Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-9770 State: PUBLISHED Published: 2016-04-20T16:00:00 Last Updated: 2024-08-06T13:55:04.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: tmpfiles.d/systemd.conf in systemd before 214 uses weak permissions for journal files under (1) /run/log/journal/%m and (2) /var/log/journal/%m, which allows local users to obtain sensitive information by reading these files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/04/08/15 - http://www.openwall.com/lists/oss-security/2016/04/08/14 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00109.html - http://lists.opensuse.org/opensuse-security-announce/201
p://lists.opensuse.org/opensuse-updates/2016-05/msg00109.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00044.html - https://bugzilla.suse.com/show_bug.cgi?id=972612
CVE ID: CVE-2014-9771 State: PUBLISHED Published: 2016-05-13T16:00:00 Last Updated: 2024-08-06T13:55:04.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in imlib2 before 1.4.7 allows remote attackers to cause a denial of service (memory consumption or application crash) via a crafted image, which triggers an invalid read operation. Additional Analyst Notes: - CVE Program Container: References: - https://git.enlightenment.org/legacy/imlib2.git/tree/ChangeLog - https://bugzilla.redhat.com/show_bug.cgi?id=1324774 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=820206 - http://www.debian.org/security/2016/dsa-3555 - https://git.enlightenment.org/legacy/imlib2.
n/bugreport.cgi?bug=820206 - http://www.debian.org/security/2016/dsa-3555 - https://git.enlightenment.org/legacy/imlib2.git/commit/?id=143f299 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00076.html
CVE ID: CVE-2014-9772 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T13:55:04.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: The validator package before 2.0.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via hex-encoded characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97102 - http://www.openwall.com/lists/oss-security/2016/04/20/11 - https://nodesecurity.io/advisories/43
CVE ID: CVE-2014-9773 State: PUBLISHED Published: 2016-06-13T19:00:00 Last Updated: 2024-08-06T13:55:04.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: modules/chanserv/flags.c in Atheme before 7.2.7 allows remote attackers to modify the Anope FLAGS behavior by registering and dropping the (1) LIST, (2) CLEAR, or (3) MODIFY keyword nicks. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/05/03/1 - https://github.com/atheme/atheme/issues/397 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00061.html - https://github.com/atheme/atheme/commit/c597156adc60a45b5f827793cd420945f47bc03b - http://www.openwall.com/
00061.html - https://github.com/atheme/atheme/commit/c597156adc60a45b5f827793cd420945f47bc03b - http://www.openwall.com/lists/oss-security/2016/05/02/2
CVE ID: CVE-2014-9777 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T13:55:04.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vid_dec_set_meta_buffers function in drivers/video/msm/vidc/common/dec/vdec.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate the number of buffers, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28598501 and Qualcomm internal bug CR563654. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/kernel/msm/commit/?id=17bfaf64ad503d2e6607d2d3e0956f25bf07eb43 - http://www.sec
- https://source.codeaurora.org/quic/la/kernel/msm/commit/?id=17bfaf64ad503d2e6607d2d3e0956f25bf07eb43 - http://www.securityfocus.com/bid/91628 - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2014-9778 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T13:55:04.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vid_dec_set_h264_mv_buffers function in drivers/video/msm/vidc/common/dec/vdec.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate the number of buffers, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28598515 and Qualcomm internal bug CR563694. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91628 - http://source.android.com/security/bulletin/2016-07-01.html - https://sou
es: - http://www.securityfocus.com/bid/91628 - http://source.android.com/security/bulletin/2016-07-01.html - https://source.codeaurora.org/quic/la/kernel/msm/commit/?id=af85054aa6a1bcd38be2354921f2f80aef1440e5
CVE ID: CVE-2014-9779 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T13:55:04.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: arch/arm/mach-msm/qdsp6v2/msm_audio_ion.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allows attackers to obtain sensitive information from kernel memory via a crafted offset, aka Android internal bug 28598347 and Qualcomm internal bug CR548679. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91628 - https://source.codeaurora.org/quic/la/kernel/msm/commit/?id=0b5f49b360afdebf8ef55df1e48ec141b3629621 - http://source.android.com/security/bulletin/20
/quic/la/kernel/msm/commit/?id=0b5f49b360afdebf8ef55df1e48ec141b3629621 - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2014-9780 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T13:55:04.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/video/msm/mdss/mdp3_ctrl.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5, 5X, and 6P devices does not validate start and length values, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28602014 and Qualcomm internal bug CR542222. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91628 - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=b5bb13e1f738f90df11e0c17f843c73999a84a54 - http://source.
