Vulnerability index

Browse CVEs

121 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Resource Management ErrorsCWE-399 × clear
Android CRITICAL 9.8
CVE-2016-10390

In all Qualcomm products with Android releases from CAF using the Linux kernel, when downloading a file, an excessive amount of memory may be consume…

No fix yet
Fix from $2,300 2017-08-18
Android MEDIUM 5.5
CVE-2016-6764

A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issu…

Mitigation only
Fix from $1,600 2017-01-12
Android MEDIUM 5.5
CVE-2016-6767

A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issu…

Mitigation only
Fix from $1,600 2017-01-12
Android MEDIUM 5.9
CVE-2016-5348

The GPS component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows man-in…

Patch available
Fix from $1,600 2016-10-10
Android HIGH 7.8
CVE-2016-3767

The MediaTek Wi-Fi driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Andr…

Fix: after 6.0.1
Fix from $1,950 2016-07-11
Android HIGH 7.7
CVE-2016-3765

decoder/impeg2d_bitstream.c in mediaserver in Android 6.x before 2016-07-01 allows attackers to obtain sensitive information from process memory or c…

Mitigation only
Fix from $1,950 2016-07-11
Android HIGH 7.5
CVE-2016-3754

mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not limit process-memory usage, which…

Mitigation only
Fix from $1,950 2016-07-11
Android MEDIUM 6.2
CVE-2015-6646

The System V IPC implementation in the kernel in Android before 6.0 2016-01-01 allows attackers to cause a denial of service (global kernel resource …

Mitigation only
Fix from $1,600 2016-01-06
Chrome HIGH 7.5
CVE-2015-1227

The DragImage::create function in platform/DragImage.cpp in Blink, as used in Google Chrome before 41.0.2272.76, does not initialize memory for image…

Fix: after 40.0.2214.115
Fix from $1,950 2015-03-09
Chrome HIGH 7.5
CVE-2014-7940

The collator implementation in i18n/ucol.cpp in International Components for Unicode (ICU) 52 through SVN revision 293126, as used in Google Chrome b…

Fix: after 52.1
Fix from $1,950 2015-01-22
Chrome HIGH 7.5
CVE-2014-7907

Multiple use-after-free vulnerabilities in modules/screen_orientation/ScreenOrientationController.cpp in Blink, as used in Google Chrome before 39.0.…

Fix: after 39.0.2171.45
Fix from $1,950 2014-11-19
Chrome HIGH 7.5
CVE-2014-7906

Use-after-free vulnerability in the Pepper plugins in Google Chrome before 39.0.2171.65 allows remote attackers to cause a denial of service or possi…

Fix: after 39.0.2171.45
Fix from $1,950 2014-11-19
Chrome HIGH 7.5
CVE-2014-7900

Use-after-free vulnerability in the CPDF_Parser::IsLinearizedFile function in fpdfapi/fpdf_parser/fpdf_parser_parser.cpp in PDFium, as used in Google…

Fix: after 39.0.2171.45
Fix from $1,950 2014-11-19
Chrome MEDIUM 5.0
CVE-2014-3195

Google V8, as used in Google Chrome before 38.0.2125.101, does not properly track JavaScript heap-memory allocations as allocations of uninitialized …

Fix: after 38.0.2125.7
Fix from $1,600 2014-10-08
Chrome HIGH 7.5
CVE-2014-1743

Use-after-free vulnerability in the StyleElement::removedFromDocument function in core/dom/StyleElement.cpp in Blink, as used in Google Chrome before…

Fix: after 35.0.1916.113
Fix from $1,950 2014-05-21
Chrome HIGH 7.1
CVE-2014-1745

Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a de…

Fix: after 35.0.1916.113
Fix from $1,950 2014-05-21
Chrome HIGH 7.5
CVE-2014-1742

Use-after-free vulnerability in the FrameSelection::updateAppearance function in core/editing/FrameSelection.cpp in Blink, as used in Google Chrome b…

