Vulnerability index

Browse CVEs

617 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Memory Buffer Bounds ErrorCWE-119 × clear
Android MEDIUM 5.5
CVE-2017-0548

A remote denial of service vulnerability in libskia could enable an attacker to use a specially crafted file to cause a device hang or reboot. This i…

Mitigation only
Fix from $1,600 2017-04-07
Android HIGH 7.8
CVE-2017-0466

A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media …

Mitigation only
Fix from $1,950 2017-03-08
Android HIGH 7.8
CVE-2017-0467

A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media …

Mitigation only
Fix from $1,950 2017-03-08
Android HIGH 7.8
CVE-2017-0468

A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media …

Mitigation only
Fix from $1,950 2017-03-08
Android HIGH 7.8
CVE-2017-0469

A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media …

Mitigation only
Fix from $1,950 2017-03-08
Android HIGH 7.8
CVE-2017-0470

A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media …

Mitigation only
Fix from $1,950 2017-03-08
Android HIGH 7.8
CVE-2017-0471

A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media …

Mitigation only
Fix from $1,950 2017-03-08
Android HIGH 7.8
CVE-2017-0472

A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media …

Mitigation only
Fix from $1,950 2017-03-08
Android HIGH 7.8
CVE-2017-0473

A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media …

Mitigation only
Fix from $1,950 2017-03-08
Android HIGH 7.8
CVE-2017-0474

A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media …

Mitigation only
Fix from $1,950 2017-03-08
Android HIGH 7.8
CVE-2017-0476

A remote code execution vulnerability in AOSP Messaging could enable an attacker using a specially crafted file to cause memory corruption during med…

Mitigation only
Fix from $1,950 2017-03-08
Android HIGH 7.8
CVE-2017-0477

A remote code execution vulnerability in libgdx could enable an attacker using a specially crafted file to execute arbitrary code within the context …

Mitigation only
Fix from $1,950 2017-03-08
Chrome HIGH 8.8
CVE-2017-5009

WebRTC in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to perform proper bounds checking, whi…

Fix: after 55.0.2883.87
Fix from $1,950 2017-02-17
Chrome HIGH 8.8
CVE-2017-5012

A heap buffer overflow in V8 in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attack…

Fix: after 55.0.2883.87
Fix from $1,950 2017-02-17
Chrome MEDIUM 6.3
CVE-2017-5014

Heap buffer overflow during image processing in Skia in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android,…

Fix: after 55.0.2883.87
Fix from $1,600 2017-02-17
Chrome MEDIUM 5.5
CVE-2017-5024

FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker t…

Fix: after 55.0.2883.87
Fix from $1,600 2017-02-17
Chrome MEDIUM 5.5
CVE-2017-5025

FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker t…

Fix: after 55.0.2883.87
Fix from $1,600 2017-02-17
Android HIGH 7.8
CVE-2017-0405

A remote code execution vulnerability in Surfaceflinger could enable an attacker using a specially crafted file to cause memory corruption during med…

Mitigation only
Fix from $1,950 2017-02-08
Android HIGH 7.8
CVE-2017-0406

A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media …

Mitigation only
Fix from $1,950 2017-02-08
Android HIGH 7.8
CVE-2017-0407

A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media …

Mitigation only
Fix from $1,950 2017-02-08
Android CRITICAL 9.8
CVE-2016-8411

Buffer overflow vulnerability while processing QMI QOS TLVs. Product: Android. Versions: versions that have qmi_qos_srvc.c. Android ID: 31805216. Ref…

Fix: after 7.1.1
Fix from $2,300 2017-01-27
Chrome HIGH 8.8
CVE-2016-5199

An off by one error resulting in an allocation of zero size in FFmpeg in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, a…

Fix: after 54.0.2840.87
Fix from $1,950 2017-01-19
Chrome HIGH 8.8
CVE-2016-5200

V8 in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android incorrectl…

Fix: after 54.0.2840.87
Fix from $1,950 2017-01-19
Chrome HIGH 8.8
CVE-2016-5182

Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient validation in bitmap handling, wh…

Fix: after 53.0.2785.143
Fix from $1,950 2016-12-18
Android HIGH 7.8
CVE-2016-6699

A remote code execution vulnerability in libstagefright in Mediaserver in Android 7.0 before 2016-11-01 could enable an attacker using a specially cr…

Fix: after 7.0
Fix from $1,950 2016-12-13
Android HIGH 7.8
CVE-2016-6701

A remote code execution vulnerability in libskia in Android 7.0 before 2016-11-01 could enable an attacker using a specially crafted file to cause me…

Fix: after 7.0
Fix from $1,950 2016-11-25
Android CRITICAL 9.8
CVE-2016-6695

sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or…

Fix: after 7.0
Fix from $2,300 2016-10-10
Android HIGH 7.8
CVE-2016-6676

Off-by-one error in CORE/HDD/src/wlan_hdd_cfg.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows …

Fix: after 7.0
Fix from $1,950 2016-10-10
Android HIGH 7.8
CVE-2016-6675

Off-by-one error in CORE/HDD/src/wlan_hdd_hostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices all…

Fix: after 7.0
Fix from $1,950 2016-10-10
Android HIGH 7.8
CVE-2016-3934

drivers/media/platform/msm/camera_v2/sensor/io/msm_camera_cci_i2c.c in the Qualcomm camera driver in Android before 2016-10-05 on Nexus 5, Nexus 5X, …

Fix: after 7.0
Fix from $1,950 2016-10-10