tps://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=b5bb13e1f738f90df11e0c17f843c73999a84a54 - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2014-9781 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T13:55:05.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in drivers/video/fbcmap.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28410333 and Qualcomm internal bug CR556471. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91628 - http://source.android.com/security/bulletin/2016-07-01.html - https://www.codeaurora.org/cgit/quic/la//kernel/msm/commit/?id=a2b5237ad265ec634489c8b296d870827b2a1b13
CVE ID: CVE-2014-9782 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T13:55:04.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/media/platform/msm/camera_v2/sensor/actuator/msm_actuator.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate direction and step parameters, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28431531 and Qualcomm internal bug CR511349. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91628 - http://source.android.com/security/bulletin/2016-07-01.html - https://source.codea
p://www.securityfocus.com/bid/91628 - http://source.android.com/security/bulletin/2016-07-01.html - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=2e57a46ab2ba7299d99d9cdc1382bd1e612963fb
CVE ID: CVE-2014-9783 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T13:55:04.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/media/platform/msm/camera_v2/sensor/cci/msm_cci.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices does not validate certain values, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28441831 and Qualcomm internal bug CR511382. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/kernel/msm/commit/?id=2b1050b49a9a5f7bb57006648d145e001a3eaa8b - http://www.securityfocus.com/bid/91628 - https://so
/la/kernel/msm/commit/?id=2b1050b49a9a5f7bb57006648d145e001a3eaa8b - http://www.securityfocus.com/bid/91628 - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=a7502f4f801bb95bff73617309835bb7a016cde5 - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2014-9784 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T13:55:04.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in drivers/char/diag/diag_debugfs.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28442449 and Qualcomm internal bug CR585147. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=36503d639cedcc73880974ed92132247576e72ba - http://www.securityfocus.com/bid/91628 - http://source.android.com/security/b
36503d639cedcc73880974ed92132247576e72ba - http://www.securityfocus.com/bid/91628 - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2014-9785 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T13:55:04.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices does not validate addresses before copying data, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28469042 and Qualcomm internal bug CR545747. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=b4338420db61f029ca6713a89c41b3a5852b20ce - http://www.securityfocus.com/bid/91628 - http://source.android.com
commit/?id=b4338420db61f029ca6713a89c41b3a5852b20ce - http://www.securityfocus.com/bid/91628 - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2014-9786 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T13:55:04.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in drivers/media/platform/msm/camera_v2/sensor/actuator/msm_actuator.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28557260 and Qualcomm internal bug CR545979. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91628 - http://source.android.com/security/bulletin/2016-07-01.html - https://source.codeaurora.org/quic/la/kernel/
/bid/91628 - http://source.android.com/security/bulletin/2016-07-01.html - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=2fb303d9c6ca080f253b10ed9384293ca69ad32b
CVE ID: CVE-2014-9787 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T13:55:04.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28571496 and Qualcomm internal bug CR545764. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91628 - https://source.codeaurora.org/quic/la/kernel/msm/commit/?id=528400ae4cba715f6c9ff4a2657dafd913f30b8b - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2014-9788 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T13:55:04.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the voice drivers in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28573112 and Qualcomm internal bug CR548872. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91628 - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=73bfc22aa70cc0b7e6709381125a0a42aa72a4f2 - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2014-9789 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T13:55:04.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) alloc and (2) free APIs in arch/arm/mach-msm/qdsp6v2/msm_audio_ion.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices do not validate parameters, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28749392 and Qualcomm internal bug CR556425. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91628 - http://source.android.com/security/bulletin/2016-07-01.html - https://source.codeaurora.org/quic/la/kernel/
/bid/91628 - http://source.android.com/security/bulletin/2016-07-01.html - https://source.codeaurora.org/quic/la/kernel/msm/commit/?id=5720ed5c3a786e3ba0a2428ac45da5d7ec996b4e
CVE ID: CVE-2014-9790 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T13:55:04.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/mmc/core/debugfs.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate pointers used in read and write operations, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28769136 and Qualcomm internal bug CR545716. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/kernel/msm/commit?id=9bc30c0d1832f7dd5b6fa10d5e48a29025176569 - http://www.securityfocus.com/bid/91628 - http://s
uic/la/kernel/msm/commit?id=9bc30c0d1832f7dd5b6fa10d5e48a29025176569 - http://www.securityfocus.com/bid/91628 - http://source.android.com/security/bulletin/2016-07-01.html - https://source.codeaurora.org/quic/la/kernel/msm/commit/?id=6ed921bda8cbb505e8654dfc1095185b0bccc38e
CVE ID: CVE-2014-9791 State: REJECTED Published: 2016-07-11T01:00:00 Last Updated: 2016-07-11T01:57:01 Description: No description available.
