ByteOS

Product

Android

Versions

Affected

7.0
7.1.1
7.1.2
8.0

Problem Types

Type	CWE ID	Description
text	N/A	Remote code execution

Type: text

CWE ID: N/A

Description: Remote code execution

References

Hyperlink	Resource
https://source.android.com/security/bulletin/2017-12-01	x_refsource_CONFIRM
http://www.securityfocus.com/bid/102126	vdb-entry x_refsource_BID

Hyperlink: https://source.android.com/security/bulletin/2017-12-01

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securityfocus.com/bid/102126

Resource:

vdb-entry

x_refsource_BID

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://source.android.com/security/bulletin/2017-12-01	x_refsource_CONFIRM x_transferred
http://www.securityfocus.com/bid/102126	vdb-entry x_refsource_BID x_transferred

Hyperlink: https://source.android.com/security/bulletin/2017-12-01

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.securityfocus.com/bid/102126

Resource:

vdb-entry

x_refsource_BID

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:security@android.com

Published At:06 Dec, 2017 | 14:29

Updated At:20 Apr, 2025 | 01:37

A remote code execution vulnerability in the Android media framework (libskia). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-65290323.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	8.8	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.0

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*

>>android>>7.0

cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*

>>android>>7.1.1

cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*

>>android>>7.1.2

cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*

>>android>>8.0

Weaknesses

CWE ID	Type	Source
CWE-20	Primary	nvd@nist.gov

CWE ID: CWE-20

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/102126	security@android.com	Third Party Advisory VDB Entry
https://source.android.com/security/bulletin/2017-12-01	security@android.com	Patch Vendor Advisory
http://www.securityfocus.com/bid/102126	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
https://source.android.com/security/bulletin/2017-12-01	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory

Hyperlink: http://www.securityfocus.com/bid/102126

Source: security@android.com

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://source.android.com/security/bulletin/2017-12-01

Source: security@android.com

Resource:

Patch

Vendor Advisory

Hyperlink: http://www.securityfocus.com/bid/102126

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://source.android.com/security/bulletin/2017-12-01

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Vendor Advisory

Similar CVEs

2656Records found

CVE-2016-2067

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-0.12% / 32.44%

7 Day CHG~0.00%

Published-11 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

drivers/gpu/msm/kgsl.c in the MSM graphics driver (aka GPU driver) for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, mishandles the KGSL_MEMFLAGS_GPUREADONLY flag, which allows attackers to gain privileges by leveraging accidental read-write mappings, aka Qualcomm internal bug CR988993.

Vendor-n/a Google LLC Linux Kernel Organization, Inc

Product-linux_kernel android n/a

CWE ID-CWE-269

Improper Privilege Management

CVE-2015-8635

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-49.46% / 97.72%

7 Day CHG~0.00%

Published-28 Dec, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8634, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643, CVE-2015-8646, CVE-2015-8647, CVE-2015-8648, CVE-2015-8649, and CVE-2015-8650.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2016-2448

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.17%

7 Day CHG~0.00%

Published-09 May, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

media/libmediaplayerservice/nuplayer/NuPlayerStreamListener.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not properly validate entry data structures, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27533704.

Vendor-n/a Google LLC

Product-android n/a

CVE-2021-0870

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-8.1||HIGH

EPSS-0.95% / 75.39%

7 Day CHG~0.00%

Published-22 Oct, 2021 | 13:27

Updated-03 Aug, 2024 | 15:47

In RW_SetActivatedTagType of rw_main.cc, there is possible memory corruption due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-192472262

Vendor-n/a Google LLC

Product-android Android

CWE ID-CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CVE-2021-0514

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-8.1||HIGH

EPSS-2.01% / 82.96%

7 Day CHG~0.00%

Published-14 Jul, 2021 | 13:43

Updated-03 Aug, 2024 | 15:40

In several functions of the V8 library, there is a possible use after free due to a race condition. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-9 Android-11 Android-8.1Android ID: A-162604069

Vendor-n/a Google LLC

Product-android Android

CWE ID-CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CVE-2018-9533

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-8.8||HIGH

EPSS-0.41% / 60.48%

7 Day CHG~0.00%

Published-14 Nov, 2018 | 18:00

Updated-05 Aug, 2024 | 07:24

In ixheaacd_dec_data_init of ixheaacd_create.c there is a possible out of write read due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-112766520

Vendor-Google LLC

Product-android Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-2434

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-1.25% / 78.50%

7 Day CHG~0.00%

Published-09 May, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27251090.

