ByteOS

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15471

Resource:

vdb-entry

signature

x_refsource_OVAL

Resource:

third-party-advisory

x_refsource_SECUNIA

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://security.gentoo.org/glsa/glsa-201205-04.xml	vendor-advisory x_refsource_GENTOO x_transferred
http://www.securityfocus.com/bid/53679	vdb-entry x_refsource_BID x_transferred
http://code.google.com/p/chromium/issues/detail?id=118018	x_refsource_CONFIRM x_transferred
http://googlechromereleases.blogspot.com/2012/05/stable-channel-update_23.html	x_refsource_CONFIRM x_transferred
http://www.securitytracker.com/id?1027098	vdb-entry x_refsource_SECTRACK x_transferred
http://secunia.com/advisories/49306	third-party-advisory x_refsource_SECUNIA x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15471	vdb-entry signature x_refsource_OVAL x_transferred
http://secunia.com/advisories/49277	third-party-advisory x_refsource_SECUNIA x_transferred

Hyperlink: http://security.gentoo.org/glsa/glsa-201205-04.xml

Resource:

vendor-advisory

x_refsource_GENTOO

x_transferred

Hyperlink: http://www.securityfocus.com/bid/53679

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://code.google.com/p/chromium/issues/detail?id=118018

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://googlechromereleases.blogspot.com/2012/05/stable-channel-update_23.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.securitytracker.com/id?1027098

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15471

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:24 May, 2012 | 18:55

Updated At:11 Apr, 2025 | 00:51

Skia, as used in Google Chrome before 19.0.1084.52, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P

Type: Primary

Version: 2.0

Base score: 5.0

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:N/C:N/I:N/A:P

CPE Matches

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

>>chrome>>Versions up to 19.0.1084.51(inclusive)

