Vulnerabilities (CVE)

Total 398385 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-10343 1 Google 1 Android 2026-06-17 10.0 HIGH 9.8 CRITICAL
In all Qualcomm products with Android releases from CAF using the Linux kernel, sSL handshake failure with ClientHello rejection results in memory leak.
CVE-2016-10342 1 Google 1 Android 2026-06-17 9.3 HIGH 7.8 HIGH
In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a syscall handler.
CVE-2016-10341 1 Google 1 Android 2026-06-17 9.3 HIGH 7.8 HIGH
In all Android releases from CAF using the Linux kernel, 3rd party TEEs have more privilege than intended.
CVE-2016-10340 1 Google 1 Android 2026-06-17 9.3 HIGH 7.8 HIGH
In all Android releases from CAF using the Linux kernel, an integer underflow leading to buffer overflow vulnerability exists in a syscall handler.
CVE-2016-10339 1 Google 1 Android 2026-06-17 5.8 MEDIUM 7.1 HIGH
In all Android releases from CAF using the Linux kernel, HLOS can overwite secure memory or read contents of the keystore.
CVE-2016-10338 1 Google 1 Android 2026-06-17 9.3 HIGH 7.8 HIGH
In all Android releases from CAF using the Linux kernel, there was an issue related to RPMB processing.
CVE-2016-10337 1 Google 1 Android 2026-06-17 4.3 MEDIUM 5.5 MEDIUM
In all Android releases from CAF using the Linux kernel, some validation of secure applications was not being performed.
CVE-2016-10336 1 Google 1 Android 2026-06-17 4.3 MEDIUM 5.5 MEDIUM
In all Android releases from CAF using the Linux kernel, some regions of memory were not protected during boot.
CVE-2016-10335 1 Google 1 Android 2026-06-17 4.3 MEDIUM 5.5 MEDIUM
In all Android releases from CAF using the Linux kernel, libtomcrypt was updated.
CVE-2016-10334 1 Google 1 Android 2026-06-17 4.3 MEDIUM 5.5 MEDIUM
In all Android releases from CAF using the Linux kernel, a dynamically-protected DDR region could potentially get overwritten.
CVE-2016-10333 1 Google 1 Android 2026-06-17 4.3 MEDIUM 5.5 MEDIUM
In all Android releases from CAF using the Linux kernel, a sensitive system call was allowed to be called by HLOS.
CVE-2016-10332 1 Google 1 Android 2026-06-17 4.3 MEDIUM 5.5 MEDIUM
In all Android releases from CAF using the Linux kernel, stack protection was not enabled for secure applications.
CVE-2016-10331 1 Synology 1 Photo Station 2026-06-17 5.0 MEDIUM 7.5 HIGH
Directory traversal vulnerability in download.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to read arbitrary files via a full pathname in the id parameter.
CVE-2016-10330 1 Synology 1 Photo Station 2026-06-17 4.6 MEDIUM 7.1 HIGH
Directory traversal vulnerability in synophoto_dsm_user, a SUID program, as used in Synology Photo Station before 6.5.3-3226 allows local users to write to arbitrary files via unspecified vectors.
CVE-2016-10329 1 Synology 1 Photo Station 2026-06-17 7.5 HIGH 9.8 CRITICAL
Command injection vulnerability in login.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to execute arbitrary code via shell metacharacters in the crafted 'X-Forwarded-For' header.
CVE-2016-10328 2 Freetype, Oracle 2 Freetype, Outside In Technology 2026-06-17 7.5 HIGH 9.8 CRITICAL
FreeType 2 before 2016-12-16 has an out-of-bounds write caused by a heap-based buffer overflow related to the cff_parser_run function in cff/cffparse.c.
CVE-2016-10327 1 Libreoffice 1 Libreoffice 2026-06-17 7.5 HIGH 9.8 CRITICAL
LibreOffice before 2016-12-22 has an out-of-bounds write caused by a heap-based buffer overflow related to the EnhWMFReader::ReadEnhWMF function in vcl/source/filter/wmf/enhwmf.cxx.
CVE-2016-10326 1 Gnu 1 Osip 2026-06-17 5.0 MEDIUM 7.5 HIGH
In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osip_body_to_str() function defined in osipparser2/osip_body.c, resulting in a remote DoS.
CVE-2016-10325 1 Gnu 1 Osip 2026-06-17 5.0 MEDIUM 7.5 HIGH
In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the _osip_message_to_str() function defined in osipparser2/osip_message_to_str.c, resulting in a remote DoS.
CVE-2016-10324 1 Gnu 1 Osip 2026-06-17 7.5 HIGH 9.8 CRITICAL
In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osip_clrncpy() function defined in osipparser2/osip_port.c.