ByteOS

cpe:2.3:o:google:chrome_os:*:*:*:*:*:*:*:*

>>chrome_os>>Versions up to 25.0.1364.172(inclusive)

cpe:2.3:o:google:chrome_os:25.0.1364.0:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.0

cpe:2.3:o:google:chrome_os:25.0.1364.1:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.1

cpe:2.3:o:google:chrome_os:25.0.1364.2:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.2

cpe:2.3:o:google:chrome_os:25.0.1364.3:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.3

cpe:2.3:o:google:chrome_os:25.0.1364.5:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.5

cpe:2.3:o:google:chrome_os:25.0.1364.7:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.7

cpe:2.3:o:google:chrome_os:25.0.1364.8:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.8

cpe:2.3:o:google:chrome_os:25.0.1364.9:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.9

cpe:2.3:o:google:chrome_os:25.0.1364.10:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.10

cpe:2.3:o:google:chrome_os:25.0.1364.11:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.11

cpe:2.3:o:google:chrome_os:25.0.1364.12:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.12

cpe:2.3:o:google:chrome_os:25.0.1364.13:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.13

cpe:2.3:o:google:chrome_os:25.0.1364.14:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.14

cpe:2.3:o:google:chrome_os:25.0.1364.15:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.15

cpe:2.3:o:google:chrome_os:25.0.1364.16:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.16

cpe:2.3:o:google:chrome_os:25.0.1364.17:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.17

cpe:2.3:o:google:chrome_os:25.0.1364.18:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.18

cpe:2.3:o:google:chrome_os:25.0.1364.19:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.19

cpe:2.3:o:google:chrome_os:25.0.1364.20:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.20

cpe:2.3:o:google:chrome_os:25.0.1364.21:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.21

cpe:2.3:o:google:chrome_os:25.0.1364.22:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.22

cpe:2.3:o:google:chrome_os:25.0.1364.23:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.23

cpe:2.3:o:google:chrome_os:25.0.1364.24:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.24

cpe:2.3:o:google:chrome_os:25.0.1364.25:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.25

cpe:2.3:o:google:chrome_os:25.0.1364.26:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.26

cpe:2.3:o:google:chrome_os:25.0.1364.27:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.27

cpe:2.3:o:google:chrome_os:25.0.1364.28:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.28

cpe:2.3:o:google:chrome_os:25.0.1364.29:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.29

cpe:2.3:o:google:chrome_os:25.0.1364.30:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.30

cpe:2.3:o:google:chrome_os:25.0.1364.31:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.31

cpe:2.3:o:google:chrome_os:25.0.1364.32:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.32

cpe:2.3:o:google:chrome_os:25.0.1364.33:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.33

cpe:2.3:o:google:chrome_os:25.0.1364.34:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.34

cpe:2.3:o:google:chrome_os:25.0.1364.35:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.35

cpe:2.3:o:google:chrome_os:25.0.1364.36:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.36

cpe:2.3:o:google:chrome_os:25.0.1364.37:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.37

cpe:2.3:o:google:chrome_os:25.0.1364.38:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.38

cpe:2.3:o:google:chrome_os:25.0.1364.39:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.39

cpe:2.3:o:google:chrome_os:25.0.1364.40:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.40

cpe:2.3:o:google:chrome_os:25.0.1364.41:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.41

cpe:2.3:o:google:chrome_os:25.0.1364.42:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.42

cpe:2.3:o:google:chrome_os:25.0.1364.43:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.43

cpe:2.3:o:google:chrome_os:25.0.1364.44:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.44

cpe:2.3:o:google:chrome_os:25.0.1364.45:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.45

cpe:2.3:o:google:chrome_os:25.0.1364.46:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.46

cpe:2.3:o:google:chrome_os:25.0.1364.47:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.47

cpe:2.3:o:google:chrome_os:25.0.1364.48:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.48

cpe:2.3:o:google:chrome_os:25.0.1364.49:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.49

cpe:2.3:o:google:chrome_os:25.0.1364.50:*:*:*:*:*:*:*

>>chrome_os>>25.0.1364.50

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov

CWE ID: CWE-119

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://googlechromereleases.blogspot.com/2013/03/stable-channel-update-for-chrome-os_15.html	chrome-cve-admin@google.com	N/A
https://code.google.com/p/chromium/issues/detail?id=181083	chrome-cve-admin@google.com	N/A
http://googlechromereleases.blogspot.com/2013/03/stable-channel-update-for-chrome-os_15.html	af854a3a-2127-422b-91ae-364da2661108	N/A
https://code.google.com/p/chromium/issues/detail?id=181083	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://googlechromereleases.blogspot.com/2013/03/stable-channel-update-for-chrome-os_15.html