cpe:2.3:a:google:chrome:19.0.1028.0:*:*:*:*:*:*:*

>>chrome>>19.0.1028.0

cpe:2.3:a:google:chrome:19.0.1029.0:*:*:*:*:*:*:*

>>chrome>>19.0.1029.0

cpe:2.3:a:google:chrome:19.0.1030.0:*:*:*:*:*:*:*

>>chrome>>19.0.1030.0

cpe:2.3:a:google:chrome:19.0.1031.0:*:*:*:*:*:*:*

>>chrome>>19.0.1031.0

cpe:2.3:a:google:chrome:19.0.1032.0:*:*:*:*:*:*:*

>>chrome>>19.0.1032.0

cpe:2.3:a:google:chrome:19.0.1033.0:*:*:*:*:*:*:*

>>chrome>>19.0.1033.0

cpe:2.3:a:google:chrome:19.0.1034.0:*:*:*:*:*:*:*

>>chrome>>19.0.1034.0

cpe:2.3:a:google:chrome:19.0.1035.0:*:*:*:*:*:*:*

>>chrome>>19.0.1035.0

cpe:2.3:a:google:chrome:19.0.1036.0:*:*:*:*:*:*:*

>>chrome>>19.0.1036.0

cpe:2.3:a:google:chrome:19.0.1036.2:*:*:*:*:*:*:*

>>chrome>>19.0.1036.2

cpe:2.3:a:google:chrome:19.0.1036.3:*:*:*:*:*:*:*

>>chrome>>19.0.1036.3

cpe:2.3:a:google:chrome:19.0.1036.4:*:*:*:*:*:*:*

>>chrome>>19.0.1036.4

cpe:2.3:a:google:chrome:19.0.1036.6:*:*:*:*:*:*:*

>>chrome>>19.0.1036.6

cpe:2.3:a:google:chrome:19.0.1036.7:*:*:*:*:*:*:*

>>chrome>>19.0.1036.7

cpe:2.3:a:google:chrome:19.0.1037.0:*:*:*:*:*:*:*

>>chrome>>19.0.1037.0

cpe:2.3:a:google:chrome:19.0.1038.0:*:*:*:*:*:*:*

>>chrome>>19.0.1038.0

cpe:2.3:a:google:chrome:19.0.1039.0:*:*:*:*:*:*:*

>>chrome>>19.0.1039.0

cpe:2.3:a:google:chrome:19.0.1040.0:*:*:*:*:*:*:*

>>chrome>>19.0.1040.0

cpe:2.3:a:google:chrome:19.0.1041.0:*:*:*:*:*:*:*

>>chrome>>19.0.1041.0

cpe:2.3:a:google:chrome:19.0.1042.0:*:*:*:*:*:*:*

>>chrome>>19.0.1042.0

cpe:2.3:a:google:chrome:19.0.1043.0:*:*:*:*:*:*:*

>>chrome>>19.0.1043.0

cpe:2.3:a:google:chrome:19.0.1044.0:*:*:*:*:*:*:*

>>chrome>>19.0.1044.0

cpe:2.3:a:google:chrome:19.0.1045.0:*:*:*:*:*:*:*

>>chrome>>19.0.1045.0

cpe:2.3:a:google:chrome:19.0.1046.0:*:*:*:*:*:*:*

>>chrome>>19.0.1046.0

cpe:2.3:a:google:chrome:19.0.1047.0:*:*:*:*:*:*:*

>>chrome>>19.0.1047.0

cpe:2.3:a:google:chrome:19.0.1048.0:*:*:*:*:*:*:*

>>chrome>>19.0.1048.0

cpe:2.3:a:google:chrome:19.0.1049.0:*:*:*:*:*:*:*

>>chrome>>19.0.1049.0

cpe:2.3:a:google:chrome:19.0.1049.1:*:*:*:*:*:*:*

>>chrome>>19.0.1049.1

cpe:2.3:a:google:chrome:19.0.1049.2:*:*:*:*:*:*:*

>>chrome>>19.0.1049.2

cpe:2.3:a:google:chrome:19.0.1049.3:*:*:*:*:*:*:*

>>chrome>>19.0.1049.3

cpe:2.3:a:google:chrome:19.0.1050.0:*:*:*:*:*:*:*

>>chrome>>19.0.1050.0

cpe:2.3:a:google:chrome:19.0.1051.0:*:*:*:*:*:*:*

>>chrome>>19.0.1051.0

cpe:2.3:a:google:chrome:19.0.1052.0:*:*:*:*:*:*:*

>>chrome>>19.0.1052.0

cpe:2.3:a:google:chrome:19.0.1053.0:*:*:*:*:*:*:*

>>chrome>>19.0.1053.0

cpe:2.3:a:google:chrome:19.0.1054.0:*:*:*:*:*:*:*

>>chrome>>19.0.1054.0

cpe:2.3:a:google:chrome:19.0.1055.0:*:*:*:*:*:*:*

>>chrome>>19.0.1055.0

cpe:2.3:a:google:chrome:19.0.1055.1:*:*:*:*:*:*:*

>>chrome>>19.0.1055.1

cpe:2.3:a:google:chrome:19.0.1055.2:*:*:*:*:*:*:*

>>chrome>>19.0.1055.2

cpe:2.3:a:google:chrome:19.0.1055.3:*:*:*:*:*:*:*

>>chrome>>19.0.1055.3

cpe:2.3:a:google:chrome:19.0.1056.0:*:*:*:*:*:*:*

>>chrome>>19.0.1056.0

cpe:2.3:a:google:chrome:19.0.1056.1:*:*:*:*:*:*:*

>>chrome>>19.0.1056.1

cpe:2.3:a:google:chrome:19.0.1057.0:*:*:*:*:*:*:*

>>chrome>>19.0.1057.0

cpe:2.3:a:google:chrome:19.0.1057.1:*:*:*:*:*:*:*

>>chrome>>19.0.1057.1

cpe:2.3:a:google:chrome:19.0.1057.3:*:*:*:*:*:*:*

>>chrome>>19.0.1057.3

cpe:2.3:a:google:chrome:19.0.1058.0:*:*:*:*:*:*:*

>>chrome>>19.0.1058.0

cpe:2.3:a:google:chrome:19.0.1058.1:*:*:*:*:*:*:*

>>chrome>>19.0.1058.1

cpe:2.3:a:google:chrome:19.0.1059.0:*:*:*:*:*:*:*

>>chrome>>19.0.1059.0

cpe:2.3:a:google:chrome:19.0.1060.0:*:*:*:*:*:*:*

>>chrome>>19.0.1060.0

cpe:2.3:a:google:chrome:19.0.1060.1:*:*:*:*:*:*:*

>>chrome>>19.0.1060.1

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov

CWE ID: CWE-119

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://code.google.com/p/chromium/issues/detail?id=118018	cve@mitre.org	N/A
http://googlechromereleases.blogspot.com/2012/05/stable-channel-update_23.html	cve@mitre.org	Vendor Advisory
http://secunia.com/advisories/49277	cve@mitre.org	N/A
http://secunia.com/advisories/49306	cve@mitre.org	N/A
http://security.gentoo.org/glsa/glsa-201205-04.xml	cve@mitre.org	N/A
http://www.securityfocus.com/bid/53679	cve@mitre.org	N/A
http://www.securitytracker.com/id?1027098	cve@mitre.org	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15471	cve@mitre.org	N/A
http://code.google.com/p/chromium/issues/detail?id=118018	af854a3a-2127-422b-91ae-364da2661108	N/A
http://googlechromereleases.blogspot.com/2012/05/stable-channel-update_23.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://secunia.com/advisories/49277	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/49306	af854a3a-2127-422b-91ae-364da2661108	N/A
