Vulnerability index

Browse CVEs

72 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Numeric ErrorsCWE-189 × clear
Android HIGH 10.0
CVE-2015-1538EPSS 99%

Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I allows remot…

Fix: after 5.1
Fix from $1,950 2015-10-01
Android HIGH 8.5
CVE-2015-1536

Integer overflow in the Bitmap_createFromParcel function in core/jni/android/graphics/Bitmap.cpp in Android before 5.1.1 LMY48I allows attackers to c…

Fix: after 5.1
Fix from $1,950 2015-10-01
Android HIGH 9.3
CVE-2015-1528

Integer overflow in the native_handle_create function in libcutils/native_handle.c in Android before 5.1.1 LMY48M allows attackers to obtain a differ…

Fix: after 5.1
Fix from $1,950 2015-10-01
Android HIGH 10.0
CVE-2014-7917

Integer overflow in SampleTable.cpp in libstagefright in Android before 5.0.0 has unspecified impact and attack vectors, aka internal bug 15342615.

Fix: after 4.4.4
Fix from $1,950 2015-10-01
Android HIGH 10.0
CVE-2014-7916

Integer overflow in SampleTable.cpp in libstagefright in Android before 5.0.0 has unspecified impact and attack vectors, aka internal bug 15342751.

Fix: after 4.4.4
Fix from $1,950 2015-10-01
Android HIGH 10.0
CVE-2014-7915

Integer overflow in SampleTable.cpp in libstagefright in Android before 5.0.0 has unspecified impact and attack vectors, aka internal bug 15328708.

Fix: after 4.4.4
Fix from $1,950 2015-10-01
Chrome HIGH 7.5
CVE-2015-1219

Integer overflow in the SkMallocPixelRef::NewAllocate function in core/SkMallocPixelRef.cpp in Skia, as used in Google Chrome before 41.0.2272.76, al…

Fix: after 40.0.2214.115
Fix from $1,950 2015-03-09
Android HIGH 10.0
CVE-2015-1474

Multiple integer overflows in the GraphicBuffer::unflatten function in platform/frameworks/native/libs/ui/GraphicBuffer.cpp in Android through 5.0 al…

Fix: after 5.0
Fix from $1,950 2015-02-16
Chrome MEDIUM 6.8
CVE-2015-1359

Multiple off-by-one errors in fpdfapi/fpdf_font/font_int.h in PDFium, as used in Google Chrome before 40.0.2214.91, allow remote attackers to cause a…

Fix: after 40.0.2214.85
Fix from $1,600 2015-01-27
Chrome HIGH 7.5
CVE-2014-7927

The SimplifiedLowering::DoLoadBuffer function in compiler/simplified-lowering.cc in Google V8, as used in Google Chrome before 40.0.2214.91, does not…

Fix: after 40.0.2214.85
Fix from $1,950 2015-01-22
Chrome HIGH 7.5
CVE-2011-1795

Integer underflow in the HTMLFormElement::removeFormElement function in html/HTMLFormElement.cpp in WebCore in WebKit in Google Chrome before 11.0.69…

Fix: after 11.0.696.64
Fix from $1,950 2014-12-26
Chrome HIGH 7.5
CVE-2011-1794

Integer overflow in the FilterEffect::copyImageBytes function in platform/graphics/filters/FilterEffect.cpp in the SVG filter implementation in WebCo…

Fix: after 11.0.696.64
Fix from $1,950 2014-12-26
Chrome MEDIUM 5.0
CVE-2014-7909

effects/SkDashPathEffect.cpp in Skia, as used in Google Chrome before 39.0.2171.65, computes a hash key using uninitialized integer values, which mig…

Fix: after 39.0.2171.45
Fix from $1,600 2014-11-19
Chrome HIGH 7.5
CVE-2014-7908

Multiple integer overflows in the CheckMov function in media/base/container_names.cc in Google Chrome before 39.0.2171.65 allow remote attackers to c…

