Vulnerability index

Browse CVEs

617 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Memory Buffer Bounds ErrorCWE-119 × clear
Android HIGH 7.8
CVE-2014-9788

Multiple buffer overflows in the voice drivers in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allow attackers to gain pri…

Fix: after 6.0.1
Fix from $1,950 2016-07-11
Android HIGH 7.8
CVE-2014-9786

Heap-based buffer overflow in drivers/media/platform/msm/camera_v2/sensor/actuator/msm_actuator.c in the Qualcomm components in Android before 2016-0…

Fix: after 6.0.1
Fix from $1,950 2016-07-11
Android HIGH 7.8
CVE-2014-9784

Multiple buffer overflows in drivers/char/diag/diag_debugfs.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices…

Fix: after 6.0.1
Fix from $1,950 2016-07-11
Android HIGH 7.8
CVE-2014-9781

Buffer overflow in drivers/video/fbcmap.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices allows attackers to gain …

Fix: after 6.0.1
Fix from $1,950 2016-07-11
Android HIGH 7.8
CVE-2014-9778

The vid_dec_set_h264_mv_buffers function in drivers/video/msm/vidc/common/dec/vdec.c in the Qualcomm components in Android before 2016-07-05 on Nexus…

Fix: after 6.0.1
Fix from $1,950 2016-07-11
Android HIGH 7.8
CVE-2014-9777

The vid_dec_set_meta_buffers function in drivers/video/msm/vidc/common/dec/vdec.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 …

Fix: after 6.0.1
Fix from $1,950 2016-07-11
Android HIGH 7.8
CVE-2016-2485

libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate OMX bu…

Mitigation only
Fix from $1,950 2016-06-13
Android HIGH 7.8
CVE-2016-2484

libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate OMX bu…

Mitigation only
Fix from $1,950 2016-06-13
Android HIGH 7.8
CVE-2016-2483

The mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishan…

Mitigation only
Fix from $1,950 2016-06-13
Android HIGH 7.8
CVE-2016-2482

The mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishan…

Mitigation only
Fix from $1,950 2016-06-13
Android HIGH 7.8
CVE-2016-2481

The mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishan…

Mitigation only
Fix from $1,950 2016-06-13
Android HIGH 7.8
CVE-2016-2479

The mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishan…

Mitigation only
Fix from $1,950 2016-06-13
Android HIGH 7.8
CVE-2016-2476

mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate OMX buffer sizes, which …

Mitigation only
Fix from $1,950 2016-06-13
Android HIGH 8.4
CVE-2016-2463

Multiple integer overflows in the h264dec component in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.…

Mitigation only
Fix from $1,950 2016-06-13
Chrome MEDIUM 6.5
CVE-2016-1686

The CPDF_DIBSource::CreateDecoder function in core/fpdfapi/fpdf_render/fpdf_render_loadimage.cpp in PDFium, as used in Google Chrome before 51.0.2704…

Fix: after 50.0.2661.102
Fix from $1,600 2016-06-05
Chrome MEDIUM 6.5
CVE-2016-1685

core/fxge/ge/fx_ge_text.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, miscalculates certain index values, which allows remote attacker…

Fix: after 50.0.2661.102
Fix from $1,600 2016-06-05
Chrome HIGH 8.8
CVE-2016-1680

Use-after-free vulnerability in ports/SkFontHost_FreeType.cpp in Skia, as used in Google Chrome before 51.0.2704.63, allows remote attackers to cause…

Fix: after 50.0.2661.102
Fix from $1,950 2016-06-05
Chrome HIGH 8.8
CVE-2016-1678

objects.cc in Google V8 before 5.0.71.32, as used in Google Chrome before 51.0.2704.63, does not properly restrict lazy deoptimization, which allows …

Fix: after 50.0.2661.102
Fix from $1,950 2016-06-05
Android HIGH 8.8
CVE-2016-2439

Buffer overflow in btif/src/btif_dm.c in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 all…

Mitigation only
Fix from $1,950 2016-05-09
Android CRITICAL 9.8
CVE-2016-2429

libFLAC/stream_decoder.c in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not preve…

Mitigation only
Fix from $2,300 2016-05-09
Android CRITICAL 9.8
CVE-2016-2428

libAACdec/src/aacdec_drc.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not p…

Mitigation only
Fix from $2,300 2016-05-09
Android CRITICAL 9.8
CVE-2016-2418

media/libmedia/IOMX.cpp in mediaserver in Android 6.x before 2016-04-01 does not initialize certain metadata buffer pointers, which allows attackers …

Mitigation only
Fix from $2,300 2016-04-18
Android HIGH 8.4
CVE-2016-0842

The H.264 decoder in libstagefright in Android 6.x before 2016-04-01 mishandles Memory Management Control Operation (MMCO) data, which allows remote …

Mitigation only
Fix from $1,950 2016-04-18
Android CRITICAL 9.8
CVE-2016-0841

media/libmedia/mediametadataretriever.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-…

Mitigation only
Fix from $2,300 2016-04-18
Android HIGH 8.4
CVE-2016-0840

Multiple stack-based buffer underflows in decoder/ih264d_parse_cavlc.c in mediaserver in Android 6.x before 2016-04-01 allow remote attackers to exec…

Mitigation only
Fix from $1,950 2016-04-18
Android CRITICAL 9.8
CVE-2016-0839

post_proc/volume_listener.c in mediaserver in Android 6.x before 2016-04-01 mishandles deleted effect context, which allows remote attackers to execu…

Mitigation only
Fix from $2,300 2016-04-18
Android CRITICAL 9.8
CVE-2016-0837

MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 al…

Mitigation only
Fix from $2,300 2016-04-18
Android CRITICAL 9.8
CVE-2016-0838

Sonivox in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not check for a negative n…

Mitigation only
Fix from $2,300 2016-04-18
Android HIGH 7.8
CVE-2016-0836

Stack-based buffer overflow in decoder/impeg2d_vld.c in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary cod…

Mitigation only
Fix from $1,950 2016-04-18
Android CRITICAL 9.8
CVE-2016-0835

decoder/impeg2d_dec_hdr.c in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of serv…

Mitigation only
Fix from $2,300 2016-04-18