Archive
17 September 2020
Vulnerabilities first published on this day (UTC), newest first.
138 results · Feed
-
Low 3.0
Duplicate plugin entries in Helm
In Helm before versions 2.16.11 and 3.3.2, a Helm plugin can contain duplicates of the same entry, with the last one always used. If a plugin is compromised, this lowers the level of access that an attacker needs to modify a plugin's install hooks, causing a …
-
Low 3.4
Improper sanitization of plugin names in Helm
In Helm before versions 2.16.11 and 3.3.2 plugin names are not sanitized properly. As a result, a malicious plugin author could use characters in a plugin name that would result in unexpected behavior, such as duplicating the name of another plugin or spoofin…
-
Low 2.2
Duplicated chart entries in Helm
In Helm before versions 2.16.11 and 3.3.2, a Helm repository can contain duplicates of the same chart, with the last one always used. If a repository is compromised, this lowers the level of access that an attacker needs to inject a bad chart into a repositor…
-
Unscored —
In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local escalat…
-
Unscored —
In NFC, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of pr…
-
Unscored —
In factory reset protection, there is a possible FRP bypass due to a missing permission check. This could lead to local…
-
Unscored —
In libmedia, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial…
-
Unscored —
In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote …
-
Unscored —
In libmp4extractor, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote de…
-
Unscored —
In libstagefright, there is possible CPU exhaustion due to improper input validation. This could lead to remote denial …
-
Unscored —
In libstagefright, there is a possible dead loop due to an uncaught exception. This could lead to remote denial of serv…
-
Unscored —
In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote …
-
Unscored —
In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote …
-
Unscored —
In libmkvextractor, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote de…
-
Unscored —
In SoundTriggerHwService, there is a possible out of bounds read due to a race condition. This could lead to local info…
-
Unscored —
In libAACdec, there is a possible out of bounds read due to missing bounds check. This could lead to remote information…
-
Unscored —
In libDRCdec, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informati…
-
Unscored —
In libDRCdec, there is a possible information disclosure due to uninitialized data. This could lead to remote informati…
-
Unscored —
In GLESRenderEngine, there is a possible out of bounds read due to a buffer overflow. This could lead to local informat…
-
Unscored —
In libFraunhoferAAC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote in…
-
Unscored —
In MediaProvider, there is a possible permissions bypass due to SQL injection. This could lead to local information dis…
-
Unscored —
In libcodec2_soft_mp3dec, there is a possible information disclosure due to uninitialized data. This could lead to remo…
-
Unscored —
In the OMX encoder, there is a possible out of bounds read due to invalid input validation. This could lead to local in…
-
Unscored —
In the camera, there is a possible out of bounds read due to an integer overflow. This could lead to local information …
-
Unscored —
In libsonivox, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informat…
-
Unscored —
In AudioService, there are missing permission checks. This could lead to local information disclosure of audio configur…
-
Unscored —
In the AAC parser, there is a possible out of bounds read due to a missing bounds check. This could lead to remote info…
-
Unscored —
In the OMX parser, there is a possible information disclosure due to a returned raw pointer. This could lead to local i…
-
Unscored —
In tremolo, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information…
-
Unscored —
In mediadrm, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…
-
Unscored —
In libmpeg2dec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat…
-
Unscored —
In Notification Access Confirmation, there is a possible permissions bypass due to uninformed consent. This could lead …
-
Unscored —
In SurfaceFlinger, there is a possible use after free due to a race condition. This could lead to local escalation of p…
-
Unscored —
In SurfaceFlinger, there is a possible use-after-free due to improper locking. This could lead to local escalation of p…
-
Unscored —
In the Audio HAL, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local es…
-
Unscored —
In Mediaserver, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation…
-
Unscored —
In SurfaceFlinger, there is possible memory corruption due to type confusion. This could lead to local escalation of pr…
-
Unscored —
In LLVM, there is a possible ineffective stack cookie placement due to stack frame double reservation. This could lead …
-
Unscored —
In the mp3 extractor, there is a possible out of bounds write due to uninitialized data. This could lead to remote code…
-
Unscored —
In the Media extractor, there is a possible use after free due to improper locking. This could lead to remote code exec…