Browse CVEs

HIGH 7.8 CVE-2016-3916 camera/src/camera_metadata.c in the Camera service in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.… Android Patch available Fix from $1,9502016-10-10 MEDIUM 5.5 CVE-2016-3881 The decoder_peek_si_internal function in vp9/vp9_dx_iface.c in libvpx in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.… Android Patch available Fix from $1,6002016-09-11 HIGH 7.8 CVE-2016-3872 Buffer overflow in codecs/on2/dec/SoftVPX.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6… Android Patch available Fix from $1,9502016-09-11 HIGH 7.8 CVE-2016-3862 media/ExifInterface.java in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-09-01 does not prope… Android Patch available Fix from $1,9502016-09-11 HIGH 7.8 CVE-2016-3861EPSS 10% LibUtils in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 mishandles conversions… Android Patch available Fix from $1,9502016-09-11 HIGH 7.8 CVE-2016-3858 Buffer overflow in drivers/soc/qcom/subsystem_restart.c in the Qualcomm subsystem driver in Android before 2016-09-05 on Nexus 5X and 6P devices allo… Android after 7.0 Fix from $1,9502016-09-11 HIGH 8.8 CVE-2016-5157 Heap-based buffer overflow in the opj_dwt_interleave_v function in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windo… Chrome after 52.0.2743.116 Fix from $1,9502016-09-11 HIGH 8.8 CVE-2016-5154 Multiple heap-based buffer overflows in PDFium, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, al… Chrome after 52.0.2743.116 Fix from $1,9502016-09-11 CRITICAL 9.8 CVE-2016-5140 Heap-based buffer overflow in the opj_j2k_read_SQcd_SQcc function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allo… Chrome after 52.0.2743.82 Fix from $2,3002016-08-07 HIGH 7.6 CVE-2016-5139 Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allow rem… Chrome Mitigation only Fix from $1,9502016-08-07 HIGH 7.8 CVE-2014-9882 Buffer overflow in drivers/media/radio/radio-iris.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices allows attacker… Android after 6.0.1 Fix from $1,9502016-08-06 HIGH 7.8 CVE-2014-9874 Buffer overflow in the Qualcomm components in Android before 2016-08-05 on Nexus 5, 5X, 6P, and 7 (2013) devices allows attackers to gain privileges … Android after 6.0.1 Fix from $1,9502016-08-06 HIGH 7.8 CVE-2014-9871 Multiple buffer overflows in drivers/media/platform/msm/camera_v2/isp/msm_isp_util.c in the Qualcomm components in Android before 2016-08-05 on Nexus… Android after 6.0.1 Fix from $1,9502016-08-06 HIGH 7.8 CVE-2016-3825 mm-video-v4l2/vidc/venc/src/omx_video_base.cpp in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allocates … Android Patch available Fix from $1,9502016-08-05 HIGH 7.8 CVE-2016-3824 omx/OMXNodeInstance.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-… Android Patch available Fix from $1,9502016-08-05 HIGH 7.8 CVE-2016-3823 The secure-session feature in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, an… Android Patch available Fix from $1,9502016-08-05 CRITICAL 9.8 CVE-2016-3820 The ih264d decoder in mediaserver in Android 6.x before 2016-08-01 mishandles slice numbers, which allows remote attackers to execute arbitrary code … Android Patch available Fix from $2,3002016-08-05 CRITICAL 9.8 CVE-2016-3819 Integer overflow in codecs/on2/h264dec/source/h264bsd_dpb.c in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x b… Android Patch available Fix from $2,3002016-08-05 HIGH 7.3 CVE-2016-2497 services/core/java/com/android/server/pm/PackageManagerService.java in the framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x befo… Android Patch available Fix from $1,9502016-08-05 CRITICAL 9.8 CVE-2014-9902 Buffer overflow in CORE/SYS/legacy/src/utils/src/dot11f.c in the Qualcomm Wi-Fi driver in Android before 2016-08-05 on Nexus 7 (2013) devices allows … Android after 6.0.1 Fix from $2,3002016-08-05 HIGH 8.8 CVE-2016-5129 Google V8 before 5.2.361.32, as used in Google Chrome before 52.0.2743.82, does not properly process left-trimmed objects, which allows remote attack… Chrome after 5.2.360 Fix from $1,9502016-07-23 HIGH 8.8 CVE-2016-1709 Heap-based buffer overflow in the ByteArray::Get method in data/byte_array.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.… Chrome after 51.0.2704.106 Fix from $1,9502016-07-23 HIGH 7.8 CVE-2016-3758 Multiple buffer overflows in libdex/OptInvocation.cpp in DexClassLoader in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x … Android Mitigation only Fix from $1,9502016-07-11 CRITICAL 9.8 CVE-2016-3745 Multiple buffer overflows in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allow attacke… Android Mitigation only Fix from $2,3002016-07-11 HIGH 7.5 CVE-2016-3744 Buffer overflow in the create_pbuf function in btif/src/btif_hh.c in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, a… Android Mitigation only Fix from $1,9502016-07-11 HIGH 7.8 CVE-2016-2508 media/libmediaplayerservice/nuplayer/GenericSource.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x be… Android Mitigation only Fix from $1,9502016-07-11 HIGH 7.8 CVE-2016-2507 Integer overflow in codecs/on2/h264dec/source/h264bsd_storage.c in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1… Android Mitigation only Fix from $1,9502016-07-11 CRITICAL 9.8 CVE-2016-2506 DRMExtractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does… Android Mitigation only Fix from $2,3002016-07-11 HIGH 7.8 CVE-2016-2505 mpeg2ts/ATSParser.cpp in libstagefright in mediaserver in Android 6.x before 2016-07-01 does not validate a certain section length, which allows remo… Android after 6.0.1 Fix from $1,9502016-07-11 MEDIUM 5.5 CVE-2015-8893 app/aboot/aboot.c in the Qualcomm bootloader in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allows attackers to cause a denial of servi… Android after 6.0.1 Fix from $1,6002016-07-11