Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by CWE-125
Total 4813 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-0411 1 Google 1 Android 2021-10-26 2.1 LOW 5.5 MEDIUM
In flv extractor, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561362; Issue ID: ALPS05561362.
CVE-2021-0410 1 Google 1 Android 2021-10-26 2.1 LOW 5.5 MEDIUM
In flv extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561360; Issue ID: ALPS05561360.
CVE-2021-0409 1 Google 1 Android 2021-10-26 2.1 LOW 5.5 MEDIUM
In flv extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561359; Issue ID: ALPS05561359.
CVE-2021-0615 1 Google 1 Android 2021-10-26 2.1 LOW 5.5 MEDIUM
In flv extractor, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561369; Issue ID: ALPS05561369.
CVE-2021-0614 1 Google 1 Android 2021-10-26 2.1 LOW 5.5 MEDIUM
In asf extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05495528; Issue ID: ALPS05495528.
CVE-2021-0613 1 Google 1 Android 2021-10-26 2.1 LOW 5.5 MEDIUM
In asf extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05489178; Issue ID: ALPS05489178.
CVE-2021-30306 1 Qualcomm 130 Apq8053, Apq8053 Firmware, Msm8953 and 127 more 2021-10-26 3.6 LOW 7.1 HIGH
Possible buffer over read due to improper buffer allocation for file length passed from user space in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-30304 1 Qualcomm 26 Qca2062, Qca2062 Firmware, Qca2064 and 23 more 2021-10-26 6.4 MEDIUM 9.1 CRITICAL
Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity
CVE-2021-30257 1 Qualcomm 154 Apq8017, Apq8017 Firmware, Apq8053 and 151 more 2021-10-26 7.2 HIGH 7.8 HIGH
Possible out of bound read or write in VR service due to lack of validation of DSP selection values in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT
CVE-2021-1985 1 Qualcomm 190 Apq8017, Apq8017 Firmware, Apq8053 and 187 more 2021-10-26 3.6 LOW 7.1 HIGH
Possible buffer over read due to lack of data length check in QVR Service configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables
CVE-2021-0414 1 Google 1 Android 2021-10-26 2.1 LOW 5.5 MEDIUM
In flv extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561384; Issue ID: ALPS05561384.
CVE-2021-0618 1 Google 1 Android 2021-10-26 2.1 LOW 5.5 MEDIUM
In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561394; Issue ID: ALPS05561394.
CVE-2021-1980 1 Qualcomm 438 Apq8053, Apq8053 Firmware, Apq8064au and 435 more 2021-10-26 6.4 MEDIUM 9.1 CRITICAL
Possible buffer over read due to lack of length check while parsing beacon IE response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
CVE-2021-1977 1 Qualcomm 256 Apq8009, Apq8009 Firmware, Apq8017 and 253 more 2021-10-26 6.4 MEDIUM 9.1 CRITICAL
Possible buffer over read due to improper validation of frame length while processing AEAD decryption during ASSOC response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music
CVE-2021-0617 1 Google 1 Android 2021-10-26 2.1 LOW 5.5 MEDIUM
In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561391; Issue ID: ALPS05561391.
CVE-2021-0616 1 Google 1 Android 2021-10-26 2.1 LOW 5.5 MEDIUM
In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561389; Issue ID: ALPS05561389.
CVE-2021-0632 1 Google 1 Android 2021-10-26 3.3 LOW 6.5 MEDIUM
In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a proximal attacker under certain build conditions with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05560246; Issue ID: ALPS05551383.
CVE-2021-0631 1 Google 1 Android 2021-10-26 5.0 MEDIUM 7.5 HIGH
In wifi driver, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05551435; Issue ID: ALPS05551435.
CVE-2021-0939 1 Google 1 Android 2021-10-26 2.1 LOW 4.4 MEDIUM
In set_default_passthru_cfg of passthru.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-186026549References: N/A
CVE-2021-0941 1 Google 1 Android 2021-10-26 7.2 HIGH 6.7 MEDIUM
In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-154177719References: Upstream kernel