Vendor-n/a Google LLC

Product-nexus_9 android n/a

CVE-2021-21106

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-9.6||CRITICAL

EPSS-4.04% / 88.05%

7 Day CHG~0.00%

Published-08 Jan, 2021 | 17:56

Updated-03 Aug, 2024 | 18:01

Use after free in autofill in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

Vendor-Fedora Project Google LLC Debian GNU/Linux

Product-chrome debian_linux fedora Chrome

CWE ID-CWE-416

Use After Free

CVE-2015-8650

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.30% / 86.72%

7 Day CHG~0.00%

Published-28 Dec, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8634, CVE-2015-8635, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643, CVE-2015-8646, CVE-2015-8647, CVE-2015-8648, and CVE-2015-8649.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2016-2436

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.17%

7 Day CHG~0.00%

Published-09 May, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27299111.

Vendor-n/a Google LLC

Product-nexus_9 android n/a

CVE-2015-8449

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-7.00% / 91.10%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in the MovieClip object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via a crafted lineTo method call, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2016-2432

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.77%

7 Day CHG~0.00%

Published-09 May, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

The Qualcomm TrustZone component in Android before 2016-05-01 on Nexus 6 and Android One devices allows attackers to gain privileges via a crafted application, aka internal bug 25913059.

Vendor-n/a Google LLC

Product-nexus_5 nexus_7_\(2013\)android nexus_6 n/a

CVE-2016-2469

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.07% / 22.12%

7 Day CHG-0.06%

Published-13 Jun, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

The Qualcomm sound driver in Android before 2016-06-01 on Nexus 5, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 27531992.

Vendor-n/a Google LLC

Product-android n/a

CVE-2016-2409

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-8.1||HIGH

EPSS-0.16% / 37.49%

7 Day CHG~0.00%

Published-18 Apr, 2016 | 00:00

Updated-12 Apr, 2025 | 10:46

A Texas Instruments (TI) haptic kernel driver in Android 6.x before 2016-04-01 allows attackers to gain privileges via a crafted application that leverages control over a service that can call this driver, aka internal bug 25981545.

Vendor-n/a Google LLC

Product-android n/a

CVE-2016-2501

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.11%

7 Day CHG~0.00%

Published-11 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

The Qualcomm camera driver in Android before 2016-07-05 on Nexus 5X, 6, 6P, and 7 (2013) devices allows attackers to gain privileges via a crafted application, aka Android internal bug 27890772 and Qualcomm internal bug CR1001092.

Vendor-n/a Google LLC

Product-android n/a

CVE-2018-9550

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.25% / 48.47%

7 Day CHG~0.00%

Published-06 Dec, 2018 | 14:00

Updated-05 Aug, 2024 | 07:24

In CAacDecoder_Init of aacdecoder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-112660981.

Vendor-Google LLC

Product-android Android

CWE ID-CWE-787

Out-of-bounds Write

CVE-2018-9531

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.21% / 43.76%

7 Day CHG~0.00%

Published-14 Nov, 2018 | 18:00

Updated-05 Aug, 2024 | 07:24

In AudioSpecificConfig_Parse of tpdec_asc.cpp, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-112661641

Vendor-Google LLC

Product-android Android

CWE ID-CWE-787

Out-of-bounds Write

CVE-2018-9577

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.18% / 39.55%

7 Day CHG~0.00%

Published-07 Dec, 2018 | 23:00

Updated-05 Aug, 2024 | 07:24

In impd_parametric_drc_parse_gain_set_params of impd_drc_static_payload.c there is a possible out of bounds write due to missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-116715937.