http://security.gentoo.org/glsa/glsa-201205-04.xml	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/53679	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securitytracker.com/id?1027098	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15471	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://code.google.com/p/chromium/issues/detail?id=118018

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://googlechromereleases.blogspot.com/2012/05/stable-channel-update_23.html

Source: cve@mitre.org

Resource:

Vendor Advisory

Source: cve@mitre.org

Resource: N/A

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://security.gentoo.org/glsa/glsa-201205-04.xml

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/53679

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securitytracker.com/id?1027098

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15471

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://code.google.com/p/chromium/issues/detail?id=118018

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://googlechromereleases.blogspot.com/2012/05/stable-channel-update_23.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://security.gentoo.org/glsa/glsa-201205-04.xml

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/53679

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securitytracker.com/id?1027098

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15471

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

1614Records found

CVE-2021-25330

Matching Score-8

Assigner-Samsung Mobile

Matching Score-8

Assigner-Samsung Mobile

CVSS Score-7.5||HIGH

EPSS-0.11% / 30.64%

7 Day CHG~0.00%

Published-02 Mar, 2021 | 17:21

Updated-03 Aug, 2024 | 20:03

Calling of non-existent provider in MobileWips application prior to SMR Feb-2021 Release 1 allows unauthorized actions including denial of service attack by hijacking the provider.

Vendor-n/a Google LLC

Product-android Samsung Mobile Devices

CVE-2010-3411

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-0.16% / 37.36%

7 Day CHG~0.00%

Published-16 Sep, 2010 | 20:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 6.0.472.59 on Linux does not properly handle cursors, which might allow attackers to cause a denial of service (assertion failure) via unspecified vectors.

Vendor-n/a Linux Kernel Organization, Inc Google LLC

Product-linux_kernel chrome n/a

CWE ID-CWE-617

Reachable Assertion

CVE-2015-7718

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-0.11% / 30.06%

7 Day CHG~0.00%

Published-06 Oct, 2015 | 17:00

Updated-12 Apr, 2025 | 10:46

mediaserver in Android 5.x before 5.1.1 LMY48T and 6.0 before 2015-10-01 allows attackers to cause a denial of service (process crash) via unspecified vectors, aka internal bug 22278703, a different vulnerability than CVE-2015-6605.

Vendor-n/a Google LLC

Product-android n/a

CVE-2010-3413

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-0.54% / 66.75%

7 Day CHG~0.00%

Published-16 Sep, 2010 | 20:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the pop-up blocking functionality in Google Chrome before 6.0.472.59 allows remote attackers to cause a denial of service (application crash) via unknown vectors.

Vendor-n/a Google LLC

Product-chrome n/a

CVE-2010-2652

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-0.16% / 37.36%

7 Day CHG~0.00%

Published-06 Jul, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 5.0.375.99 does not properly implement modal dialogs, which allows attackers to cause a denial of service (application crash) via unspecified vectors.

Vendor-n/a Google LLC

Product-chrome n/a

CVE-2010-0662

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-0.49% / 64.43%

7 Day CHG~0.00%

Published-18 Feb, 2010 | 17:19

Updated-11 Apr, 2025 | 00:51

The ParamTraits<SkBitmap>::Read function in common/common_param_traits.cc in Google Chrome before 4.0.249.78 does not use the correct variables in calculations designed to prevent integer overflows, which allows attackers to leverage renderer access to cause a denial of service or possibly have unspecified other impact via bitmap data, related to deserialization.

Vendor-n/a Google LLC

Product-chrome n/a

CVE-2009-2974

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-0.54% / 66.75%

7 Day CHG~0.00%

Published-27 Aug, 2009 | 17:00

Updated-16 Sep, 2024 | 21:58

Google Chrome 1.0.154.65, 1.0.154.48, and earlier allows remote attackers to (1) cause a denial of service (application hang) via vectors involving a chromehtml: URI value for the document.location property or (2) cause a denial of service (application hang and CPU consumption) via vectors involving a series of function calls that set a chromehtml: URI value for the document.location property.

