ByteOS

cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*

>>android>>4.0

cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*

>>android>>4.0.1

cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*

>>android>>4.0.2

cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*

>>android>>4.0.3

cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*

>>android>>4.0.4

cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*

>>android>>4.1

cpe:2.3:o:google:android:4.1.1:*:*:*:*:*:*:*

>>android>>4.1.1

cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*

>>android>>4.1.2

cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*

>>android>>4.2

cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*

>>android>>4.2.1

cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*

>>android>>4.2.2

cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*

>>android>>4.3

cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*

>>android>>4.3.1

cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*

>>android>>5.0

cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*

>>android>>5.0.1

cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*

>>android>>5.1

cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*

>>android>>6.0

cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*

>>android>>6.0.1

Weaknesses

CWE ID	Type	Source
CWE-20	Primary	nvd@nist.gov

CWE ID: CWE-20

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://source.android.com/security/bulletin/2016-06-01.html	security@android.com	Vendor Advisory
https://android.googlesource.com/platform/hardware/qcom/media/+/560ccdb509a7b86186fac0fce1b25bd9a3e6a6e8	security@android.com	N/A
http://source.android.com/security/bulletin/2016-06-01.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
https://android.googlesource.com/platform/hardware/qcom/media/+/560ccdb509a7b86186fac0fce1b25bd9a3e6a6e8	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://source.android.com/security/bulletin/2016-06-01.html

Source: security@android.com

Resource:

Vendor Advisory

Hyperlink: https://android.googlesource.com/platform/hardware/qcom/media/+/560ccdb509a7b86186fac0fce1b25bd9a3e6a6e8

Source: security@android.com

Resource: N/A

Hyperlink: http://source.android.com/security/bulletin/2016-06-01.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: https://android.googlesource.com/platform/hardware/qcom/media/+/560ccdb509a7b86186fac0fce1b25bd9a3e6a6e8

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

2502Records found

CVE-2021-0481

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.06% / 19.76%

7 Day CHG~0.00%

Published-11 Jun, 2021 | 16:42

Updated-03 Aug, 2024 | 15:40

In onActivityResult of EditUserPhotoController.java, there is a possible access of unauthorized files due to an unexpected URI handler. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-172939189

Vendor-n/a Google LLC

Product-android Android

CWE ID-CWE-20

Improper Input Validation

CVE-2017-15817

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.15% / 36.63%

7 Day CHG~0.00%

Published-23 Feb, 2018 | 23:00

Updated-16 Sep, 2024 | 21:03

In all Qualcomm products with Android releases from CAF using the Linux kernel, when an access point sends a challenge text greater than 128 bytes, the host driver is unable to validate this potentially leading to authentication failure.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-20

Improper Input Validation

CVE-2011-0626

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-4.61% / 88.83%

7 Day CHG~0.00%

Published-13 May, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code via unspecified vectors, related to a "bounds checking" issue, a different vulnerability than CVE-2011-0623, CVE-2011-0624, and CVE-2011-0625.

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Oracle Corporation Apple Inc.Adobe Inc.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2015-6602

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-9.3||HIGH

EPSS-1.77% / 81.87%

7 Day CHG~0.00%

Published-02 Oct, 2015 | 01:00

Updated-12 Apr, 2025 | 10:46

libutils in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a (1) MP3 or (2) MP4 file, as demonstrated by an attack against use of libutils by libstagefright in Android 5.x.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2019-2028

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-8.8||HIGH

EPSS-0.37% / 58.00%

7 Day CHG~0.00%

Published-19 Apr, 2019 | 19:23

Updated-04 Aug, 2024 | 18:35

In numerous hand-crafted functions in libmpeg2, NEON registers are not preserved. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-120644655.

Vendor-Android Google LLC

Product-android Android

CWE ID-CWE-20

Improper Input Validation

CVE-2019-1988

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-8.8||HIGH

EPSS-0.48% / 64.15%

7 Day CHG~0.00%

Published-28 Feb, 2019 | 17:00

Updated-16 Sep, 2024 | 20:17

In sample6 of SkSwizzler.cpp, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution in system_server with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-8.0 Android-8.1 Android-9. Android ID: A-118372692.

