Browse high-severity CVEs

Android HIGH 7.8

CVE-2017-8256

In all Qualcomm products with Android releases from CAF using the Linux kernel, array out of bounds access can occur if userspace sends more than 16 …

Patch available

Fix from $1,950 2017-08-18

Android HIGH 7.8

CVE-2017-8268

In all Qualcomm products with Android releases from CAF using the Linux kernel, the camera application can possibly request frame/command buffer proc…

Mitigation only

Fix from $1,950 2017-08-18

Android CRITICAL 9.8

CVE-2015-9050

In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists where an array out of bounds access can occur …

No fix yet

Fix from $2,300 2017-08-18

Android MEDIUM 5.5

CVE-2017-8258

An array out-of-bounds access in all Qualcomm products with Android releases from CAF using the Linux kernel can potentially occur in a camera driver.

Patch available

Fix from $1,600 2017-08-11

Android MEDIUM 5.5

CVE-2017-0725

A denial of service vulnerability in the Android media framework (libskia). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-37627194.

Patch available

Fix from $1,600 2017-08-09

Android HIGH 7.8

CVE-2017-7365

In all Android releases from CAF using the Linux kernel, a buffer overread can occur if a particular string is not NULL terminated.

Patch available

Fix from $1,950 2017-06-13

Android HIGH 7.8

CVE-2017-8234

In all Android releases from CAF using the Linux kernel, an out of bounds access can potentially occur in a camera function.

Patch available

Fix from $1,950 2017-06-13

Android HIGH 7.8

CVE-2017-8240

In all Android releases from CAF using the Linux kernel, a kernel driver has an off-by-one buffer over-read vulnerability.

Patch available

Fix from $1,950 2017-06-13

Chrome HIGH 8.8

CVE-2017-5030 KEVEPSS 42%

Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed …

Fix: 57.0.2987.98 / 57.0.2987.108+

Fix from $1,950 2017-04-24

Chrome MEDIUM 5.3

CVE-2016-5186

Devtools in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled objects after a tab crash, …

Fix: after 53.0.2785.143

Fix from $1,600 2016-12-18

Android HIGH 7.8

CVE-2016-3855

drivers/thermal/supply_lm_core.c in the Qualcomm components in Android before 2016-08-05 does not validate a certain count parameter, which allows at…

Fix: after 6.0.1

Fix from $1,950 2016-08-06

Android HIGH 7.8

CVE-2016-3854

drivers/media/video/msm/msm_mctl_buf.c in the Qualcomm components in Android before 2016-08-05 does not validate the image mode, which allows attacke…

Fix: after 6.0.1

Fix from $1,950 2016-08-06

Chrome MEDIUM 5.0

CVE-2013-0888

Skia, as used in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a deni…

Fix: 25.0.1364.97 / 25.0.1364.99+

Fix from $1,600 2013-02-23

Chrome MEDIUM 5.0

CVE-2012-5130

Skia, as used in Google Chrome before 23.0.1271.91, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

Fix: after 23.0.1271.89

Fix from $1,600 2012-11-28

Chrome MEDIUM 5.0

CVE-2012-5109

The International Components for Unicode (ICU) functionality in Google Chrome before 22.0.1229.92 allows remote attackers to cause a denial of servic…

Fix: after 22.0.1229.91

Fix from $1,600 2012-10-09

Chrome MEDIUM 5.0

CVE-2012-5110

The compositor in Google Chrome before 22.0.1229.92 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

Fix: after 22.0.1229.91

Fix from $1,600 2012-10-09

Chrome MEDIUM 6.8

CVE-2011-3066

Skia, as used in Google Chrome before 18.0.1025.151, does not properly perform clipping, which allows remote attackers to cause a denial of service (…

Fix: 18.0.1025.151+

Fix from $1,600 2012-04-05

Chrome MEDIUM 6.8

CVE-2011-3059

Google Chrome before 18.0.1025.142 does not properly handle SVG text elements, which allows remote attackers to cause a denial of service (out-of-bou…

Fix: 6.0 / 10.7+

Fix from $1,600 2012-03-30

Chrome MEDIUM 6.8

CVE-2011-3060

Google Chrome before 18.0.1025.142 does not properly handle text fragments, which allows remote attackers to cause a denial of service (out-of-bounds…

Fix: 6.0 / 10.7+

Fix from $1,600 2012-03-30

Chrome MEDIUM 5.0

CVE-2011-3963

Google Chrome before 17.0.963.46 does not properly handle PDF FAX images, which allows remote attackers to cause a denial of service (out-of-bounds r…

Fix: 17.0.963.46+

Fix from $1,600 2012-02-09

Chrome MEDIUM 5.0

CVE-2011-3905

libxml2, as used in Google Chrome before 16.0.912.63, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vecto…

Fix: 16.0.912.63+