Vendor-Google LLC

Product-android Android

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-2484

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.17%

7 Day CHG~0.00%

Published-13 Jun, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate OMX buffer sizes for the GSM and G711 codecs, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27793163.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-2493

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.17%

7 Day CHG~0.00%

Published-13 Jun, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

The Broadcom Wi-Fi driver in Android before 2016-06-01 on Nexus 5, Nexus 6, Nexus 6P, Nexus 7 (2013), Nexus Player, and Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 26571522.

Vendor-n/a Google LLC

Product-android n/a

CVE-2016-2485

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.17%

7 Day CHG~0.00%

Published-13 Jun, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-2492

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.17%

7 Day CHG~0.00%

Published-13 Jun, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

The MediaTek power-management driver in Android before 2016-06-01 on Android One devices allows attackers to gain privileges via a crafted application, aka internal bug 28085410.

Vendor-n/a Google LLC

Product-android_one android n/a

CVE-2016-2476

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.07% / 22.85%

7 Day CHG~0.00%

Published-13 Jun, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate OMX buffer sizes, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27207275.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-2536

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-8.8||HIGH

EPSS-0.63% / 69.32%

7 Day CHG~0.00%

Published-22 Feb, 2016 | 15:05

Updated-12 Apr, 2025 | 10:46

Multiple use-after-free vulnerabilities in SAP 3D Visual Enterprise Viewer allow remote attackers to execute arbitrary code via a crafted SketchUp document. NOTE: the primary affected product may be SketchUp.

Vendor-n/a Google LLC SAP SE

Product-sketchup 3d_visual_enterprise_viewer n/a

CVE-2016-2473

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-9.8||CRITICAL

EPSS-0.16% / 37.49%

7 Day CHG~0.00%

Published-13 Jun, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 27777501.

Vendor-n/a Google LLC

Product-android n/a

CVE-2016-2471

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.17%

7 Day CHG~0.00%

Published-13 Jun, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 27773913.

Vendor-n/a Google LLC

Product-android n/a

CVE-2016-2060

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.77%

7 Day CHG~0.00%

Published-09 May, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

server/TetherController.cpp in the tethering controller in netd, as distributed with Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly validate upstream interface names, which allows attackers to bypass intended access restrictions via a crafted application.

Vendor-n/a Google LLC

Product-android n/a

CVE-2016-2488

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.17%

7 Day CHG~0.00%

Published-13 Jun, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

The Qualcomm camera driver in Android before 2016-06-01 on Nexus 5, 5X, 6, 6P, and 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 27600832.

Vendor-n/a Google LLC

Product-android n/a

CVE-2016-2430

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.17%

7 Day CHG~0.00%

Published-09 May, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

libbacktrace/Backtrace.cpp in debuggerd in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 allows attackers to gain privileges via an application containing a crafted symbol name, aka internal bug 27299236.

Vendor-n/a Google LLC

Product-android n/a

CVE-2016-2431

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-1.20% / 78.06%

7 Day CHG~0.00%

Published-09 May, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

The Qualcomm TrustZone component in Android before 2016-05-01 on Nexus 5, Nexus 6, Nexus 7 (2013), and Android One devices allows attackers to gain privileges via a crafted application, aka internal bug 24968809.

Vendor-n/a Google LLC

Product-nexus_5 nexus_7_\(2013\)android nexus_6 n/a

CVE-2018-17474

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.38% / 79.55%

7 Day CHG-0.03%

Published-14 Nov, 2018 | 15:00

Updated-05 Aug, 2024 | 10:47

Use after free in HTMLImportsController in Blink in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Product-enterprise_linux_server debian_linux chrome enterprise_linux_workstation enterprise_linux_desktop Chrome

CWE ID-CWE-416

Use After Free

CWE ID-CWE-787

Out-of-bounds Write

CVE-2018-18341

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.93% / 82.64%

7 Day CHG~0.00%

Published-11 Dec, 2018 | 15:00

Updated-05 Aug, 2024 | 11:08

An integer overflow leading to a heap buffer overflow in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Product-debian_linux chrome linux_workstation linux_server linux_desktop Chrome

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2016-1696

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.98% / 75.87%

7 Day CHG+0.18%

Published-05 Jun, 2016 | 23:00

Updated-12 Apr, 2025 | 10:46

The extensions subsystem in Google Chrome before 51.0.2704.79 does not properly restrict bindings access, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.