Vendor-Android Google LLC

Product-android Android

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-20

Improper Input Validation

CVE-2011-4783

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-2.17% / 83.65%

7 Day CHG-0.49%

Published-27 Dec, 2011 | 11:00

Updated-11 Apr, 2025 | 00:51

The IDAPython plugin before 1.5.2.3 in IDA Pro allows user-assisted remote attackers to execute arbitrary code via a crafted IDB file, related to improper handling of certain swig_runtime_data files in the current working directory.

Vendor-hex-rays n/a Google LLC

Product-idapython ida n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2022-27835

Matching Score-10

Assigner-Samsung Mobile

Matching Score-10

Assigner-Samsung Mobile

CVSS Score-7.6||HIGH

EPSS-0.04% / 11.32%

7 Day CHG~0.00%

Published-11 Apr, 2022 | 19:37

Updated-03 Aug, 2024 | 05:41

Improper boundary check in UWB firmware prior to SMR Apr-2022 Release 1 allows arbitrary memory write.

Vendor-Google LLC Samsung Electronics

Product-android Samsung Mobile Devices

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-787

Out-of-bounds Write

CVE-2018-6267

Matching Score-10

Assigner-NVIDIA Corporation

Matching Score-10

Assigner-NVIDIA Corporation

CVSS Score-7.8||HIGH

EPSS-0.06% / 16.95%

7 Day CHG~0.00%

Published-13 Feb, 2019 | 22:00

Updated-16 Sep, 2024 | 18:34

NVIDIA Tegra OpenMax driver (libnvomx) contains a vulnerability in which the software does not validate or incorrectly validates input that can affect the control flow or data flow of a program, which may lead to denial of service or escalation of privileges. Android ID: A-70857947.

Vendor-Google LLC NVIDIA Corporation

Product-android Android

CWE ID-CWE-20

Improper Input Validation

CVE-2018-6140

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.38% / 79.54%

7 Day CHG~0.00%

Published-09 Jan, 2019 | 19:00

Updated-05 Aug, 2024 | 05:54

Allowing the chrome.debugger API to attach to Web UI pages in DevTools in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension.

Vendor-Red Hat, Inc.Google LLC Debian GNU/Linux

Product-enterprise_linux_server debian_linux chrome enterprise_linux_workstation enterprise_linux_desktop Chrome

CWE ID-CWE-20

Improper Input Validation

CVE-2017-8260

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.23% / 46.02%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, due to a type downcast, a value may improperly pass validation and cause an out of bounds write later.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android All Qualcomm products

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-39701

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.04% / 10.21%

7 Day CHG~0.00%

Published-16 Mar, 2022 | 14:04

Updated-04 Aug, 2024 | 02:13

In serviceConnection of ControlsProviderLifecycleManager.kt, there is a possible way to keep service running in foreground without notification or permission due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-212286849

Vendor-n/a Google LLC

Product-android Android

CWE ID-CWE-20

Improper Input Validation

CVE-2017-7369

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.07% / 23.14%

7 Day CHG~0.00%

Published-13 Jun, 2017 | 20:00

Updated-20 Apr, 2025 | 01:37

In all Android releases from CAF using the Linux kernel, an array index in an ALSA routine is not properly validating potentially leading to kernel stack corruption.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android All Qualcomm products

CWE ID-CWE-20

Improper Input Validation

CVE-2011-2428

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-2.88% / 85.77%

7 Day CHG~0.00%

Published-22 Sep, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows attackers to execute arbitrary code or cause a denial of service (browser crash) via unspecified vectors, related to a "logic error issue."

Product-linux_kernel windows android flash_player sunos mac_os_x n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2011-2430

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-6.62% / 90.81%

7 Day CHG~0.00%

Published-22 Sep, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows remote attackers to execute arbitrary code via crafted streaming media, related to a "logic error vulnerability."

