Browse CVEs

HIGH 8.8 CVE-2019-5795 Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a … Chrome 73.0.3683.75+ Fix from $1,9502019-05-23 CRITICAL 9.8 CVE-2019-2046 In CalculateInstanceSizeForDerivedClass of objects.cc, there is possible memory corruption due to an integer overflow. This could lead to remote code… Android Mitigation only Fix from $2,3002019-05-08 CRITICAL 9.8 CVE-2018-7575 Google TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability. The type of exploitation is context-dependent. Tensorflow after 1.7.0 Fix from $2,3002019-04-24 HIGH 7.8 CVE-2019-2034 In rw_i93_sm_read_ndef of rw_i93.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privi… Android Patch available Fix from $1,9502019-04-19 HIGH 7.8 CVE-2019-1993 In register_app of btif_hd.cc, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege wit… Android Mitigation only Fix from $1,9502019-02-28 MEDIUM 6.5 CVE-2018-9594 In llcp_link_proc_agf_pdu of llcp_link.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible o… Android Mitigation only Fix from $1,6002019-02-11 HIGH 8.8 CVE-2018-6174 Integer overflows in Swiftshader in Google Chrome prior to 68.0.3440.75 potentially allowed a remote attacker to execute arbitrary code via a crafted… Chrome 68.0.3440.75+ Fix from $1,9502019-01-09 HIGH 8.8 CVE-2018-6120 An integer overflow that could lead to an attacker-controlled heap out-of-bounds write in PDFium in Google Chrome prior to 66.0.3359.170 allowed a re… Chrome 67.0.3396.62+ Fix from $1,9502019-01-09 HIGH 7.8 CVE-2018-11985 In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, When allocating heap using user supplied s… Android Patch available Fix from $1,9502018-12-20 HIGH 8.8 CVE-2018-18341 An integer overflow leading to a heap buffer overflow in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploi… Chrome 71.0.3578.80+ Fix from $1,9502018-12-11 HIGH 8.8 CVE-2018-18356 An integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially… Chrome 71.0.3578.80+ Fix from $1,9502018-12-11 CRITICAL 9.8 CVE-2018-9556 In ParsePayloadHeader of payload_metadata.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalatio… Android Patch available Fix from $2,3002018-12-06 HIGH 7.5 CVE-2018-9565 In readBytes of xltdecwbxml.c, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure wi… Android Mitigation only Fix from $1,9502018-12-06 HIGH 8.8 CVE-2018-6090 An integer overflow that lead to a heap buffer-overflow in Skia in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrar… Chrome 66.0.3359.117+ Fix from $1,9502018-12-04 HIGH 8.8 CVE-2018-6092EPSS 9% An integer overflow on 32-bit systems in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code insi… Chrome 66.0.3359.117+ Fix from $1,9502018-12-04 HIGH 7.8 CVE-2018-11260 In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing a fast Initial link setup… Android Patch available Fix from $1,9502018-11-27 HIGH 8.8 CVE-2018-6065 KEVEPSS 60% Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3325.146 a… Chrome 65.0.3325.146+ Fix from $1,9502018-11-14 HIGH 8.8 CVE-2018-6071 An integer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory read via a crafted H… Chrome 65.0.3325.146+ Fix from $1,9502018-11-14 HIGH 8.8 CVE-2018-6072 An integer overflow leading to use after free in PDFium in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap… Chrome 65.0.3325.146+ Fix from $1,9502018-11-14 HIGH 7.8 CVE-2018-9498 In SkSampler::Fill of SkSampler.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution wit… Android Patch available Fix from $1,9502018-10-02 HIGH 7.8 CVE-2018-9491 In AMediaCodecCryptoInfo_new of NdkMediaCodec.cpp, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code… Android Patch available Fix from $1,9502018-10-02 HIGH 7.8 CVE-2018-9473 In ihevcd_parse_sei_payload of ihevcd_parse_headers.c, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote … Android Patch available Fix from $1,9502018-10-02 HIGH 7.8 CVE-2018-11894 In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing preferred network offloa… Android Patch available Fix from $1,9502018-09-19 HIGH 7.8 CVE-2018-11886 In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check while calculating the MPDU … Android Patch available Fix from $1,9502018-09-19 HIGH 7.8 CVE-2018-11826 In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check on integer overflow while c… Android Patch available Fix from $1,9502018-09-18 HIGH 7.8 CVE-2017-15818 In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while loading a user application in qseec… Android Patch available Fix from $1,9502018-09-18 HIGH 7.8 CVE-2017-15828 In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while accessing the keystore in LK, an in… Android Patch available Fix from $1,9502018-09-18 MEDIUM 6.5 CVE-2017-15422 Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google Chrome p… Chrome 60.1 / 63.0.3239.84+ Fix from $1,6002018-08-28 HIGH 7.8 CVE-2018-5907 Possible buffer overflow in msm_adsp_stream_callback_put due to lack of input validation of user-provided data that leads to integer overflow in all … Android after 8.1 Fix from $1,9502018-07-06 CRITICAL 9.8 CVE-2018-3586 An integer overflow to buffer overflow vulnerability exists in the ADSPRPC heap manager in all Android releases(Android for MSM, Firefox OS for MSM, … Android Mitigation only Fix from $2,3002018-07-06