Google CVEs
9,109 CVEs and advisories name Google as an affected vendor, 82 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2017-13203An information disclosure vulnerability in the Android media framework (libavc).
- CVE-2017-13202An information disclosure vulnerability in the Android media framework (libeffects).
- CVE-2017-13201An information disclosure vulnerability in the Android media framework (mediadrm).
- CVE-2017-13200An information disclosure vulnerability in the Android media framework (av) related to id3 unsynchronization.
- CVE-2017-13199In Bitmap.ccp if Bitmap.nativeCreate fails an out of memory exception is not thrown leading to a java.io.IOException later on.
- CVE-2017-13198A vulnerability in the Android media framework (ex) related to composition of frames lacking a color map.
- CVE-2017-13197In the ihevcd_parse_slice.c function, slave threads are not joined if there is an error.
- CVE-2017-13196In several places in ihevcd_decode.c, a dead loop could occur due to incomplete frames which could lead to memory leaks.
- CVE-2017-13195In the ihevcd_parse_sps function of ihevcd_parse_headers.c, several parameter values could be negative which could lead to negative…
- CVE-2017-13194A vulnerability in the Android media framework (libvpx) related to odd frame width.
- CVE-2017-13193In ihevcd_decode.c there is a possible infinite loop due to bytes for an sps of unsupported resolution resulting in the same sps being fed…
- CVE-2017-13192In the ihevcd_parse_slice_header function of ihevcd_parse_slice_header.c a slice address of zero after the first slice could result in an…
- CVE-2017-13191In the ihevcd_decode function of ihevcd_decode.c, there is an infinite loop due to an incomplete frame error.
- CVE-2017-13190A vulnerability in the Android media framework (libhevc) related to handling ps_codec_obj memory allocation failures.
- CVE-2017-13189A vulnerability in the Android media framework (libavc) related to handling dec_hdl memory allocation failures.
- CVE-2017-13188An information disclosure vulnerability in the Android media framework (aac).
- CVE-2017-13187An information disclosure vulnerability in the Android media framework (libhevc).
- CVE-2017-13186A vulnerability in the Android media framework (libavc) related to incorrect use of mmco parameters.
- CVE-2017-13185An information disclosure vulnerability in the Android media framework (libhevc).
- CVE-2017-13184In the enableVSyncInjections function of SurfaceFlinger, there is a possible use after free of mVSyncInjector.
- CVE-2017-13183In the OMXNodeInstance::useBuffer and IOMX::freeBuffer functions, there is a possible use after free due to a race condition if the user…
- CVE-2017-13182In the sendFormatChange function of ACodec, there is a possible integer overflow which could lead to an out-of-bounds write.
- CVE-2017-13181In the doGetThumb and getThumbnail functions of MtpServer, there is a possible double free due to not NULLing out a freed pointer.
- CVE-2017-13180In the onQueueFilled function of SoftAVCDec, there is a possible out-of-bounds write due to a use after free if a bad header causes the…
- CVE-2017-13179In the ihevcd_allocate_static_bufs and ihevcd_create functions of SoftHEVC, there is a possible out-of-bounds write due to a use after free.
- CVE-2017-13178In the initDecoder function of SoftAVCDec, there is a possible out-of-bounds write to mCodecCtx due to a use after free when buffer…
- CVE-2017-13177In several functions of libhevc, NEON registers are not preserved.
- CVE-2017-13176In the parseURL function of URLStreamHandler, there is improper input validation of the host field.
- CVE-2017-0855In MPEG4Extractor.cpp, there are several places where functions return early without cleaning up internal buffers which could lead to…
- CVE-2017-0846An information disclosure vulnerability in the Android framework (clipboardservice).