Vendor-n/a Google LLC

Product-chrome n/a

CVE-2014-7909

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-5||MEDIUM

EPSS-1.66% / 81.31%

7 Day CHG~0.00%

Published-19 Nov, 2014 | 11:00

Updated-12 Apr, 2025 | 10:46

effects/SkDashPathEffect.cpp in Skia, as used in Google Chrome before 39.0.2171.65, computes a hash key using uninitialized integer values, which might allow remote attackers to cause a denial of service by rendering crafted data.

Vendor-n/a Google LLC

Product-chrome n/a

CVE-2015-3861

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-5||MEDIUM

EPSS-0.31% / 53.59%

7 Day CHG~0.00%

Published-01 Oct, 2015 | 00:00

Updated-12 Apr, 2025 | 10:46

Multiple integer overflows in the addVorbisCodecInfo function in matroska/MatroskaExtractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allow remote attackers to cause a denial of service (device inoperability) via crafted Matroska data, aka internal bug 21296336.

Vendor-n/a Google LLC

Product-android n/a

CVE-2015-3862

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-5||MEDIUM

EPSS-0.11% / 30.06%

7 Day CHG~0.00%

Published-06 Oct, 2015 | 17:00

Updated-12 Apr, 2025 | 10:46

mediaserver in Android before 5.1.1 LMY48T allows attackers to cause a denial of service (process crash) via unspecified vectors, aka internal bug 22954006.

Vendor-n/a Google LLC

Product-android n/a

CVE-2015-1529

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-0.34% / 56.08%

7 Day CHG~0.00%

Published-23 May, 2017 | 03:56

Updated-20 Apr, 2025 | 01:37

Integer overflow in soundtrigger/ISoundTriggerHwService.cpp in Android allows attacks to cause a denial of service via unspecified vectors.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2015-1574

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-1.62% / 81.07%

7 Day CHG~0.00%

Published-15 Feb, 2015 | 20:00

Updated-12 Apr, 2025 | 10:46

The Google Email application 4.2.2.0200 for Android allows remote attackers to cause a denial of service (persistent application crash) via a "Content-Disposition: ;" header in an e-mail message.

Vendor-n/a Google LLC

Product-email n/a

CVE-2014-7924

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-5||MEDIUM

EPSS-3.00% / 86.04%

7 Day CHG~0.00%

Published-22 Jan, 2015 | 22:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in the IndexedDB implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering duplicate BLOB references, related to content/browser/indexed_db/indexed_db_callbacks.cc and content/browser/indexed_db/indexed_db_dispatcher_host.cc.

Vendor-n/a Google LLC

Product-chrome n/a

CVE-2012-2822

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-5||MEDIUM

EPSS-0.48% / 64.07%

7 Day CHG~0.00%

Published-27 Jun, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

The PDF functionality in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

Vendor-n/a Google LLC

Product-chrome n/a

CVE-2022-30719

Matching Score-8

Assigner-Samsung Mobile

Matching Score-8

Assigner-Samsung Mobile

CVSS Score-2.5||LOW

EPSS-0.06% / 17.83%

7 Day CHG~0.00%

Published-07 Jun, 2022 | 17:58

Updated-03 Aug, 2024 | 06:56

Improper input validation check logic vulnerability in libsmkvextractor prior to SMR Jun-2022 Release 1 allows attackers to trigger crash.

Vendor-Google LLC Samsung Electronics

Product-android Samsung Mobile Devices

CWE ID-CWE-20

Improper Input Validation

CVE-2021-25480

Matching Score-8

Assigner-Samsung Mobile

Matching Score-8

Assigner-Samsung Mobile

CVSS Score-4.4||MEDIUM

EPSS-0.31% / 53.35%

7 Day CHG~0.00%

Published-06 Oct, 2021 | 17:09

Updated-03 Aug, 2024 | 20:03

A lack of replay attack protection in GUTI REALLOCATION COMMAND message process in Qualcomm modem prior to SMR Oct-2021 Release 1 can lead to remote denial of service on mobile network connection.