Fix: after 39.0.2171.45
Fix from $1,950 2014-11-19
Chrome HIGH 7.5
CVE-2014-7901

Integer overflow in the opj_t2_read_packet_data function in fxcodec/fx_libopenjpeg/libopenjpeg20/t2.c in OpenJPEG in PDFium, as used in Google Chrome…

Fix: after 39.0.2171.45
Fix from $1,950 2014-11-19
Chrome HIGH 7.5
CVE-2014-1744

Integer overflow in the AudioInputRendererHost::OnCreateStream function in content/browser/renderer_host/media/audio_input_renderer_host.cc in Google…

Fix: after 35.0.1916.113
Fix from $1,950 2014-05-21
Chrome HIGH 7.5
CVE-2014-1741

Multiple integer overflows in the replace-data functionality in the CharacterData interface implementation in core/dom/CharacterData.cpp in Blink, as…

Fix: after 34.0.1847.136
Fix from $1,950 2014-05-14
Android Debug Bridge HIGH 7.5
CVE-2014-1909

Integer signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for Android 4.4 in the Android SDK Platform Tools 18.0.1 allow…

No fix yet
Fix from $1,950 2014-05-14
Chrome HIGH 7.5
CVE-2014-1721

Google V8, as used in Google Chrome before 34.0.1847.116, does not properly implement lazy deoptimization, which allows remote attackers to cause a d…

Fix: after 34.0.1847.115
Fix from $1,950 2014-04-09
Chrome HIGH 7.5
CVE-2014-1717

Google V8, as used in Google Chrome before 34.0.1847.116, does not properly use numeric casts during handling of typed arrays, which allows remote at…

Fix: after 34.0.1847.115
Fix from $1,950 2014-04-09
Chrome HIGH 7.5
CVE-2014-1718

Integer overflow in the SoftwareFrameManager::SwapToNewFrame function in content/browser/renderer_host/software_frame_manager.cc in the software comp…

Fix: after 34.0.1847.115
Fix from $1,950 2014-04-09
Chrome MEDIUM 5.0
CVE-2013-6630

The get_dht function in jdmarker.c in libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48 and other products, does not set all …

Fix: after 31.0.1650.47
Fix from $1,600 2013-11-19
Chrome HIGH 9.3
CVE-2013-6632EPSS 6%

Integer overflow in Google Chrome before 31.0.1650.57 allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupti…

Fix: 31.0.1650.57+
Fix from $1,950 2013-11-18
Chrome HIGH 7.5
CVE-2012-5149

Integer overflow in the audio IPC layer in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have un…

Fix: after 24.0.1312.51
Fix from $1,950 2013-01-15
Chrome HIGH 7.5
CVE-2012-5154

Integer overflow in Google Chrome before 24.0.1312.52 on Windows allows attackers to cause a denial of service or possibly have unspecified other imp…

Fix: after 24.0.1312.51
Fix from $1,950 2013-01-15
Chrome MEDIUM 6.8
CVE-2012-5151

Integer overflow in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact …

Fix: after 24.0.1312.51
Fix from $1,600 2013-01-15
Android MEDIUM 6.8
CVE-2012-4221

Integer overflow in diagchar_core.c in the Qualcomm Innovation Center (QuIC) Diagnostics (aka DIAG) kernel-mode driver for Android 2.3 through 4.2 al…

Mitigation only
Fix from $1,600 2012-11-30
Chrome HIGH 7.5
CVE-2012-5127

Integer overflow in Google Chrome before 23.0.1271.64 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unsp…

Fix: after 23.0.1271.62
Fix from $1,950 2012-11-07
Chrome HIGH 7.5
CVE-2012-2896

Integer overflow in the WebGL implementation in Google Chrome before 22.0.1229.79 on Mac OS X allows remote attackers to cause a denial of service or…

Fix: after 22.0.1229.78
Fix from $1,950 2012-09-26
Chrome MEDIUM 6.8
CVE-2012-2851

Multiple integer overflows in the PDF functionality in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows an…

Fix: after 21.0.1180.56
Fix from $1,600 2012-08-06