Browse CVEs

HIGH 8.8 CVE-2016-1645 Multiple integer signedness errors in the opj_j2k_update_image_data function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 49.0.262… Chrome after 49.0.2623.75 Fix from $1,9502016-03-13 CRITICAL 9.8 CVE-2016-1621EPSS 6% libvpx in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.0 before 2016-03-01 allows remote attackers to execute arbitrary co… Android Mitigation only Fix from $2,3002016-03-12 MEDIUM 6.5 CVE-2016-0830 btif_config.c in Bluetooth in Android 6.x before 2016-03-01 allows remote attackers to cause a denial of service (memory corruption and persistent da… Android Mitigation only Fix from $1,6002016-03-12 CRITICAL 9.8 CVE-2016-0816 mediaserver in Android 6.x before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a… Android Mitigation only Fix from $2,3002016-03-12 MEDIUM 6.3 CVE-2016-1628 pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, does not validate a certain precision value, which allows remote attackers… Chrome after 48.0.2564.103 Fix from $1,6002016-02-21 HIGH 8.8 CVE-2016-1624 Integer underflow in the ProcessCommandsInternal function in dec/decode.c in Brotli, as used in Google Chrome before 48.0.2564.109, allows remote att… Chrome after 48.0.2564.103 Fix from $1,9502016-02-14 CRITICAL 9.8 CVE-2016-0804 The NuPlayer::GenericSource::notifyPreparedAndCleanup function in media/libmediaplayerservice/nuplayer/GenericSource.cpp in mediaserver in Android 5.… Android Mitigation only Fix from $2,3002016-02-07 CRITICAL 9.8 CVE-2016-0803 libstagefright in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbi… Android Mitigation only Fix from $2,3002016-02-07 HIGH 7.6 CVE-2016-1619 Multiple integer overflows in the (1) sycc422_to_rgb and (2) sycc444_to_rgb functions in fxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Goo… Chrome after 47.0.2526.106 Fix from $1,9502016-01-25 CRITICAL 9.8 CVE-2015-6636 mediaserver in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows remote attackers to execute arbitrary code or cause a denial of servi… Android Mitigation only Fix from $2,3002016-01-06 HIGH 9.3 CVE-2015-8507 mediaserver in Android 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a… Android Mitigation only Fix from $1,9502015-12-08 HIGH 9.3 CVE-2015-8506 mediaserver in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service (… Android 5.1.1+ Fix from $1,9502015-12-08 HIGH 9.3 CVE-2015-8505 mediaserver in Android before 5.1.1 LMY48Z allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a c… Android after 5.1 Fix from $1,9502015-12-08 HIGH 9.3 CVE-2015-6634 The display drivers in Android before 5.1.1 LMY48Z allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) … Android after 5.1 Fix from $1,9502015-12-08 HIGH 9.3 CVE-2015-6633 The display drivers in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allow remote attackers to execute arbitrary code or cause a denial of se… Android 5.1.1+ Fix from $1,9502015-12-08 HIGH 9.3 CVE-2015-6617 Skia, as used in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01, allows remote attackers to execute arbitrary code or cause a denial of servic… Android 5.1.1+ Fix from $1,9502015-12-08 HIGH 9.3 CVE-2015-6616 mediaserver in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service (… Android 5.1.1+ Fix from $1,9502015-12-08 HIGH 10.0 CVE-2015-8480 The VideoFramePool::PoolImpl::CreateFrame function in media/base/video_frame_pool.cc in Google Chrome before 47.0.2526.73 does not initialize memory … Chrome after 46.0.2490.86 Fix from $1,9502015-12-06 HIGH 7.5 CVE-2015-8479 Use-after-free vulnerability in the AudioOutputDevice::OnDeviceAuthorized function in media/audio/audio_output_device.cc in Google Chrome before 47.0… Chrome after 46.0.2490.86 Fix from $1,9502015-12-06 HIGH 7.5 CVE-2015-6778 The CJBig2_SymbolDict class in fxcodec/jbig2/JBig2_SymbolDict.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, allows remote attackers to… Chrome after 46.0.2490.86 Fix from $1,9502015-12-06 MEDIUM 6.8 CVE-2015-6776 The opj_dwt_decode_1* functions in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 47.0.2526.73, allow remote attackers to cause a denia… Chrome after 46.0.2490.86 Fix from $1,6002015-12-06 HIGH 7.5 CVE-2015-6773 The convolution implementation in Skia, as used in Google Chrome before 47.0.2526.73, does not properly constrain row lengths, which allows remote at… Chrome after 46.0.2490.86 Fix from $1,9502015-12-06 HIGH 7.5 CVE-2015-6771 js/array.js in Google V8, as used in Google Chrome before 47.0.2526.73, improperly implements certain map and filter operations for arrays, which all… Chrome after 46.0.2490.86 Fix from $1,9502015-12-06 CRITICAL 9.8 CVE-2015-6764 The BasicJsonStringifier::SerializeJSArray function in json-stringifier.h in the JSON stringifier in Google V8, as used in Google Chrome before 47.0.… Chrome 4.2.3+ Fix from $2,3002015-12-06 HIGH 10.0 CVE-2015-8221 Integer overflow in Google Picasa before 3.9.140 Build 259 allows remote attackers to execute arbitrary code via the CAMF section in a FOVb image, wh… Picasa after 3.9.140 Fix from $1,9502015-11-17 HIGH 10.0 CVE-2015-8096 Integer overflow in Google Picasa 3.9.140 Build 239 and Build 248 allows remote attackers to execute arbitrary code via unspecified vectors related t… Picasa Mitigation only Fix from $1,9502015-11-09 HIGH 10.0 CVE-2015-8073 mediaserver in Android 4.4 and 5.1 before 5.1.1 LMY48X allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt… Android Mitigation only Fix from $1,9502015-11-03 HIGH 10.0 CVE-2015-8072 mediaserver in Android 4.4 through 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a den… Android Mitigation only Fix from $1,9502015-11-03 HIGH 10.0 CVE-2015-6610 libstagefright in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to gain privileges or cause a denial of service (memory corr… Android 5.1.1+ Fix from $1,9502015-11-03 HIGH 10.0 CVE-2015-6609 libutils in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of service (mem… Android after 5.1.0 Fix from $1,9502015-11-03