Vendor-n/a openSUSE SUSE Red Hat, Inc.Google LLC Debian GNU/Linux

Product-enterprise_linux_server leap opensuse enterprise_linux_desktop enterprise_linux_workstation chrome debian_linux linux_enterprise n/a

CWE ID-CWE-284

Improper Access Control

CVE-2018-6174

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-2.02% / 83.01%

7 Day CHG~0.00%

Published-09 Jan, 2019 | 19:00

Updated-05 Aug, 2024 | 05:54

Integer overflows in Swiftshader in Google Chrome prior to 68.0.3440.75 potentially allowed a remote attacker to execute arbitrary code via a crafted HTML page.

Product-enterprise_linux_server debian_linux chrome enterprise_linux_workstation enterprise_linux_desktop Chrome

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2018-6056

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-7.29% / 91.30%

7 Day CHG~0.00%

Published-09 Jan, 2019 | 19:00

Updated-05 Aug, 2024 | 05:54

Type confusion could lead to a heap out-of-bounds write in V8 in Google Chrome prior to 64.0.3282.168 allowing a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

Product-enterprise_linux_server debian_linux chrome enterprise_linux_workstation enterprise_linux_desktop Chrome

CWE ID-CWE-704

Incorrect Type Conversion or Cast

CVE-2016-1653

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.52% / 80.52%

7 Day CHG~0.00%

Published-18 Apr, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

The LoadBuffer implementation in Google V8, as used in Google Chrome before 50.0.2661.75, mishandles data types, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers an out-of-bounds write operation, related to compiler/pipeline.cc and compiler/simplified-lowering.cc.

Vendor-n/a openSUSE SUSE Google LLC Debian GNU/Linux Canonical Ltd.

Product-leap ubuntu_linux chrome debian_linux linux_enterprise n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-1708

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.50% / 80.42%

7 Day CHG~0.00%

Published-23 Jul, 2016 | 19:00

Updated-12 Apr, 2025 | 10:46

The Chrome Web Store inline-installation implementation in the Extensions subsystem in Google Chrome before 52.0.2743.82 does not properly consider object lifetimes during progress observation, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted web site.

Vendor-n/a Google LLC

Product-chrome n/a

CWE ID-CWE-416

Use After Free

CVE-2016-1704

Matching Score-8

Assigner-Chrome

Product-enterprise_linux_server leap opensuse enterprise_linux_desktop ubuntu_linux suse_package_hub_for_suse_linux_enterprise enterprise_linux_workstation chrome n/a

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.80% / 73.15%

7 Day CHG~0.00%

Published-03 Jul, 2016 | 21:00

Updated-12 Apr, 2025 | 10:46

Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.103 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

Vendor-n/a openSUSE Red Hat, Inc.Google LLC Novell Canonical Ltd.

CVE-2016-1676

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.36% / 79.38%

7 Day CHG~0.00%

Published-05 Jun, 2016 | 23:00

Updated-12 Apr, 2025 | 10:46

extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.63 does not properly use prototypes, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.

Vendor-n/a openSUSE SUSE Red Hat, Inc.Google LLC Debian GNU/Linux

Product-enterprise_linux_server leap opensuse enterprise_linux_desktop enterprise_linux_workstation chrome debian_linux linux_enterprise n/a

CWE ID-CWE-284

Improper Access Control

CVE-2018-18339

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.53% / 80.57%

7 Day CHG~0.00%

Published-11 Dec, 2018 | 15:00

Updated-05 Aug, 2024 | 11:08

Incorrect object lifecycle in WebAudio in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Product-debian_linux chrome linux_workstation linux_server linux_desktop Chrome

CWE ID-CWE-416

Use After Free

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-1672

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.36% / 79.38%

7 Day CHG~0.00%

Published-05 Jun, 2016 | 23:00

Updated-12 Apr, 2025 | 10:46

The ModuleSystem::RequireForJsInner function in extensions/renderer/module_system.cc in the extension bindings in Google Chrome before 51.0.2704.63 mishandles properties, which allows remote attackers to conduct bindings-interception attacks and bypass the Same Origin Policy via unspecified vectors.