Fix: after 34.0.1847.136
Fix from $1,950 2014-05-14
Chrome HIGH 7.5
CVE-2014-1740

Multiple use-after-free vulnerabilities in net/websockets/websocket_job.cc in the WebSockets implementation in Google Chrome before 34.0.1847.137 all…

Fix: after 34.0.1847.136
Fix from $1,950 2014-05-14
Chrome HIGH 7.5
CVE-2014-1727

Use-after-free vulnerability in content/renderer/renderer_webcolorchooser_impl.h in Google Chrome before 34.0.1847.116 allows remote attackers to cau…

Fix: after 34.0.1847.115
Fix from $1,950 2014-04-09
Chrome HIGH 7.5
CVE-2014-1724

Use-after-free vulnerability in Free(b)soft Laboratory Speech Dispatcher 0.7.1, as used in Google Chrome before 34.0.1847.116, allows remote attacker…

Fix: after 34.0.1847.115
Fix from $1,950 2014-04-09
Chrome HIGH 7.5
CVE-2014-1720

Use-after-free vulnerability in the HTMLBodyElement::insertedInto function in core/html/HTMLBodyElement.cpp in Blink, as used in Google Chrome before…

Fix: after 34.0.1847.115
Fix from $1,950 2014-04-09
Chrome HIGH 7.5
CVE-2014-1722

Use-after-free vulnerability in the RenderBlock::addChildIgnoringAnonymousColumnBlocks function in core/rendering/RenderBlock.cpp in Blink, as used i…

Fix: after 34.0.1847.115
Fix from $1,950 2014-04-09
Chrome HIGH 7.5
CVE-2014-1719

Use-after-free vulnerability in the WebSharedWorkerStub::OnTerminateWorkerContext function in content/worker/websharedworker_stub.cc in the Web Worke…

Fix: after 34.0.1847.115
Fix from $1,950 2014-04-09
Chrome HIGH 7.5
CVE-2014-1700

Use-after-free vulnerability in modules/speech/SpeechSynthesis.cpp in Blink, as used in Google Chrome before 33.0.1750.149, allows remote attackers t…

Fix: after 33.0.1750.146
Fix from $1,950 2014-03-16
Chrome HIGH 7.5
CVE-2014-1702

Use-after-free vulnerability in the DatabaseThread::cleanupDatabaseThread function in modules/webdatabase/DatabaseThread.cpp in the web database impl…

Fix: after 33.0.1750.146
Fix from $1,950 2014-03-16
Chrome HIGH 7.5
CVE-2014-1703

Use-after-free vulnerability in the WebSocketDispatcherHost::SendOrDrop function in content/browser/renderer_host/websocket_dispatcher_host.cc in the…

Fix: after 33.0.1750.146
Fix from $1,950 2014-03-16
Chrome HIGH 7.5
CVE-2013-6663

Use-after-free vulnerability in the SVGImage::setContainerSize function in core/svg/graphics/SVGImage.cpp in the SVG implementation in Blink, as used…

Fix: after 33.0.1750.144
Fix from $1,950 2014-03-05
Chrome HIGH 7.5
CVE-2013-6664

Use-after-free vulnerability in the FormAssociatedElement::formRemovedFromTree function in core/html/FormAssociatedElement.cpp in Blink, as used in G…

Fix: after 33.0.1750.144
Fix from $1,950 2014-03-05
Chrome HIGH 7.5
CVE-2013-6658

Multiple use-after-free vulnerabilities in the layout implementation in Blink, as used in Google Chrome before 33.0.1750.117, allow remote attackers …

Fix: after 33.0.1750.116
Fix from $1,950 2014-02-24
Chrome HIGH 7.5
CVE-2013-6653

Use-after-free vulnerability in the web contents implementation in Google Chrome before 33.0.1750.117 allows remote attackers to cause a denial of se…

Fix: after 33.0.1750.116
Fix from $1,950 2014-02-24