicatePermission of ParsedPermissionUtils.java, there is a possible way to obtain a dangerous permission without user consent due to improper input validation. This could lead to local escalation of privilege during app instal…

  12. 9.8CVE-2022-20391EPSS 0.5%

    Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257000

  13. 9.8CVE-2022-20390EPSS 0.5%

    Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257002

  14. 9.8CVE-2022-20389EPSS 0.5%

    Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257004

  15. 9.8CVE-2022-20388EPSS 0.5%

    Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227323

  16. 9.8CVE-2022-20387EPSS 0.5%

    Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227324

  17. 9.8CVE-2022-20386EPSS 0.5%

    Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227328

  18. 9.8CVE-2022-20385EPSS 0.4%

    a function called 'nla_parse', do not check the len of para, it will check nla_type (which can be controlled by userspace) with 'maxtype' (in this case, it is GSCAN_MAX), then it access polciy array 'policy[type]', which OOB access happens…

  19. 7.8CVE-2021-0943EPSS 0.1%

    In MMU_MapPages of TBD, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitat…

  20. 9.8CVE-2021-0942EPSS 0.4%

    The path in this case is a little bit convoluted. The end result is that via an ioctl an untrusted app can control the ui32PageIndex offset in the expression:sPA.uiAddr = page_to_phys(psOSPageArrayData->pagearray[ui32PageIndex]);With the c…

  21. 7.8CVE-2021-0871EPSS 0.1%

    In PVRSRVBridgePMRPDumpSymbolicAddr of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no addition…

  22. 7.0CVE-2021-0697EPSS 0.08%

    In PVRSRVRGXSubmitTransferKM of rgxtransfer.c, there is a possible user after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…

  23. 7.8CVE-2022-39119EPSS 0.1%

    In network service, there is a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

  24. 7.8CVE-2022-36863EPSS 0.1%

    A heap-based overflow vulnerability in GetCorrectDbLanguageTypeEsPKc function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

  25. 7.8CVE-2022-36862EPSS 0.1%

    A heap-based overflow vulnerability in HWR::EngineCJK::Impl::Construct() in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

  26. 5.3CVE-2022-36861EPSS 0.09%

    Custom permission misuse vulnerability in SystemUI prior to SMR Sep-2022 Release 1 allows attacker to use some protected functions with SystemUI privilege.

  27. 7.8CVE-2022-36860EPSS 0.1%

    A heap-based overflow vulnerability in LoadEnvironment function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

  28. 7.8CVE-2022-36858EPSS 0.1%

    A heap-based overflow vulnerability in GetCorrectDbLanguageTypeEsPKc() function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

  29. 2.4CVE-2022-36857EPSS 0.1%

    Improper Authorization vulnerability in Photo Editor prior to SMR Sep-2022 Release 1 allows physical attackers to read internal application data.

  30. 3.3CVE-2022-36856EPSS 0.09%

    Improper access control vulnerability in Telecom application prior to SMR Sep-2022 Release 1 allows attacker to start emergency calls via undefined permission.

  31. 7.8CVE-2022-36855EPSS 0.1%

    A use after free vulnerability in iva_ctl driver prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

  32. 5.5CVE-2022-36854EPSS 0.10%

    Out of bound read in libapexjni.media.samsung.so prior to SMR Sep-2022 Release 1 allows attacker access unauthorized information.

  33. 7.5CVE-2022-36853EPSS 0.2%

    Intent redirection in Photo Editor prior to SMR Sep-2022 Release 1 allows attacker to get sensitive information.

  34. 3.3CVE-2022-36852EPSS 0.1%

    Improper Authorization vulnerability in Video Editor prior to SMR Sep-2022 Release 1 allows local attacker to access internal application data.

  35. 4.7CVE-2022-36850EPSS 0.1%

    Path traversal vulnerability in CallBGProvider prior to SMR Sep-2022 Release 1 allows attacker to overwrite arbitrary file with phone uid.

  36. 7.8CVE-2022-36849EPSS 0.09%

    Use after free vulnerability in sdp_mm_set_process_sensitive function of sdpmm driver prior to SMR Sep-2022 Release 1 allows attackers to perform malicious actions.

  37. 5.5CVE-2022-36848EPSS 0.08%

    Improper Authorization vulnerability in setDualDARPolicyCmd prior to SMR Sep-2022 Release 1 allows local attackers to cause local permanent denial of service.

  38. 7.8CVE-2022-36847EPSS 0.09%

    Use after free vulnerability in mtp_send_signal function of MTP driver prior to SMR Sep-2022 Release 1 allows attackers to perform malicious actions.

  39. 7.8CVE-2022-36846EPSS 0.1%

    A heap-based overflow vulnerability in ConstructDictionary function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

  40. 7.8CVE-2022-36845EPSS 0.1%

    A heap-based overflow vulnerability in MHW_RECOG_LIB_INFO function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

  41. 7.8CVE-2022-36844EPSS 0.1%

    A heap-based overflow vulnerability in HWR::EngJudgeModel::Construct() in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

  42. 7.8CVE-2022-36843EPSS 0.1%

    A heap-based overflow vulnerability in MHW_RECOG_LIB_INFO function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

  43. 7.8CVE-2022-36842EPSS 0.1%

    A heap-based overflow vulnerability in prepareRecogLibrary function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

  44. 7.8CVE-2022-36841EPSS 0.1%

    A heap-based overflow vulnerability in PrepareRecogLibrary_Part function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

  45. 6.7CVE-2022-26470EPSS 0.1%

    In aie, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0711…

  46. 7.8CVE-2022-26469EPSS 0.2%

    In MtkEmail, there is a possible escalation of privilege due to fragment injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:…

  47. 6.6CVE-2022-26468EPSS 0.2%

    In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges nee…

  48. 6.7CVE-2022-26467EPSS 0.1%

    In rpmb, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS071…

  49. 6.7CVE-2022-26466EPSS 0.1%

    In audio ipi, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0655…

  50. 6.7CVE-2022-26465EPSS 0.1%

    In audio ipi, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: AL…