Vendor-n/a openSUSE SUSE Red Hat, Inc.Google LLC Debian GNU/Linux

Product-enterprise_linux_server leap opensuse enterprise_linux_desktop enterprise_linux_workstation chrome debian_linux linux_enterprise n/a

CWE ID-CWE-284

Improper Access Control

CVE-2018-18336

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.65% / 81.30%

7 Day CHG~0.00%

Published-11 Dec, 2018 | 15:00

Updated-05 Aug, 2024 | 11:08

Incorrect object lifecycle in PDFium in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.

Product-debian_linux chrome linux_workstation linux_server linux_desktop Chrome

CWE ID-CWE-416

Use After Free

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-1667

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.62% / 69.00%

7 Day CHG~0.00%

Published-14 May, 2016 | 21:00

Updated-12 Apr, 2025 | 10:46

The TreeScope::adoptIfNeeded function in WebKit/Source/core/dom/TreeScope.cpp in the DOM implementation in Blink, as used in Google Chrome before 50.0.2661.102, does not prevent script execution during node-adoption operations, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.

Vendor-n/a Google LLC Debian GNU/Linux openSUSE

Product-debian_linux opensuse chrome n/a

CWE ID-CWE-284

Improper Access Control

CVE-2018-18337

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-2.94% / 85.91%

7 Day CHG~0.00%

Published-11 Dec, 2018 | 15:00

Updated-05 Aug, 2024 | 11:08

Incorrect handling of stylesheets leading to a use after free in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Product-debian_linux chrome linux_workstation linux_server linux_desktop Chrome

CWE ID-CWE-416

Use After Free

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-1622

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.50% / 80.37%

7 Day CHG~0.00%

Published-14 Feb, 2016 | 02:00

Updated-12 Apr, 2025 | 10:46

The Extensions subsystem in Google Chrome before 48.0.2564.109 does not prevent use of the Object.defineProperty method to override intended extension behavior, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.

Vendor-n/a Google LLC Debian GNU/Linux openSUSE

Product-debian_linux opensuse chrome n/a

CVE-2018-17458

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.22% / 78.24%

7 Day CHG~0.00%

Published-09 Jan, 2019 | 19:00

Updated-05 Aug, 2024 | 10:47

An improper update of the WebAssembly dispatch table in WebAssembly in Google Chrome prior to 69.0.3497.92 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

Vendor-Red Hat, Inc.Google LLC

Product-chrome enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server Chrome

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2018-6035

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.56% / 80.78%

7 Day CHG-0.06%

Published-25 Sep, 2018 | 14:00

Updated-05 Aug, 2024 | 05:54

Insufficient policy enforcement in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user local file data via a crafted Chrome Extension.

Product-enterprise_linux_server debian_linux chrome enterprise_linux_workstation enterprise_linux_desktop Chrome

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2016-1620

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.43% / 79.85%

7 Day CHG~0.00%

Published-25 Jan, 2016 | 11:00

Updated-12 Apr, 2025 | 10:46

Multiple unspecified vulnerabilities in Google Chrome before 48.0.2564.82 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

Vendor-n/a Google LLC

Product-chrome n/a

CVE-2016-1680

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.53% / 80.60%

7 Day CHG~0.00%

Published-05 Jun, 2016 | 23:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in ports/SkFontHost_FreeType.cpp in Skia, as used in Google Chrome before 51.0.2704.63, allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via unknown vectors.

Vendor-n/a openSUSE SUSE Red Hat, Inc.Google LLC Debian GNU/Linux Canonical Ltd.

Product-enterprise_linux_server leap opensuse ubuntu_linux enterprise_linux_desktop enterprise_linux_workstation chrome debian_linux linux_enterprise n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-6083

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.97% / 75.73%

7 Day CHG-0.02%

Published-14 Nov, 2018 | 15:00

Updated-05 Aug, 2024 | 05:54

Failure to disallow PWA installation from CSP sandboxed pages in AppManifest in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to access privileged APIs via a crafted HTML page.