Browse CVEs

HIGH 10.0 CVE-2015-1538EPSS 99% Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I allows remot… Android after 5.1 Fix from $1,9502015-10-01 HIGH 8.5 CVE-2015-1536 Integer overflow in the Bitmap_createFromParcel function in core/jni/android/graphics/Bitmap.cpp in Android before 5.1.1 LMY48I allows attackers to c… Android after 5.1 Fix from $1,9502015-10-01 HIGH 9.3 CVE-2015-1528 Integer overflow in the native_handle_create function in libcutils/native_handle.c in Android before 5.1.1 LMY48M allows attackers to obtain a differ… Android after 5.1 Fix from $1,9502015-10-01 HIGH 10.0 CVE-2014-7917 Integer overflow in SampleTable.cpp in libstagefright in Android before 5.0.0 has unspecified impact and attack vectors, aka internal bug 15342615. Android after 4.4.4 Fix from $1,9502015-10-01 HIGH 10.0 CVE-2014-7916 Integer overflow in SampleTable.cpp in libstagefright in Android before 5.0.0 has unspecified impact and attack vectors, aka internal bug 15342751. Android after 4.4.4 Fix from $1,9502015-10-01 HIGH 10.0 CVE-2014-7915 Integer overflow in SampleTable.cpp in libstagefright in Android before 5.0.0 has unspecified impact and attack vectors, aka internal bug 15328708. Android after 4.4.4 Fix from $1,9502015-10-01 HIGH 7.5 CVE-2015-1219 Integer overflow in the SkMallocPixelRef::NewAllocate function in core/SkMallocPixelRef.cpp in Skia, as used in Google Chrome before 41.0.2272.76, al… Chrome after 40.0.2214.115 Fix from $1,9502015-03-09 HIGH 10.0 CVE-2015-1474 Multiple integer overflows in the GraphicBuffer::unflatten function in platform/frameworks/native/libs/ui/GraphicBuffer.cpp in Android through 5.0 al… Android after 5.0 Fix from $1,9502015-02-16 MEDIUM 6.8 CVE-2015-1359 Multiple off-by-one errors in fpdfapi/fpdf_font/font_int.h in PDFium, as used in Google Chrome before 40.0.2214.91, allow remote attackers to cause a… Chrome after 40.0.2214.85 Fix from $1,6002015-01-27 HIGH 7.5 CVE-2014-7927 The SimplifiedLowering::DoLoadBuffer function in compiler/simplified-lowering.cc in Google V8, as used in Google Chrome before 40.0.2214.91, does not… Chrome after 40.0.2214.85 Fix from $1,9502015-01-22 HIGH 7.5 CVE-2011-1795 Integer underflow in the HTMLFormElement::removeFormElement function in html/HTMLFormElement.cpp in WebCore in WebKit in Google Chrome before 11.0.69… Chrome after 11.0.696.64 Fix from $1,9502014-12-26 HIGH 7.5 CVE-2011-1794 Integer overflow in the FilterEffect::copyImageBytes function in platform/graphics/filters/FilterEffect.cpp in the SVG filter implementation in WebCo… Chrome after 11.0.696.64 Fix from $1,9502014-12-26 MEDIUM 5.0 CVE-2014-7909 effects/SkDashPathEffect.cpp in Skia, as used in Google Chrome before 39.0.2171.65, computes a hash key using uninitialized integer values, which mig… Chrome after 39.0.2171.45 Fix from $1,6002014-11-19 HIGH 7.5 CVE-2014-7908 Multiple integer overflows in the CheckMov function in media/base/container_names.cc in Google Chrome before 39.0.2171.65 allow remote attackers to c… Chrome after 39.0.2171.45 Fix from $1,9502014-11-19 HIGH 7.5 CVE-2014-7901 Integer overflow in the opj_t2_read_packet_data function in fxcodec/fx_libopenjpeg/libopenjpeg20/t2.c in OpenJPEG in PDFium, as used in Google Chrome… Chrome after 39.0.2171.45 Fix from $1,9502014-11-19 HIGH 7.5 CVE-2014-1744 Integer overflow in the AudioInputRendererHost::OnCreateStream function in content/browser/renderer_host/media/audio_input_renderer_host.cc in Google… Chrome after 35.0.1916.113 Fix from $1,9502014-05-21 HIGH 7.5 CVE-2014-1741 Multiple integer overflows in the replace-data functionality in the CharacterData interface implementation in core/dom/CharacterData.cpp in Blink, as… Chrome after 34.0.1847.136 Fix from $1,9502014-05-14 HIGH 7.5 CVE-2014-1909 Integer signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for Android 4.4 in the Android SDK Platform Tools 18.0.1 allow… Android Debug Bridge No fix yet Fix from $1,9502014-05-14 HIGH 7.5 CVE-2014-1721 Google V8, as used in Google Chrome before 34.0.1847.116, does not properly implement lazy deoptimization, which allows remote attackers to cause a d… Chrome after 34.0.1847.115 Fix from $1,9502014-04-09 HIGH 7.5 CVE-2014-1717 Google V8, as used in Google Chrome before 34.0.1847.116, does not properly use numeric casts during handling of typed arrays, which allows remote at… Chrome after 34.0.1847.115 Fix from $1,9502014-04-09 HIGH 7.5 CVE-2014-1718 Integer overflow in the SoftwareFrameManager::SwapToNewFrame function in content/browser/renderer_host/software_frame_manager.cc in the software comp… Chrome after 34.0.1847.115 Fix from $1,9502014-04-09 MEDIUM 5.0 CVE-2013-6630 The get_dht function in jdmarker.c in libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48 and other products, does not set all … Chrome after 31.0.1650.47 Fix from $1,6002013-11-19 HIGH 9.3 CVE-2013-6632EPSS 6% Integer overflow in Google Chrome before 31.0.1650.57 allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupti… Chrome 31.0.1650.57+ Fix from $1,9502013-11-18 HIGH 7.5 CVE-2012-5149 Integer overflow in the audio IPC layer in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have un… Chrome after 24.0.1312.51 Fix from $1,9502013-01-15 HIGH 7.5 CVE-2012-5154 Integer overflow in Google Chrome before 24.0.1312.52 on Windows allows attackers to cause a denial of service or possibly have unspecified other imp… Chrome after 24.0.1312.51 Fix from $1,9502013-01-15 MEDIUM 6.8 CVE-2012-5151 Integer overflow in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact … Chrome after 24.0.1312.51 Fix from $1,6002013-01-15 MEDIUM 6.8 CVE-2012-4221 Integer overflow in diagchar_core.c in the Qualcomm Innovation Center (QuIC) Diagnostics (aka DIAG) kernel-mode driver for Android 2.3 through 4.2 al… Android Mitigation only Fix from $1,6002012-11-30 HIGH 7.5 CVE-2012-5127 Integer overflow in Google Chrome before 23.0.1271.64 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unsp… Chrome after 23.0.1271.62 Fix from $1,9502012-11-07 HIGH 7.5 CVE-2012-2896 Integer overflow in the WebGL implementation in Google Chrome before 22.0.1229.79 on Mac OS X allows remote attackers to cause a denial of service or… Chrome after 22.0.1229.78 Fix from $1,9502012-09-26 MEDIUM 6.8 CVE-2012-2851 Multiple integer overflows in the PDF functionality in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows an… Chrome after 21.0.1180.56 Fix from $1,6002012-08-06