VYPR

Android

by Google

CVEs (4,290)

  • CVE-2015-3835Oct 1, 2015
    Google
    Android
    risk 0.00cvss —epss 0.02

    Buffer overflow in the OMXNodeInstance::emptyBuffer function in omx/OMXNodeInstance.cpp in libstagefright in Android before 5.1.1 LMY48I allows attackers to execute arbitrary code via a crafted application, aka internal bug 20634516.

  • CVE-2015-3834Oct 1, 2015
    Google
    Android
    risk 0.00cvss —epss 0.01

    Multiple integer overflows in the BnHDCP::onTransact function in media/libmedia/IHDCP.cpp in libstagefright in Android before 5.1.1 LMY48I allow attackers to execute arbitrary code via a crafted application that uses HDCP encryption, leading to a heap-based buffer overflow, aka…

  • CVE-2015-3833Oct 1, 2015
    Google
    Android
    risk 0.00cvss —epss 0.01

    The getRunningAppProcesses function in services/core/java/com/android/server/am/ActivityManagerService.java in Android before 5.1.1 LMY48I allows attackers to bypass intended getRecentTasks restrictions and discover the name of the foreground application via a crafted…

  • CVE-2015-3832Oct 1, 2015
    Google
    Android
    risk 0.00cvss —epss 0.03

    Multiple buffer overflows in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I allow remote attackers to execute arbitrary code via invalid size values of NAL units in MP4 data, aka internal bug 19641538.

  • CVE-2015-3831Oct 1, 2015
    Google
    Android
    risk 0.00cvss —epss 0.01

    Buffer overflow in the readAt function in BpMediaHTTPConnection in media/libmedia/IMediaHTTPConnection.cpp in the mediaserver service in Android before 5.1.1 LMY48I allows attackers to execute arbitrary code via a crafted application, aka internal bug 19400722.

  • CVE-2015-1541Oct 1, 2015
    Google
    Android
    risk 0.00cvss —epss 0.00

    The AppWidgetServiceImpl implementation in com/android/server/appwidget/AppWidgetServiceImpl.java in the Settings application in Android before 5.1.1 LMY48I allows attackers to obtain a URI permission via an application that sends an Intent with a (1)…

  • CVE-2015-1536Oct 1, 2015
    Google
    Android
    risk 0.00cvss —epss 0.01

    Integer overflow in the Bitmap_createFromParcel function in core/jni/android/graphics/Bitmap.cpp in Android before 5.1.1 LMY48I allows attackers to cause a denial of service (system_server crash) or obtain sensitive system_server memory-content information via a crafted…

  • CVE-2015-1528Oct 1, 2015
    Google
    Android
    risk 0.00cvss —epss 0.03

    Integer overflow in the native_handle_create function in libcutils/native_handle.c in Android before 5.1.1 LMY48M allows attackers to obtain a different application's privileges or cause a denial of service (Binder heap memory corruption) via a crafted application, aka internal…

  • CVE-2014-7917Oct 1, 2015
    Google
    Android
    risk 0.00cvss —epss 0.01

    Integer overflow in SampleTable.cpp in libstagefright in Android before 5.0.0 has unspecified impact and attack vectors, aka internal bug 15342615.

  • CVE-2014-7916Oct 1, 2015
    Google
    Android
    risk 0.00cvss —epss 0.01

    Integer overflow in SampleTable.cpp in libstagefright in Android before 5.0.0 has unspecified impact and attack vectors, aka internal bug 15342751.

  • CVE-2014-7915Oct 1, 2015
    Google
    Android
    risk 0.00cvss —epss 0.01

    Integer overflow in SampleTable.cpp in libstagefright in Android before 5.0.0 has unspecified impact and attack vectors, aka internal bug 15328708.

  • CVE-2015-6682Sep 22, 2015
    Adobe Inc.
    Air
    risk 0.00cvss —epss 0.05

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allows attackers to…

  • CVE-2015-6677Sep 22, 2015
    Adobe Inc.
    Air
    risk 0.00cvss —epss 0.05

    Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a…

  • CVE-2015-6676Sep 22, 2015
    Adobe Inc.
    Air
    risk 0.00cvss —epss 0.06

    Buffer overflow in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allows attackers to execute…

  • CVE-2015-5588Sep 22, 2015
    Adobe Inc.
    Air
    risk 0.00cvss —epss 0.04

    Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a…

  • CVE-2015-5584Sep 22, 2015
    Adobe Inc.
    Air
    risk 0.00cvss —epss 0.05

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allows attackers to…

  • CVE-2015-5582Sep 22, 2015
    Adobe Inc.
    Air
    risk 0.00cvss —epss 0.04

    Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a…

  • CVE-2015-5581Sep 22, 2015
    Adobe Inc.
    Air
    risk 0.00cvss —epss 0.05

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allows attackers to…

  • CVE-2015-5580Sep 22, 2015
    Adobe Inc.
    Air
    risk 0.00cvss —epss 0.04

    Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a…

  • CVE-2015-5578Sep 22, 2015
    Adobe Inc.
    Air
    risk 0.00cvss —epss 0.04

    Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a…

Page 212 of 215