Product-linux_kernel windows android flash_player sunos mac_os_x n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2011-0618

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-6.13% / 90.43%

7 Day CHG~0.00%

Published-13 May, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Integer overflow in Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Oracle Corporation Apple Inc.Adobe Inc.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2011-0619

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-5.85% / 90.20%

7 Day CHG~0.00%

Published-13 May, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0620, CVE-2011-0621, and CVE-2011-0622.

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Oracle Corporation Apple Inc.Adobe Inc.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0621

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-5.85% / 90.20%

7 Day CHG~0.00%

Published-13 May, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Oracle Corporation Apple Inc.Adobe Inc.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0628

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-9.41% / 92.48%

7 Day CHG~0.00%

Published-31 May, 2011 | 20:00

Updated-11 Apr, 2025 | 00:51

Integer overflow in Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows remote attackers to execute arbitrary code via ActionScript that improperly handles a long array object.

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Oracle Corporation Apple Inc.Adobe Inc.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2011-0622

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-5.85% / 90.20%

7 Day CHG~0.00%

Published-13 May, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Oracle Corporation Apple Inc.Adobe Inc.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-1302

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-3.54% / 87.20%

7 Day CHG~0.00%

Published-15 Apr, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in the GPU process in Google Chrome before 10.0.648.205 allows remote attackers to execute arbitrary code via unknown vectors.

Vendor-n/a Google LLC

Product-chrome n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2011-0620

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-5.85% / 90.20%

7 Day CHG~0.00%

Published-13 May, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Oracle Corporation Apple Inc.Adobe Inc.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-1301

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-1.86% / 82.31%

7 Day CHG~0.00%

Published-15 Apr, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in the GPU process in Google Chrome before 10.0.648.205 allows remote attackers to execute arbitrary code via unknown vectors.

Vendor-n/a Google LLC

Product-chrome n/a

CWE ID-CWE-416

Use After Free

CVE-2011-0481

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-3.54% / 87.21%

7 Day CHG~0.00%

Published-14 Jan, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to PDF shading.

Vendor-n/a Google LLC

Product-chrome_os chrome n/a

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2011-0475

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-6.84% / 90.96%

7 Day CHG~0.00%

Published-14 Jan, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a PDF document.

Vendor-n/a Google LLC

Product-chrome_os chrome n/a

CWE ID-CWE-416

Use After Free

CVE-2011-0611

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-93.70% / 99.84%

7 Day CHG~0.00%

Published-13 Apr, 2011 | 14:00

Updated-30 Jul, 2025 | 01:47

Known KEV||Action Due Date - 2022-03-24||The impacted product is end-of-life and should be disconnected if still in use.

Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x before 9.4.4 and 10.x before 10.0.3 on Mac OS X, and Adobe Acrobat 9.x before 9.4.4 and 10.x before 10.0.3 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content; as demonstrated by a Microsoft Office document with an embedded .swf file that has a size inconsistency in a "group of included constants," object type confusion, ActionScript that adds custom functions to prototypes, and Date objects; and as exploited in the wild in April 2011.

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2011-0609

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-92.40% / 99.72%

7 Day CHG~0.00%

Published-15 Mar, 2011 | 17:00

Updated-30 Jul, 2025 | 01:47

Known KEV||Action Due Date - 2022-06-22||The impacted product is end-of-life and should be disconnected if still in use.

Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.

CVE-2011-0472

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-5.74% / 90.11%

7 Day CHG~0.00%

Published-14 Jan, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle the printing of PDF documents, which allows user-assisted remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a multi-page document.

Vendor-n/a Google LLC

Product-chrome_os chrome n/a

CVE-2011-0480

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-2.23% / 83.87%

7 Day CHG~0.00%

Published-14 Jan, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Multiple buffer overflows in vorbis_dec.c in the Vorbis decoder in FFmpeg, as used in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344, allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted WebM file, related to buffers for (1) the channel floor and (2) the channel residue.

