Browse CVEs

CRITICAL 9.8 CVE-2016-1662 extensions/renderer/gc_callback.cc in Google Chrome before 50.0.2661.94 does not prevent fallback execution once the Garbage Collection callback has … Chrome after 50.0.2661.87 Fix from $2,3002016-05-14 CRITICAL 9.8 CVE-2016-2429 libFLAC/stream_decoder.c in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not preve… Android Mitigation only Fix from $2,3002016-05-09 CRITICAL 9.8 CVE-2016-2428 libAACdec/src/aacdec_drc.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not p… Android Mitigation only Fix from $2,3002016-05-09 CRITICAL 9.8 CVE-2016-2419 media/libmedia/IDrm.cpp in mediaserver in Android 6.x before 2016-04-01 does not initialize a certain key-request data structure, which allows attack… Android Mitigation only Fix from $2,3002016-04-18 CRITICAL 9.8 CVE-2016-2418 media/libmedia/IOMX.cpp in mediaserver in Android 6.x before 2016-04-01 does not initialize certain metadata buffer pointers, which allows attackers … Android Mitigation only Fix from $2,3002016-04-18 CRITICAL 9.8 CVE-2016-2416 libs/gui/BufferQueueConsumer.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does n… Android Mitigation only Fix from $2,3002016-04-18 CRITICAL 9.8 CVE-2016-2417 media/libmedia/IOMX.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not initia… Android No fix yet Fix from $2,3002016-04-18 CRITICAL 9.8 CVE-2016-0841 media/libmedia/mediametadataretriever.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-… Android Mitigation only Fix from $2,3002016-04-18 CRITICAL 9.8 CVE-2016-0839 post_proc/volume_listener.c in mediaserver in Android 6.x before 2016-04-01 mishandles deleted effect context, which allows remote attackers to execu… Android Mitigation only Fix from $2,3002016-04-18 CRITICAL 9.8 CVE-2016-0837 MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 al… Android Mitigation only Fix from $2,3002016-04-18 CRITICAL 9.8 CVE-2016-0838 Sonivox in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not check for a negative n… Android Mitigation only Fix from $2,3002016-04-18 CRITICAL 9.8 CVE-2016-0835 decoder/impeg2d_dec_hdr.c in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of serv… Android Mitigation only Fix from $2,3002016-04-18 CRITICAL 9.8 CVE-2016-1621EPSS 6% libvpx in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.0 before 2016-03-01 allows remote attackers to execute arbitrary co… Android Mitigation only Fix from $2,3002016-03-12 CRITICAL 9.8 CVE-2016-0816 mediaserver in Android 6.x before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a… Android Mitigation only Fix from $2,3002016-03-12 CRITICAL 9.8 CVE-2016-0815 The MPEG4Source::fragmentedRead function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H,… Android Mitigation only Fix from $2,3002016-03-12 CRITICAL 9.8 CVE-2016-2843 Multiple unspecified vulnerabilities in Google V8 before 4.9.385.26, as used in Google Chrome before 49.0.2623.75, allow attackers to cause a denial … Chrome after 48.0.2564.116 Fix from $2,3002016-03-06 CRITICAL 9.8 CVE-2016-1642 Multiple unspecified vulnerabilities in Google Chrome before 49.0.2623.75 allow attackers to cause a denial of service or possibly have other impact … Chrome after 48.0.2564.116 Fix from $2,3002016-03-06 CRITICAL 9.8 CVE-2016-1639 Use-after-free vulnerability in browser/extensions/api/webrtc_audio_private/webrtc_audio_private_api.cc in the WebRTC Audio Private API implementatio… Chrome after 48.0.2564.116 Fix from $2,3002016-03-06 CRITICAL 9.8 CVE-2016-1636 The PendingScript::notifyFinished function in WebKit/Source/core/dom/PendingScript.cpp in Google Chrome before 49.0.2623.75 relies on memory-cache in… Chrome after 48.0.2564.116 Fix from $2,3002016-03-06 CRITICAL 9.8 CVE-2016-1635 extensions/renderer/render_frame_observer_natives.cc in Google Chrome before 49.0.2623.75 does not properly consider object lifetimes and re-entrancy… Chrome after 48.0.2564.116 Fix from $2,3002016-03-06 CRITICAL 9.8 CVE-2016-1633 Use-after-free vulnerability in Blink, as used in Google Chrome before 49.0.2623.75, allows remote attackers to cause a denial of service or possibly… Chrome after 48.0.2564.116 Fix from $2,3002016-03-06 CRITICAL 9.8 CVE-2016-1629 Google Chrome before 48.0.2564.116 allows remote attackers to bypass the Blink Same Origin Policy and a sandbox protection mechanism via unspecified … Chrome after 48.0.2564.109 Fix from $2,3002016-02-21 CRITICAL 9.8 CVE-2016-0804 The NuPlayer::GenericSource::notifyPreparedAndCleanup function in media/libmediaplayerservice/nuplayer/GenericSource.cpp in mediaserver in Android 5.… Android Mitigation only Fix from $2,3002016-02-07 CRITICAL 9.8 CVE-2016-0803 libstagefright in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbi… Android Mitigation only Fix from $2,3002016-02-07 CRITICAL 9.8 CVE-2016-2051 Multiple unspecified vulnerabilities in Google V8 before 4.8.271.17, as used in Google Chrome before 48.0.2564.82, allow attackers to cause a denial … Chrome after 47.0.2526.111 Fix from $2,3002016-01-25 CRITICAL 9.8 CVE-2015-6642 The kernel in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain sensitive information, and consequently bypass an unsp… Android Mitigation only Fix from $2,3002016-01-06 CRITICAL 9.8 CVE-2015-6636 mediaserver in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows remote attackers to execute arbitrary code or cause a denial of servi… Android Mitigation only Fix from $2,3002016-01-06 CRITICAL 9.8 CVE-2015-6792 The MIDI subsystem in Google Chrome before 47.0.2526.106 does not properly handle the sending of data, which allows remote attackers to execute arbit… Chrome after 47.0.2526.80 Fix from $2,3002015-12-24 CRITICAL 9.8 CVE-2015-6764 The BasicJsonStringifier::SerializeJSArray function in json-stringifier.h in the JSON stringifier in Google V8, as used in Google Chrome before 47.0.… Chrome 4.2.3+ Fix from $2,3002015-12-06 CRITICAL 9.8 CVE-2015-1276 Use-after-free vulnerability in content/browser/indexed_db/indexed_db_backing_store.cc in the IndexedDB implementation in Google Chrome before 44.0.2… Chrome after 43.0.2357.134 Fix from $2,3002015-07-23