Source: chrome-cve-admin@google.com

Resource: N/A

Hyperlink: https://code.google.com/p/chromium/issues/detail?id=181083

Source: chrome-cve-admin@google.com

Resource: N/A

Hyperlink: http://googlechromereleases.blogspot.com/2013/03/stable-channel-update-for-chrome-os_15.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://code.google.com/p/chromium/issues/detail?id=181083

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

2702Records found

CVE-2015-9037

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.15% / 36.50%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read may occur in the processing of a downlink 3G NAS message.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-9063

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.25% / 47.77%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a procedure involving a remote UIM client.

Product-android Snapdragon Mobile

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8455

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-11.15% / 93.20%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-8419, CVE-2015-8443, CVE-2015-8444, and CVE-2015-8451.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8457

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-8.16% / 91.83%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Stack-based buffer overflow in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8407.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-9042

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.19% / 40.91%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists when processing a QMI message.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8416

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-13.40% / 93.92%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8417, CVE-2015-8418, CVE-2015-8419, CVE-2015-8443, CVE-2015-8444, CVE-2015-8451, and CVE-2015-8455.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8459

Matching Score-10

Matching Score-10

CVSS Score-10||CRITICAL

EPSS-6.40% / 90.64%

7 Day CHG~0.00%

Published-28 Dec, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-8460, CVE-2015-8636, and CVE-2015-8645.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8443

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-11.15% / 93.20%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-9045

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.15% / 36.50%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in GERAN where a buffer can be overflown while taking power measurements.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-9041

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.19% / 40.91%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists when performing WCDMA radio tuning.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8072

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-10||HIGH

EPSS-3.76% / 87.57%

7 Day CHG~0.00%

Published-03 Nov, 2015 | 11:00

Updated-12 Apr, 2025 | 10:46

mediaserver in Android 4.4 through 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23881715, a different vulnerability than CVE-2015-6608 and CVE-2015-8073.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8418

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-11.15% / 93.20%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8419, CVE-2015-8443, CVE-2015-8444, CVE-2015-8451, and CVE-2015-8455.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8451

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-11.15% / 93.20%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-9062

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.15% / 36.05%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow to buffer overflow vulnerability exists when loading an ELF file.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2015-8444

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-11.15% / 93.20%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8593

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.18% / 40.02%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in 1x call processing.

Product-android Snapdragon Mobile, Snapdragon Wear

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8073

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-10||HIGH

EPSS-3.76% / 87.57%

7 Day CHG~0.00%

Published-03 Nov, 2015 | 11:00

Updated-12 Apr, 2025 | 10:46

mediaserver in Android 4.4 and 5.1 before 5.1.1 LMY48X allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 14388161, a different vulnerability than CVE-2015-6608 and CVE-2015-8072.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8596

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.15% / 36.50%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of buffer lengths is missing in malware protection.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8045

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-7.33% / 91.31%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-8419, CVE-2015-8443, CVE-2015-8444, CVE-2015-8451, and CVE-2015-8455.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8415

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-7.85% / 91.62%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Buffer overflow in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-9071

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.15% / 36.50%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in a TrustZone syscall.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8221

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-24.93% / 95.95%

7 Day CHG~0.00%

Published-17 Nov, 2015 | 15:00

Updated-12 Apr, 2025 | 10:46

Integer overflow in Google Picasa before 3.9.140 Build 259 allows remote attackers to execute arbitrary code via the CAMF section in a FOVb image, which triggers a heap-based buffer overflow.

Vendor-n/a Google LLC

Product-picasa n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8595

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.15% / 36.50%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in digital television/digital radio DRM.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8408

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-7.33% / 91.31%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-8419, CVE-2015-8443, CVE-2015-8444, CVE-2015-8451, and CVE-2015-8455.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8096

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-10.25% / 92.86%

7 Day CHG~0.00%

Published-09 Nov, 2015 | 16:00

Updated-12 Apr, 2025 | 10:46

Integer overflow in Google Picasa 3.9.140 Build 239 and Build 248 allows remote attackers to execute arbitrary code via unspecified vectors related to "phase one 0x412 tag," which triggers a heap-based buffer overflow.