Vendor-n/a Canonical Ltd.Debian GNU/Linux Google LLC

Product-ubuntu_linux chrome_os debian_linux chrome n/a

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2014-9945

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.11%

7 Day CHG~0.00%

Published-06 Jun, 2017 | 14:00

Updated-20 Apr, 2025 | 01:37

In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could potentially exist.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android All Qualcomm products

CWE ID-CWE-285

Improper Authorization

CVE-2010-3249

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-1.02% / 76.34%

7 Day CHG~0.00%

Published-07 Sep, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 6.0.472.53 does not properly implement SVG filters, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, related to a "stale pointer" issue.

Vendor-n/a Google LLC

Product-chrome n/a

CVE-2010-3412

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-0.22% / 44.77%

7 Day CHG~0.00%

Published-16 Sep, 2010 | 20:00

Updated-11 Apr, 2025 | 00:51

Race condition in the console implementation in Google Chrome before 6.0.472.59 has unspecified impact and attack vectors.

Vendor-n/a Google LLC

Product-chrome n/a

CWE ID-CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CVE-2010-3255

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-1.13% / 77.41%

7 Day CHG~0.00%

Published-07 Sep, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 6.0.472.53 and webkitgtk before 1.2.6 do not properly handle counter nodes, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

Vendor-webkitgtk n/a Google LLC

Product-chrome webkitgtk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-3654

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Oracle Corporation Macromedia, Inc.Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-93.57% / 99.83%

7 Day CHG~0.00%

Published-29 Oct, 2010 | 18:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authplay.dll (aka AuthPlayLib.bundle or libauthplay.so.0.0.0) in Adobe Reader and Acrobat 9.x through 9.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted SWF content, as exploited in the wild in October 2010.

Product-linux_kernel windows acrobat_reader solaris acrobat flash_player android mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-3642

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-3.96% / 87.91%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-3645

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-3.96% / 87.91%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-3636

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-2.26% / 83.96%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, does not properly handle unspecified encodings during the parsing of a cross-domain policy file, which allows remote web servers to bypass intended access restrictions via unknown vectors.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-3647

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-3.96% / 87.91%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-3257

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-12.15% / 93.56%

7 Day CHG~0.00%

Published-07 Sep, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving element focus.

Vendor-webkitgtk n/a Apple Inc.Canonical Ltd.Google LLC

Product-ubuntu_linux iphone_os safari chrome webkitgtk n/a

CWE ID-CWE-416

Use After Free

CVE-2010-3641

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-3.96% / 87.91%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-3640

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-3.96% / 87.91%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-3258

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-0.18% / 39.80%

7 Day CHG~0.00%

Published-07 Sep, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

The sandbox implementation in Google Chrome before 6.0.472.53 does not properly deserialize parameters, which has unspecified impact and remote attack vectors.

Vendor-n/a Google LLC

Product-chrome n/a

CWE ID-CWE-502

Deserialization of Untrusted Data

CVE-2010-2884

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-39.68% / 97.21%

7 Day CHG~0.00%

Published-15 Sep, 2010 | 17:26

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player 10.1.82.76 and earlier on Windows, Mac OS X, Linux, and Solaris and 10.1.92.10 on Android; authplay.dll in Adobe Reader and Acrobat 9.x before 9.4; and authplay.dll in Adobe Reader and Acrobat 8.x before 8.2.5 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in September 2010.

Vendor-n/a Microsoft Corporation Google LLC Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat flash_player android mac_os_x n/a

CVE-2010-3643

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-3.96% / 87.91%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-3649

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-3.96% / 87.91%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3650, and CVE-2010-3652.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-3639

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-36.93% / 97.03%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-3650

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-3.96% / 87.91%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, and CVE-2010-3652.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-3134

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-1.47% / 80.13%

7 Day CHG~0.00%

Published-26 Aug, 2010 | 18:00

Updated-11 Apr, 2025 | 00:51

Untrusted search path vulnerability in Google Earth 5.1.3535.3218 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse quserex.dll that is located in the same folder as a .kmz file.

Vendor-n/a Google LLC

Product-earth n/a

CVE-2010-3652

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-3.96% / 87.91%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, and CVE-2010-3650.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-2646

Matching Score-8

Assigner-MITRE Corporation