CVEs published in January 2021
1,871 vulnerabilities, 212 critical, 9 exploited.
- google androidIn onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to convince the...7.3 High
- google androidIn isWordBreakAfter of LayoutUtils.cpp, there is a possible way to slow or crash a TextView due...7.5 High
- google androidIn WAVSource::read of WAVExtractor.cpp, there is a possible out of bounds write due to an integer...6.5 Medium
- google androidIn ElementaryStreamQueue::dequeueAccessUnitH264() of ESQueue.cpp, there is a possible out of...6.5 Medium
- google androidIn LazyServiceRegistrar of LazyServiceRegistrar.cpp, there is a possible memory corruption due to...7.8 High
- google androidIn onCreate of grantCredentialsPermissionActivity, there is a confused deputy. This could lead to...5.5 Medium
- google android, debian linux +1 moreIn ReadLogicalParts of basicmbr.cc, there is a possible out of bounds write due to a missing...6.8 Medium
- google androidIn updatePermissionSourcePackage of PermissionManagerService.java, there is a possible automatic...7.8 High
- google androidIn addAllPermissions of PermissionManagerService.java, there is a possible permissions bypass...7.8 High
- google androidIn several functions of GlobalScreenshot.java, there is a possible permission bypass due to an...5.5 Medium
- google androidIn dispatchGraphTerminationMessage() of packages/services/Car/computepipe/runner/graph...7.0 High
- google androidIn ged, there is a possible out of bounds write due to a missing bounds check. This could lead to...6.7 Medium
- google chromeInsufficient policy enforcement in Navigation in Google Chrome prior to 85.0.4183.83 allowed a...6.5 Medium
- tenda f3 firmwareTenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information ...9.6 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +387 more +389 moreA race between command submission and destroying the context can cause an invalid context being...7.0 High
- qualcomm snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, apq8009 firmware, apq8009w firmware +397 more +399 moreMemory corruption due to improper check to return error when user application requests memory...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009w firmware, apq8017 firmware +358 more +360 moreUse after free due to race condition when reopening the device driver repeatedly in Snapdragon...7.0 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +341 more +343 moreMemory corruption due to ioctl command size was incorrectly set to the size of a pointer and not...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +404 more +406 moreUse after free issue when importing a DMA buffer by using the CPU address of the buffer due to...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +110 more +112 moreTime-of-check time-of-use race condition While processing partition entries due to newly created...7.0 High
- google androidIn reassemble_and_dispatch of packet_fragmenter.cc, there is a possible way to inject packets...9.8 Critical