Browse CVEs

HIGH 7.8 CVE-2017-8256 In all Qualcomm products with Android releases from CAF using the Linux kernel, array out of bounds access can occur if userspace sends more than 16 … Android Patch available Fix from $1,9502017-08-18 HIGH 7.8 CVE-2017-8268 In all Qualcomm products with Android releases from CAF using the Linux kernel, the camera application can possibly request frame/command buffer proc… Android Mitigation only Fix from $1,9502017-08-18 CRITICAL 9.8 CVE-2015-9050 In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists where an array out of bounds access can occur … Android No fix yet Fix from $2,3002017-08-18 MEDIUM 5.5 CVE-2017-8258 An array out-of-bounds access in all Qualcomm products with Android releases from CAF using the Linux kernel can potentially occur in a camera driver. Android Patch available Fix from $1,6002017-08-11 MEDIUM 5.5 CVE-2017-0725 A denial of service vulnerability in the Android media framework (libskia). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-37627194. Android Patch available Fix from $1,6002017-08-09 HIGH 7.8 CVE-2017-7365 In all Android releases from CAF using the Linux kernel, a buffer overread can occur if a particular string is not NULL terminated. Android Patch available Fix from $1,9502017-06-13 HIGH 7.8 CVE-2017-8234 In all Android releases from CAF using the Linux kernel, an out of bounds access can potentially occur in a camera function. Android Patch available Fix from $1,9502017-06-13 HIGH 7.8 CVE-2017-8240 In all Android releases from CAF using the Linux kernel, a kernel driver has an off-by-one buffer over-read vulnerability. Android Patch available Fix from $1,9502017-06-13 HIGH 8.8 CVE-2017-5030 KEVEPSS 42% Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed … Chrome 57.0.2987.98 / 57.0.2987.108+ Fix from $1,9502017-04-24 MEDIUM 5.3 CVE-2016-5186 Devtools in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled objects after a tab crash, … Chrome after 53.0.2785.143 Fix from $1,6002016-12-18 HIGH 7.8 CVE-2016-3855 drivers/thermal/supply_lm_core.c in the Qualcomm components in Android before 2016-08-05 does not validate a certain count parameter, which allows at… Android after 6.0.1 Fix from $1,9502016-08-06 HIGH 7.8 CVE-2016-3854 drivers/media/video/msm/msm_mctl_buf.c in the Qualcomm components in Android before 2016-08-05 does not validate the image mode, which allows attacke… Android after 6.0.1 Fix from $1,9502016-08-06 MEDIUM 5.0 CVE-2013-0888 Skia, as used in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a deni… Chrome 25.0.1364.97 / 25.0.1364.99+ Fix from $1,6002013-02-23 MEDIUM 5.0 CVE-2012-5130 Skia, as used in Google Chrome before 23.0.1271.91, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. Chrome after 23.0.1271.89 Fix from $1,6002012-11-28 MEDIUM 5.0 CVE-2012-5109 The International Components for Unicode (ICU) functionality in Google Chrome before 22.0.1229.92 allows remote attackers to cause a denial of servic… Chrome after 22.0.1229.91 Fix from $1,6002012-10-09 MEDIUM 5.0 CVE-2012-5110 The compositor in Google Chrome before 22.0.1229.92 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. Chrome after 22.0.1229.91 Fix from $1,6002012-10-09 MEDIUM 6.8 CVE-2011-3066 Skia, as used in Google Chrome before 18.0.1025.151, does not properly perform clipping, which allows remote attackers to cause a denial of service (… Chrome 18.0.1025.151+ Fix from $1,6002012-04-05 MEDIUM 6.8 CVE-2011-3059 Google Chrome before 18.0.1025.142 does not properly handle SVG text elements, which allows remote attackers to cause a denial of service (out-of-bou… Chrome 6.0 / 10.7+ Fix from $1,6002012-03-30 MEDIUM 6.8 CVE-2011-3060 Google Chrome before 18.0.1025.142 does not properly handle text fragments, which allows remote attackers to cause a denial of service (out-of-bounds… Chrome 6.0 / 10.7+ Fix from $1,6002012-03-30 MEDIUM 5.0 CVE-2011-3963 Google Chrome before 17.0.963.46 does not properly handle PDF FAX images, which allows remote attackers to cause a denial of service (out-of-bounds r… Chrome 17.0.963.46+ Fix from $1,6002012-02-09 MEDIUM 5.0 CVE-2011-3905 libxml2, as used in Google Chrome before 16.0.912.63, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vecto… Chrome 16.0.912.63+ Fix from $1,6002011-12-13 MEDIUM 5.0 CVE-2011-3906 The PDF parser in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. Chrome 16.0.912.63+ Fix from $1,6002011-12-13 MEDIUM 5.0 CVE-2011-3908 Google Chrome before 16.0.912.63 does not properly parse SVG documents, which allows remote attackers to cause a denial of service (out-of-bounds rea… Chrome 5.1 / 5.1.4+ Fix from $1,6002011-12-13 MEDIUM 5.0 CVE-2011-3910 Google Chrome before 16.0.912.63 does not properly handle YUV video frames, which allows remote attackers to cause a denial of service (out-of-bounds… Chrome 16.0.912.63+ Fix from $1,6002011-12-13 MEDIUM 5.0 CVE-2011-3911 Google Chrome before 16.0.912.63 does not properly handle PDF documents, which allows remote attackers to cause a denial of service (out-of-bounds re… Chrome 16.0.912.63+ Fix from $1,6002011-12-13 MEDIUM 5.0 CVE-2011-3916 Google Chrome before 16.0.912.63 does not properly handle PDF cross references, which allows remote attackers to cause a denial of service (out-of-bo… Chrome 16.0.912.63+ Fix from $1,6002011-12-13 MEDIUM 5.0 CVE-2011-3893 Google Chrome before 15.0.874.120 does not properly implement the MKV and Vorbis media handlers, which allows remote attackers to cause a denial of s… Chrome 15.0.874.120+ Fix from $1,6002011-11-11 MEDIUM 5.0 CVE-2011-2850 Google Chrome before 14.0.835.163 does not properly handle Khmer characters, which allows remote attackers to cause a denial of service (out-of-bound… Chrome 14.0.835.163+ Fix from $1,6002011-09-19 MEDIUM 5.0 CVE-2011-2851 Google Chrome before 14.0.835.163 does not properly handle video, which allows remote attackers to cause a denial of service (out-of-bounds read) via… Chrome 14.0.835.163+ Fix from $1,6002011-09-19 MEDIUM 5.0 CVE-2011-2858 Google Chrome before 14.0.835.163 does not properly handle triangle arrays, which allows remote attackers to cause a denial of service (out-of-bounds… Chrome 14.0.835.163+ Fix from $1,6002011-09-19