Vulnerability index

Browse CVEs

388 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Integer OverflowCWE-190 × clear
Android CRITICAL 9.8
CVE-2016-7990

On Samsung Galaxy S4 through S7 devices, an integer overflow condition exists within libomacp.so when parsing OMACP messages (within WAP Push SMS mes…

Mitigation only
Fix from $2,300 2016-10-31
Android HIGH 7.8
CVE-2016-3935

Multiple integer overflows in drivers/crypto/msm/qcedev.c in the Qualcomm cryptographic engine driver in Android before 2016-10-05 on Nexus 5X, Nexus…

Fix: after 7.0
Fix from $1,950 2016-10-10
Android HIGH 7.8
CVE-2016-3901

Multiple integer overflows in drivers/crypto/msm/qcedev.c in the Qualcomm cryptographic engine driver in Android before 2016-10-05 on Nexus 5X, Nexus…

Fix: after 7.0
Fix from $1,950 2016-10-10
Android MEDIUM 5.5
CVE-2016-3895

Integer overflow in the Region::unflatten function in libs/ui/Region.cpp in mediaserver in Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 al…

Patch available
Fix from $1,600 2016-09-11
Chrome HIGH 8.8
CVE-2016-5159

Multiple integer overflows in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, …

Fix: after 52.0.2743.116
Fix from $1,950 2016-09-11
Chrome HIGH 8.8
CVE-2016-5158

Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows …

Fix: after 52.0.2743.116
Fix from $1,950 2016-09-11
Chrome HIGH 8.8
CVE-2016-5152

Integer overflow in the opj_tcd_get_decoded_tile_size function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Window…

Fix: after 52.0.2743.116
Fix from $1,950 2016-09-11
Android HIGH 7.8
CVE-2014-9863

Integer underflow in the diag driver in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices allows attackers to gain…

Fix: after 6.0.1
Fix from $1,950 2016-08-06
Chrome HIGH 8.8
CVE-2016-5138

Integer overflow in the kbasep_vinstr_attach_client function in midgard/mali_kbase_vinstr.c in Google Chrome before 52.0.2743.85 allows remote attack…

Fix: after 52.0.2743.82
Fix from $1,950 2016-08-01
Chrome MEDIUM 6.8
CVE-2015-1283EPSS 19%

Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, all…

Fix: 2.7.12 / 3.3.7+
Fix from $1,600 2015-07-23
Chrome HIGH 7.5
CVE-2014-1736

Integer overflow in api.cc in Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, allows …

Fix: 34.0.1847.131 / 34.0.1847.132+
Fix from $1,950 2014-05-06
Chrome MEDIUM 5.0
CVE-2013-0899

Integer overflow in the padding implementation in the opus_packet_parse_impl function in src/opus_decoder.c in Opus before 1.0.2, as used in Google C…

Fix: 1.0.2 / 25.0.1364.97+
Fix from $1,600 2013-02-23
Chrome HIGH 7.5
CVE-2013-0891

Integer overflow in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a d…

Fix: 25.0.1364.97 / 25.0.1364.99+
Fix from $1,950 2013-02-23
Chrome HIGH 10.0
CVE-2012-5143

Integer overflow in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service or possibly have unspecified other impact …

Fix: after 23.0.1271.96
Fix from $1,950 2012-12-12
Chrome MEDIUM 6.8
CVE-2011-3065

Skia, as used in Google Chrome before 18.0.1025.142, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspec…

Fix: 18.0.1025.142+
Fix from $1,600 2012-03-30
Chrome HIGH 8.8
CVE-2011-3045

Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and oth…

Fix: 17.0.963.83+
Fix from $1,950 2012-03-22
Chrome MEDIUM 6.8
CVE-2011-3026EPSS 73%

Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspec…

Fix: 6.0 / 10.7.5+
Fix from $1,600 2012-02-16
Chrome MEDIUM 6.8
CVE-2011-3015

Multiple integer overflows in the PDF codecs in Google Chrome before 17.0.963.56 allow remote attackers to cause a denial of service or possibly have…

Fix: 17.0.963.56+
Fix from $1,600 2012-02-16
Chrome HIGH 7.5
CVE-2011-2829

Integer overflow in Google Chrome before 13.0.782.215 on 32-bit platforms allows remote attackers to cause a denial of service or possibly have unspe…

Fix: 13.0.782.215+
Fix from $1,950 2011-08-29
Android HIGH 7.8
CVE-2011-1823 KEVEPSS 42%

The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local use…

Fix: 2.3.4+
Fix from $1,950 2011-06-09
Chrome HIGH 7.5
CVE-2011-1800

Multiple integer overflows in the SVG Filters implementation in WebCore in WebKit in Google Chrome before 11.0.696.68 allow remote attackers to cause…

Fix: 11.0.696.71+
Fix from $1,950 2011-05-16
Chrome MEDIUM 6.8
CVE-2011-1437

Multiple integer overflows in Google Chrome before 11.0.696.57 allow remote attackers to cause a denial of service or possibly have unspecified other…

Fix: 11.0.696.57+
Fix from $1,600 2011-05-03
Chrome HIGH 7.5
CVE-2011-1121

Integer overflow in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact v…

Fix: 5.0 / 5.0.6+
Fix from $1,950 2011-03-01
Chrome CRITICAL 9.8
CVE-2010-4203

WebM libvpx (aka the VP8 Codec SDK) before 0.9.5, as used in Google Chrome before 7.0.517.44, allows remote attackers to cause a denial of service (m…

Fix: 0.9.5 / 7.0.517.44+
Fix from $2,300 2010-11-06
Chrome CRITICAL 9.8
CVE-2010-4202

Multiple integer overflows in Google Chrome before 7.0.517.44 on Linux allow remote attackers to cause a denial of service or possibly have unspecifi…

Fix: 7.0.517.44+
Fix from $2,300 2010-11-06
Chrome CRITICAL 9.8
CVE-2010-3729

The SPDY protocol implementation in Google Chrome before 6.0.472.62 does not properly manage buffers, which might allow remote attackers to execute a…

Fix: 6.0.472.62+
Fix from $2,300 2010-10-05
Chrome HIGH 10.0
CVE-2010-3254

The WebSockets implementation in Google Chrome before 6.0.472.53 does not properly handle integer values, which allows remote attackers to cause a de…

Fix: 6.0.472.53+
Fix from $1,950 2010-09-07
Chrome HIGH 10.0
CVE-2010-1233

Multiple integer overflows in Google Chrome before 4.1.249.1036 allow remote attackers to have an unspecified impact via vectors involving WebKit Jav…

Fix: 4.1.249.1036+
Fix from $1,950 2010-04-01