Browse CVEs

CRITICAL 9.8 CVE-2016-7990 On Samsung Galaxy S4 through S7 devices, an integer overflow condition exists within libomacp.so when parsing OMACP messages (within WAP Push SMS mes… Android Mitigation only Fix from $2,3002016-10-31 HIGH 7.8 CVE-2016-3935 Multiple integer overflows in drivers/crypto/msm/qcedev.c in the Qualcomm cryptographic engine driver in Android before 2016-10-05 on Nexus 5X, Nexus… Android after 7.0 Fix from $1,9502016-10-10 HIGH 7.8 CVE-2016-3901 Multiple integer overflows in drivers/crypto/msm/qcedev.c in the Qualcomm cryptographic engine driver in Android before 2016-10-05 on Nexus 5X, Nexus… Android after 7.0 Fix from $1,9502016-10-10 MEDIUM 5.5 CVE-2016-3895 Integer overflow in the Region::unflatten function in libs/ui/Region.cpp in mediaserver in Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 al… Android Patch available Fix from $1,6002016-09-11 HIGH 8.8 CVE-2016-5159 Multiple integer overflows in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, … Chrome after 52.0.2743.116 Fix from $1,9502016-09-11 HIGH 8.8 CVE-2016-5158 Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows … Chrome after 52.0.2743.116 Fix from $1,9502016-09-11 HIGH 8.8 CVE-2016-5152 Integer overflow in the opj_tcd_get_decoded_tile_size function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Window… Chrome after 52.0.2743.116 Fix from $1,9502016-09-11 HIGH 7.8 CVE-2014-9863 Integer underflow in the diag driver in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices allows attackers to gain… Android after 6.0.1 Fix from $1,9502016-08-06 HIGH 8.8 CVE-2016-5138 Integer overflow in the kbasep_vinstr_attach_client function in midgard/mali_kbase_vinstr.c in Google Chrome before 52.0.2743.85 allows remote attack… Chrome after 52.0.2743.82 Fix from $1,9502016-08-01 MEDIUM 6.8 CVE-2015-1283EPSS 19% Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, all… Chrome 2.7.12 / 3.3.7+ Fix from $1,6002015-07-23 HIGH 7.5 CVE-2014-1736 Integer overflow in api.cc in Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, allows … Chrome 34.0.1847.131 / 34.0.1847.132+ Fix from $1,9502014-05-06 MEDIUM 5.0 CVE-2013-0899 Integer overflow in the padding implementation in the opus_packet_parse_impl function in src/opus_decoder.c in Opus before 1.0.2, as used in Google C… Chrome 1.0.2 / 25.0.1364.97+ Fix from $1,6002013-02-23 HIGH 7.5 CVE-2013-0891 Integer overflow in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a d… Chrome 25.0.1364.97 / 25.0.1364.99+ Fix from $1,9502013-02-23 HIGH 10.0 CVE-2012-5143 Integer overflow in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service or possibly have unspecified other impact … Chrome after 23.0.1271.96 Fix from $1,9502012-12-12 MEDIUM 6.8 CVE-2011-3065 Skia, as used in Google Chrome before 18.0.1025.142, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspec… Chrome 18.0.1025.142+ Fix from $1,6002012-03-30 HIGH 8.8 CVE-2011-3045 Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and oth… Chrome 17.0.963.83+ Fix from $1,9502012-03-22 MEDIUM 6.8 CVE-2011-3026EPSS 73% Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspec… Chrome 6.0 / 10.7.5+ Fix from $1,6002012-02-16 MEDIUM 6.8 CVE-2011-3015 Multiple integer overflows in the PDF codecs in Google Chrome before 17.0.963.56 allow remote attackers to cause a denial of service or possibly have… Chrome 17.0.963.56+ Fix from $1,6002012-02-16 HIGH 7.5 CVE-2011-2829 Integer overflow in Google Chrome before 13.0.782.215 on 32-bit platforms allows remote attackers to cause a denial of service or possibly have unspe… Chrome 13.0.782.215+ Fix from $1,9502011-08-29 HIGH 7.8 CVE-2011-1823 KEVEPSS 42% The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local use… Android 2.3.4+ Fix from $1,9502011-06-09 HIGH 7.5 CVE-2011-1800 Multiple integer overflows in the SVG Filters implementation in WebCore in WebKit in Google Chrome before 11.0.696.68 allow remote attackers to cause… Chrome 11.0.696.71+ Fix from $1,9502011-05-16 MEDIUM 6.8 CVE-2011-1437 Multiple integer overflows in Google Chrome before 11.0.696.57 allow remote attackers to cause a denial of service or possibly have unspecified other… Chrome 11.0.696.57+ Fix from $1,6002011-05-03 HIGH 7.5 CVE-2011-1121 Integer overflow in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact v… Chrome 5.0 / 5.0.6+ Fix from $1,9502011-03-01 CRITICAL 9.8 CVE-2010-4203 WebM libvpx (aka the VP8 Codec SDK) before 0.9.5, as used in Google Chrome before 7.0.517.44, allows remote attackers to cause a denial of service (m… Chrome 0.9.5 / 7.0.517.44+ Fix from $2,3002010-11-06 CRITICAL 9.8 CVE-2010-4202 Multiple integer overflows in Google Chrome before 7.0.517.44 on Linux allow remote attackers to cause a denial of service or possibly have unspecifi… Chrome 7.0.517.44+ Fix from $2,3002010-11-06 CRITICAL 9.8 CVE-2010-3729 The SPDY protocol implementation in Google Chrome before 6.0.472.62 does not properly manage buffers, which might allow remote attackers to execute a… Chrome 6.0.472.62+ Fix from $2,3002010-10-05 HIGH 10.0 CVE-2010-3254 The WebSockets implementation in Google Chrome before 6.0.472.53 does not properly handle integer values, which allows remote attackers to cause a de… Chrome 6.0.472.53+ Fix from $1,9502010-09-07 HIGH 10.0 CVE-2010-1233 Multiple integer overflows in Google Chrome before 4.1.249.1036 allow remote attackers to have an unspecified impact via vectors involving WebKit Jav… Chrome 4.1.249.1036+ Fix from $1,9502010-04-01