Vendor-Google LLC Qualcomm Technologies, Inc.Samsung Electronics

Product-android qualcomm Samsung Mobile Devices

CWE ID-CWE-294

Authentication Bypass by Capture-replay

CVE-2021-1022

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.5||HIGH

EPSS-0.58% / 67.94%

7 Day CHG~0.00%

Published-15 Dec, 2021 | 18:06

Updated-03 Aug, 2024 | 15:55

In btif_in_hf_client_generic_evt of btif_hf_client.cc, there is a possible Bluetooth service crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-180420059

Vendor-n/a Google LLC

Product-android Android

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2011-3954

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-5||MEDIUM

EPSS-0.53% / 66.44%

7 Day CHG~0.00%

Published-09 Feb, 2012 | 02:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service (application crash) via vectors that trigger a large amount of database usage.

Vendor-n/a Google LLC

Product-chrome n/a

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2016-10239

Matching Score-6

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-6

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.06% / 19.73%

7 Day CHG~0.00%

Published-16 May, 2017 | 14:00

Updated-20 Apr, 2025 | 01:37

In TrustZone access control policy may potentially be bypassed in all Android releases from CAF using the Linux kernel due to improper input validation an integer overflow vulnerability leading to a buffer overflow could potentially occur and a buffer over-read vulnerability could potentially occur.

Product-android All Qualcomm Products

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2011-1285

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-1.94% / 82.68%

7 Day CHG~0.00%

Published-11 Mar, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

The regular-expression functionality in Google Chrome before 10.0.648.127 does not properly implement reentrancy, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

Vendor-n/a Google LLC

Product-chrome n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0620

Matching Score-6

Matching Score-6

CVSS Score-9.3||HIGH

EPSS-5.85% / 90.20%

7 Day CHG~0.00%

Published-13 May, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0619, CVE-2011-0621, and CVE-2011-0622.

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Oracle Corporation Apple Inc.Adobe Inc.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-0960

Matching Score-6

Matching Score-6

CVSS Score-8.8||HIGH

EPSS-8.78% / 92.17%

7 Day CHG~0.00%

Published-12 Mar, 2016 | 15:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0961, CVE-2016-0962, CVE-2016-0986, CVE-2016-0989, CVE-2016-0992, CVE-2016-1002, and CVE-2016-1005.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-0841

Matching Score-6

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-6

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-9.8||CRITICAL

EPSS-1.21% / 78.20%

7 Day CHG~0.00%

Published-18 Apr, 2016 | 00:00

Updated-12 Apr, 2025 | 10:46

media/libmedia/mediametadataretriever.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 mishandles cleared service binders, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 26040840.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-4489

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-4.3||MEDIUM

EPSS-0.76% / 72.43%

7 Day CHG~0.00%

Published-07 Dec, 2010 | 20:00

Updated-11 Apr, 2025 | 00:51

libvpx, as used in Google Chrome before 8.0.552.215 and possibly other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WebM video. NOTE: this vulnerability exists because of a regression.

Vendor-n/a Google LLC

Product-chrome n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-0836

Matching Score-6

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-6

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.67% / 70.41%

7 Day CHG~0.00%

Published-18 Apr, 2016 | 00:00

Updated-12 Apr, 2025 | 10:46

Stack-based buffer overflow in decoder/impeg2d_vld.c in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 25812590.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-0986

Matching Score-6

Matching Score-6

CVSS Score-8.8||HIGH

EPSS-7.38% / 91.34%

7 Day CHG~0.00%

Published-12 Mar, 2016 | 15:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0960, CVE-2016-0961, CVE-2016-0962, CVE-2016-0989, CVE-2016-0992, CVE-2016-1002, and CVE-2016-1005.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-3112

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.34% / 56.22%

7 Day CHG~0.00%

Published-24 Aug, 2010 | 19:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 5.0.375.127 does not properly implement file dialogs, which allows attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

Vendor-n/a Google LLC

Product-chrome n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8455

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-11.15% / 93.21%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-8419, CVE-2015-8443, CVE-2015-8444, and CVE-2015-8451.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-3119

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.46% / 63.08%

7 Day CHG~0.00%

Published-24 Aug, 2010 | 19:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 5.0.375.127 and webkitgtk before 1.2.6 do not properly support the Ruby language, which allows attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

Vendor-webkitgtk n/a Google LLC

Product-chrome webkitgtk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-3255

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-1.13% / 77.43%

7 Day CHG~0.00%

Published-07 Sep, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 6.0.472.53 and webkitgtk before 1.2.6 do not properly handle counter nodes, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

Vendor-webkitgtk n/a Google LLC

Product-chrome webkitgtk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-3253

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.15% / 36.00%

7 Day CHG~0.00%

Published-07 Sep, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

The implementation of notification permissions in Google Chrome before 6.0.472.53 allows attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

Vendor-n/a Google LLC

Product-chrome n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-3415

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-1.19% / 77.94%

7 Day CHG~0.00%

Published-16 Sep, 2010 | 20:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 6.0.472.59 does not properly implement Geolocation, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

Vendor-n/a Google LLC

Product-chrome n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8438

Matching Score-6

Matching Score-6

CVSS Score-9.3||HIGH

EPSS-7.53% / 91.43%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Heap-based buffer overflow in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via a crafted XML object that is mishandled during a toString call, a different vulnerability than CVE-2015-8446.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-9063

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.25% / 47.79%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a procedure involving a remote UIM client.