Vendor-n/a Google LLC

Product-picasa n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8407

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-8.76% / 92.14%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-7627

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-11.15% / 93.20%

7 Day CHG~0.00%

Published-14 Oct, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7626, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-7625

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-11.15% / 93.20%

7 Day CHG~0.00%

Published-14 Oct, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-7716

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-1.47% / 80.11%

7 Day CHG~0.00%

Published-06 Oct, 2015 | 17:00

Updated-12 Apr, 2025 | 10:46

libstagefright in Android 5.x before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 20721050, a different vulnerability than CVE-2015-3873.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-7626

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-11.15% / 93.20%

7 Day CHG~0.00%

Published-14 Oct, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7627, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-7634

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-11.15% / 93.20%

7 Day CHG~0.00%

Published-14 Oct, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-7633

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-12.41% / 93.64%

7 Day CHG~0.00%

Published-14 Oct, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5580

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-4.30% / 88.42%

7 Day CHG~0.00%

Published-22 Sep, 2015 | 10:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5575, CVE-2015-5577, CVE-2015-5578, CVE-2015-5582, CVE-2015-5588, and CVE-2015-6677.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-6601

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-10||HIGH

EPSS-1.47% / 80.11%

7 Day CHG~0.00%

Published-06 Oct, 2015 | 17:00

Updated-12 Apr, 2025 | 10:46

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 22935234.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-6599

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-10||HIGH

EPSS-1.47% / 80.11%

7 Day CHG~0.00%

Published-06 Oct, 2015 | 17:00

Updated-12 Apr, 2025 | 10:46

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23416608.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-6603

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-10||HIGH

EPSS-3.76% / 87.57%

7 Day CHG~0.00%

Published-06 Oct, 2015 | 17:00

Updated-12 Apr, 2025 | 10:46

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23227354.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-6608

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-10||HIGH

EPSS-3.75% / 87.56%

7 Day CHG~0.00%

Published-03 Nov, 2015 | 11:00

Updated-12 Apr, 2025 | 10:46

mediaserver in Android 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bugs 19779574, 23680780, 23876444, and 23658148, a different vulnerability than CVE-2015-8072 and CVE-2015-8073.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-6636

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-9.8||CRITICAL

EPSS-1.21% / 78.19%

7 Day CHG~0.00%

Published-06 Jan, 2016 | 19:00

Updated-12 Apr, 2025 | 10:46

mediaserver in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bugs 25070493 and 24686670.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5588

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-4.30% / 88.42%

7 Day CHG~0.00%

Published-22 Sep, 2015 | 10:00

Updated-12 Apr, 2025 | 10:46

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-6678

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-2.75% / 85.43%

7 Day CHG~0.00%

Published-22 Sep, 2015 | 10:00

Updated-12 Apr, 2025 | 10:46

Buffer overflow in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-6676.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-6677

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-6.37% / 90.61%

7 Day CHG~0.00%

Published-22 Sep, 2015 | 10:00

Updated-12 Apr, 2025 | 10:46

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5567

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-3.27% / 86.65%

7 Day CHG~0.00%

Published-22 Sep, 2015 | 10:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5579.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-6604

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-10||HIGH

EPSS-4.94% / 89.24%

7 Day CHG~0.00%

Published-06 Oct, 2015 | 17:00

Updated-12 Apr, 2025 | 10:46

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23129786.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-6610

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-10||HIGH

EPSS-0.21% / 43.69%

7 Day CHG~0.00%

Published-03 Nov, 2015 | 11:00

Updated-12 Apr, 2025 | 10:46

libstagefright in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to gain privileges or cause a denial of service (memory corruption) via a crafted application, aka internal bug 23707088.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5582

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-4.30% / 88.42%

7 Day CHG~0.00%

Published-22 Sep, 2015 | 10:00

Updated-12 Apr, 2025 | 10:46

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-6609

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-10||HIGH

EPSS-5.92% / 90.27%

7 Day CHG~0.00%

Published-03 Nov, 2015 | 11:00

Updated-12 Apr, 2025 | 10:46

libutils in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted audio file, aka internal bug 22953624.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-3824

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-10||HIGH

EPSS-12.23% / 93.59%

7 Day CHG~0.00%

Published-01 Oct, 2015 | 00:00

Updated-12 Apr, 2025 | 10:46

The MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly restrict size addition, which allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow and memory corruption) via a crafted MPEG-4 tx3g atom, aka internal bug 20923261.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-3867

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-10||HIGH

EPSS-1.47% / 80.11%

7 Day CHG~0.00%

Published-06 Oct, 2015 | 17:00

Updated-12 Apr, 2025 | 10:46

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23213430.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-3100

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-3.96% / 87.91%

7 Day CHG~0.00%

Published-10 Jun, 2015 | 01:00

Updated-12 Apr, 2025 | 10:46

Stack-based buffer overflow in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-3105

Matching Score-10

Matching Score-10