2017

Installing a zero-permission Android application on certain Samsung Android devices with KK(4.4), L(5.0/5.1), and M(6.0)

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have a security by

A denial of service vulnerability in Telephony could enable a local malicious application to use a specially crafted fil

A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a dev

A denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted f

A denial of service vulnerability in libmedia and libstagefright in Mediaserver could enable an attacker to use a specia

A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a dev

An information disclosure vulnerability in the ih264d decoder in Mediaserver could enable a local malicious application

An information disclosure vulnerability in the MediaTek video driver could enable a local malicious application to acces

An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access

An information disclosure vulnerability in the NVIDIA librm library (libnvrm) could enable a local malicious application

An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access

An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its pe

An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its pe

A denial of service vulnerability in the Qualcomm FUSE file system could enable a remote attacker to use a specially cra

An elevation of privilege vulnerability in the External Storage Provider could enable a local secondary user to read dat

A denial of service vulnerability in Tremolo/dpen.s in Mediaserver could enable a remote attacker to use a specially cra

A denial of service vulnerability in decoder/ihevcd_decode.c in libhevc in Mediaserver could enable a remote attacker to

A denial of service vulnerability in VBRISeeker.cpp in libstagefright in Mediaserver could enable a remote attacker to u

A denial of service vulnerability in libvpx in Mediaserver could enable a remote attacker to use a specially crafted fil

An elevation of privilege vulnerability in Contacts could enable a local malicious application to silently create contac

An information disclosure vulnerability in visualizer/EffectVisualizer.cpp in libeffects in Mediaserver could enable a l

An information disclosure vulnerability in id3/ID3.cpp in libstagefright in Mediaserver could enable a local malicious a

An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in the Qualcomm audio post

An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in Audioserver could enable

An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in the Qualcomm audio post

An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in Audioserver could enable

An issue was discovered on LG devices using the MTK chipset with L(5.0/5.1), M(6.0/6.0.1), and N(7.0) software, and RCA

An elevation of privilege vulnerability in the bootloader could enable a local attacker to execute arbitrary modem comma

The jpc_dec_tilefini function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a den

The jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of servi

The flx_decode_chunks function in gst/flx/gstflxdec.c in GStreamer before 1.10.2 allows remote attackers to cause a deni

The gst_decode_chain_free_internal function in the flxdex decoder in gst-plugins-good in GStreamer before 1.10.2 allows

The _parse_pat function in the mpegts parser in GStreamer before 1.10.2 allows remote attackers to cause a denial of ser

An information disclosure vulnerability in Audioserver could enable a local malicious application to access data outside

An issue was discovered in PHPMailer before 5.2.22. PHPMailer's msgHTML method applies transformations to an HTML docume

magick/attribute.c in ImageMagick 7.0.3-2 allows remote attackers to cause a denial of service (use-after-free) via a cr

tiffsplit in libtiff 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file,

The Samsung Exynos fimg2d driver for Android with Exynos 5433, 54xx, or 7420 chipsets allows local users to cause a deni

crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of service (NULL pointer derefer

The _dwarf_read_loc_section function in dwarf_loc.c in libdwarf 20160613 allows attackers to cause a denial of service (

popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address.

VMFUNC emulation in Xen 4.6.x through 4.8.x on x86 systems using AMD virtualization extensions (aka SVM) allows local HV

The dynamicGetbuf function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial

The gdImageCreate function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial

Samsung KNOX 1.0.0 uses the shared certificate on Android, which allows local users to conduct man-in-the-middle attacks

ClipboardDataMgr in Samsung KNOX 1.0.0 and 2.3.0 does not properly check the caller, which allows local users to read KN

The icalproperty_new_clone function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (use-af

libical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file.

The icalparser_parse_string function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-o