Product-android Snapdragon Mobile

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-2901

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-1.55% / 80.68%

7 Day CHG~0.00%

Published-28 Jul, 2010 | 19:32

Updated-11 Apr, 2025 | 00:51

The rendering implementation in Google Chrome before 5.0.375.125 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

Vendor-n/a Debian GNU/Linux Google LLC

Product-debian_linux chrome n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-2647

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-1.70% / 81.54%

7 Day CHG~0.00%

Published-06 Jul, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 5.0.375.99 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via an invalid SVG document.

Vendor-n/a Canonical Ltd.Google LLC

Product-ubuntu_linux chrome n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-9028

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.06% / 19.73%

7 Day CHG~0.00%

Published-13 Jun, 2017 | 20:00

Updated-20 Apr, 2025 | 01:37

In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a cryptographic routine.

Product-android All Qualcomm products

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8893

Matching Score-6

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-6

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-5.5||MEDIUM

EPSS-0.09% / 25.88%

7 Day CHG~0.00%

Published-11 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

app/aboot/aboot.c in the Qualcomm bootloader in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allows attackers to cause a denial of service (OS outage or buffer over-read) via a crafted application, aka Android internal bug 28822690 and Qualcomm internal bug CR822275.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8451

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-11.15% / 93.21%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8593

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.18% / 40.04%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in 1x call processing.

Product-android Snapdragon Mobile, Snapdragon Wear

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-9071

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.15% / 36.52%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in a TrustZone syscall.

Product-android All Qualcomm products

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-2651

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-1.02% / 76.35%

7 Day CHG~0.00%

Published-06 Jul, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

The Cascading Style Sheets (CSS) implementation in Google Chrome before 5.0.375.99 does not properly perform style rendering, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

Vendor-n/a Google LLC

Product-chrome n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-7626

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-11.15% / 93.21%

7 Day CHG~0.00%

Published-14 Oct, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7627, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-2648

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-2.85% / 85.71%

7 Day CHG~0.00%

Published-06 Jul, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

The implementation of the Unicode Bidirectional Algorithm (aka Bidi algorithm or UBA) in Google Chrome before 5.0.375.99 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

Vendor-n/a openSUSE Canonical Ltd.Google LLC

Product-ubuntu_linux opensuse chrome n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-7627

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-11.15% / 93.21%

7 Day CHG~0.00%

Published-14 Oct, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7626, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-1665

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-1.88% / 82.40%

7 Day CHG~0.00%

Published-30 Apr, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 4.1.249.1064 does not properly handle fonts, which allows remote attackers to cause a denial of service (memory corruption) and possibly have unspecified other impact via unknown vectors.

Vendor-n/a Google LLC

Product-chrome n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8073

Matching Score-6

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-6

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-10||HIGH

EPSS-3.76% / 87.58%

7 Day CHG~0.00%

Published-03 Nov, 2015 | 11:00

Updated-12 Apr, 2025 | 10:46

mediaserver in Android 4.4 and 5.1 before 5.1.1 LMY48X allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 14388161, a different vulnerability than CVE-2015-6608 and CVE-2015-8072.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8096

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-10.25% / 92.86%

7 Day CHG~0.00%

Published-09 Nov, 2015 | 16:00

Updated-12 Apr, 2025 | 10:46

Integer overflow in Google Picasa 3.9.140 Build 239 and Build 248 allows remote attackers to execute arbitrary code via unspecified vectors related to "phase one 0x412 tag," which triggers a heap-based buffer overflow.

Vendor-n/a Google LLC

Product-picasa n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2021-21118

Matching Score-6

Assigner-Chrome

Matching Score-6

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-29.05% / 96.41%

7 Day CHG~0.00%

Published-09 Feb, 2021 | 13:55

Updated-03 Aug, 2024 | 18:01

Insufficient data validation in V8 in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.

Vendor-Google LLC Microsoft Corporation

Product-chrome edge_chromium Chrome

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-7632

Matching Score-6

Matching Score-6