Browse CVEs

CRITICAL 9.8 CVE-2017-9198 libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:508:18. Autotrace No fix yet Fix from $2,3002017-05-23 CRITICAL 9.8 CVE-2017-9199 libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:192:19. Autotrace No fix yet Fix from $2,3002017-05-23 CRITICAL 9.8 CVE-2017-9200 libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:528:63. Autotrace Mitigation only Fix from $2,3002017-05-23 CRITICAL 9.8 CVE-2017-9184 libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:314:7. Autotrace Mitigation only Fix from $2,3002017-05-23 CRITICAL 9.8 CVE-2017-9185 libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:319:7. Autotrace No fix yet Fix from $2,3002017-05-23 CRITICAL 9.8 CVE-2017-9186 libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:326:17. Autotrace Mitigation only Fix from $2,3002017-05-23 CRITICAL 9.8 CVE-2017-9187 libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:486:7. Autotrace Mitigation only Fix from $2,3002017-05-23 CRITICAL 9.8 CVE-2017-9161 libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in autotrace.c:188:23. Autotrace No fix yet Fix from $2,3002017-05-23 CRITICAL 9.8 CVE-2017-9162 libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in autotrace.c:191:2. Autotrace Mitigation only Fix from $2,3002017-05-23 HIGH 7.8 CVE-2016-5735 Integer overflow in the rwpng_read_image24_libpng function in rwpng.c in pngquant 2.7.0 allows remote attackers to have unspecified impact via a craf… Pngquant Patch available Fix from $1,9502017-05-23 HIGH 7.5 CVE-2015-1529 Integer overflow in soundtrigger/ISoundTriggerHwService.cpp in Android allows attacks to cause a denial of service via unspecified vectors. Android Patch available Fix from $1,9502017-05-23 HIGH 7.8 CVE-2016-10239 In TrustZone access control policy may potentially be bypassed in all Android releases from CAF using the Linux kernel due to improper input validati… Android Patch available Fix from $1,9502017-05-16 HIGH 7.8 CVE-2014-9932 In TrustZone, an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel due to an improper addr… Android Patch available Fix from $1,9502017-05-16 HIGH 7.8 CVE-2014-9935 In TrustZone an integer overflow vulnerability leading to a buffer overflow could potentially occur in a DRM routine in all Android releases from CAF… Android Patch available Fix from $1,9502017-05-16 HIGH 7.8 CVE-2015-8995 In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel. Android Patch available Fix from $1,9502017-05-16 HIGH 7.8 CVE-2015-8998 In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel. Android Patch available Fix from $1,9502017-05-16 CRITICAL 9.8 CVE-2017-6889 An integer overflow error within the "foveon_load_camf()" function (dcraw_foveon.c) in LibRaw-demosaic-pack-GPL2 before 0.18.2 can be exploited to ca… Libraw Demosaic Pack Gpl2 after 0.18.1 Fix from $2,3002017-05-15 HIGH 7.8 CVE-2017-0597 An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a p… Android Patch available Fix from $1,9502017-05-12 HIGH 7.0 CVE-2017-0611 An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the … Linux Kernel Patch available Fix from $1,9502017-05-12 HIGH 8.8 CVE-2017-5047 An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attac… Chrome after 57.0.2987.100 Fix from $1,9502017-04-25 HIGH 8.8 CVE-2017-5048 An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attac… Chrome after 57.0.2987.100 Fix from $1,9502017-04-25 HIGH 8.8 CVE-2017-5049 An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attac… Chrome after 57.0.2987.100 Fix from $1,9502017-04-25 HIGH 8.8 CVE-2017-5050 An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attac… Chrome after 57.0.2987.100 Fix from $1,9502017-04-25 HIGH 8.8 CVE-2017-5051 An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attac… Chrome after 57.0.2987.100 Fix from $1,9502017-04-25 HIGH 7.8 CVE-2017-5037 An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attac… Chrome after 57.0.2987.100 Fix from $1,9502017-04-24 HIGH 7.5 CVE-2017-3599EPSS 90% Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions that are affected are 5.6.35 a… MySQL after 5.7.17 Fix from $1,9502017-04-24 HIGH 7.8 CVE-2016-6916 Integer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 … Shield Tablet Firmware after 4.3.0 Fix from $1,9502017-04-24 HIGH 7.8 CVE-2016-2347 Integer underflow in the decode_level3_header function in lib/lha_file_header.c in Lhasa before 0.3.1 allows remote attackers to execute arbitrary co… Debian Linux after 0.3.0 Fix from $1,9502017-04-21 CRITICAL 9.8 CVE-2016-5762EPSS 6% Integer overflow in the Post Office Agent in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 might allow remote attackers to execute arbit… Groupwise after 2012 Fix from $2,3002017-04-20 MEDIUM 5.5 CVE-2017-7982 Integer overflow in the plist_from_bin function in bplist.c in libimobiledevice/libplist before 2017-04-19 allows remote attackers to cause a denial … Libplist after 1.12 Fix from $1,6002017-04-20