Browse CVEs

HIGH 7.8 CVE-2017-13180 In the onQueueFilled function of SoftAVCDec, there is a possible out-of-bounds write due to a use after free if a bad header causes the decoder to ge… Android Patch available Fix from $1,9502018-01-12 HIGH 7.8 CVE-2017-13184 In the enableVSyncInjections function of SurfaceFlinger, there is a possible use after free of mVSyncInjector. This could lead to a local elevation o… Android Patch available Fix from $1,9502018-01-12 HIGH 7.8 CVE-2017-0869 NVIDIA driver contains an integer overflow vulnerability which could cause a use after free and possibly lead to an elevation of privilege enabling c… Android Patch available Fix from $1,9502018-01-12 HIGH 7.8 CVE-2017-15849 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a LayerStack can be destroyed in betw… Android Patch available Fix from $1,9502018-01-10 HIGH 7.8 CVE-2017-6263 NVIDIA driver contains a vulnerability where it is possible a use after free malfunction can occur due to improper usage of the list_for_each kernel … Android Patch available Fix from $1,9502017-12-06 HIGH 7.8 CVE-2017-6276 NVIDIA mediaserver contains a vulnerability where it is possible a use after free malfunction can occur due to an incorrect bounds check which could … Android Mitigation only Fix from $1,9502017-12-06 HIGH 7.0 CVE-2017-6262 NVIDIA driver contains a vulnerability where it is possible a use after free malfunction can occur due to a race condition which could enable unautho… Android Mitigation only Fix from $1,9502017-12-06 HIGH 7.8 CVE-2017-13154 An elevation of privilege vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7… Android Mitigation only Fix from $1,9502017-12-06 CRITICAL 9.8 CVE-2017-11005 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a Use After Free condition can occur … Android Patch available Fix from $2,3002017-12-05 CRITICAL 9.8 CVE-2017-11006 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a Use After Free condition can occur … Android Patch available Fix from $2,3002017-12-05 CRITICAL 9.8 CVE-2017-14918 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the GPS location wireless interfac… Android Mitigation only Fix from $2,3002017-12-05 HIGH 7.8 CVE-2017-14904 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a crafted binder request can cause an… Android Patch available Fix from $1,9502017-12-05 HIGH 7.0 CVE-2017-14902 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, due to a race condition in the GLink … Android Patch available Fix from $1,9502017-12-05 HIGH 7.0 CVE-2017-9703 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a race condition in a Camera driver c… Android Patch available Fix from $1,9502017-12-05 HIGH 7.8 CVE-2017-11033 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the coresight-tmc driver, a simult… Android Mitigation only Fix from $1,9502017-12-05 HIGH 7.5 CVE-2017-11031 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the VIDIOC_G_SDE_ROTATOR_FENCE ioctl … Android Mitigation only Fix from $1,9502017-12-05 HIGH 7.0 CVE-2017-11044 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a KGSL driver function, a race con… Android Mitigation only Fix from $1,9502017-12-05 HIGH 7.0 CVE-2017-11045 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a camera driver function, a race c… Android Mitigation only Fix from $1,9502017-12-05 HIGH 7.8 CVE-2017-0861 Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem in the Linux kernel allows attackers to gain privileges via unspecifi… Android Patch available Fix from $1,9502017-11-16 HIGH 7.8 CVE-2017-11091 In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the function mdss_rotator_ioctl in… Android Patch available Fix from $1,9502017-11-16 HIGH 7.8 CVE-2017-11092 In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the KGSL driver function kgsl_ioct… Android Patch available Fix from $1,9502017-11-16 HIGH 7.8 CVE-2017-11024 In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a race condition in the rmnet USB con… Android Patch available Fix from $1,9502017-11-16 HIGH 8.8 CVE-2017-5111 A use after free in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac allowed a remote attacker to potentially exploit memory… Chrome 61.0.3163.79+ Fix from $1,9502017-10-27 HIGH 8.8 CVE-2017-5080 A use after free in credit card autofill in Google Chrome prior to 59.0.3071.86 for Linux and Windows allowed a remote attacker to perform an out of … Chrome 59.0.3071.86+ Fix from $1,9502017-10-27 HIGH 8.8 CVE-2017-5087 A use after free in Blink in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for Android, allowed a remote attack… Chrome 59.0.3071.104 / 59.0.3071.117+ Fix from $1,9502017-10-27 HIGH 8.8 CVE-2017-5091 A use after free in IndexedDB in Google Chrome prior to 60.0.3112.78 for Linux, Android, Windows, and Mac allowed a remote attacker to perform an out… Chrome 60.0.3112.78+ Fix from $1,9502017-10-27 HIGH 8.8 CVE-2017-5098EPSS 16% A use after free in V8 in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform an out of bou… Chrome after 60.0.3112.78 Fix from $1,9502017-10-27 HIGH 8.8 CVE-2017-5100 A use after free in Apps in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to perform an out of bounds memory read via a c… Chrome after 60.0.3112.78 Fix from $1,9502017-10-27 HIGH 8.0 CVE-2017-5074 A use after free in Chrome Apps in Google Chrome prior to 59.0.3071.86 for Windows allowed a remote attacker to perform an out of bounds memory read … Chrome 59.0.3071.86+ Fix from $1,9502017-10-27 HIGH 8.8 CVE-2017-5055 A use after free in printing in Google Chrome prior to 57.0.2987.133 for Linux and Windows allowed a remote attacker to perform an out of bounds memo… Chrome 57.0.2987.133+ Fix from $1,9502017-10-27