CVE ID: CVE-2014-9792 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T13:55:04.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: arch/arm/mach-msm/ipc_router.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices uses an incorrect integer data type, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28769399 and Qualcomm internal bug CR550606. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=a3e3dd9fc0a2699ae053ffd3efb52cdc73ad94cd - http://www.securityfocus.com/bid/91628 - http://source.android.com/security/b
a3e3dd9fc0a2699ae053ffd3efb52cdc73ad94cd - http://www.securityfocus.com/bid/91628 - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2014-9793 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T13:55:04.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: platform/msm_shared/mmc.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices mishandles the power-on write-protect feature, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28821253 and Qualcomm internal bug CR580567. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=0dcccecc4a6a9a9b3314cb87b2be8b52df1b7a81 - http://www.securityfocus.com/bid/91628 - http://source.android.com/secu
t/?id=0dcccecc4a6a9a9b3314cb87b2be8b52df1b7a81 - http://www.securityfocus.com/bid/91628 - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2014-9794 State: REJECTED Published: 2016-07-11T01:00:00 Last Updated: 2016-07-11T01:57:01 Description: No description available.
CVE ID: CVE-2014-9795 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T13:55:04.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices does not properly check for an integer overflow, which allows attackers to bypass intended access restrictions via crafted start and size values, aka Android internal bug 28820720 and Qualcomm internal bug CR681957, a related issue to CVE-2014-4325. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91628 - https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=fc3b31f81a1c128c2bcc7455
://www.securityfocus.com/bid/91628 - https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=fc3b31f81a1c128c2bcc745564a075022cd72a2e - http://source.android.com/security/bulletin/2016-07-01.html - https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=ce2a0ea1f14298abc83729f3a095adab43342342
CVE ID: CVE-2014-9796 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T13:55:04.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate the page size in the kernel header, which allows attackers to bypass intended access restrictions via a crafted boot image, aka Android internal bug 28820722 and Qualcomm internal bug CR684756. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91628 - http://source.android.com/security/bulletin/2016-07-01.html - https://source.codeaurora.org/quic/la/kernel/l
bid/91628 - http://source.android.com/security/bulletin/2016-07-01.html - https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=2e21b3a57cac7fb876bcf43244d7cc3dc1f6030d
CVE ID: CVE-2014-9797 State: REJECTED Published: 2016-07-11T01:00:00 Last Updated: 2016-07-11T01:57:01 Description: No description available.
CVE ID: CVE-2014-9798 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T13:55:04.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: platform/msm_shared/dev_tree.c in the Qualcomm bootloader in Android before 2016-07-05 on Nexus 5 devices does not check the relationship between tags addresses and aboot addresses, which allows attackers to cause a denial of service (OS outage) via a crafted application, aka Android internal bug 28821448 and Qualcomm internal bug CR681965. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=b05eed2491a098bf627ac485a5b43d2f4fae2484 - http://source.android.
s://source.codeaurora.org/quic/la/kernel/lk/commit/?id=b05eed2491a098bf627ac485a5b43d2f4fae2484 - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2014-9799 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T13:55:04.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: The makefile in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices omits the -fno-strict-overflow option to gcc, which might allow attackers to gain privileges via a crafted application that leverages incorrect compiler optimization of an integer-overflow protection mechanism, aka Android internal bug 28821731 and Qualcomm internal bug CR691916. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91628 - https://source.codeaurora.org/quic/la/kernel
E Program Container: References: - http://www.securityfocus.com/bid/91628 - https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=c2119f1fba46f3b6e153aa018f15ee46fe6d5b76 - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2014-9800 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T13:55:04.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in lib/heap/heap.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28822150 and Qualcomm internal bug CR692478. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=6390f200d966dc13cf61bb5abbe3110447ca82b5 - http://www.securityfocus.com/bid/91628 - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2014-9801 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T13:55:04.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in lib/libfdt/fdt_rw.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28822060 and Qualcomm internal bug CR705078. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=cf8f5a105bafda906ccb7f149d1a5b8564ce20c0 - http://www.securityfocus.com/bid/91628 - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2014-9802 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T13:55:04.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in lib/libfdt/fdt.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28821965 and Qualcomm internal bug CR705108. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=222e0ec9bc755bfeaa74f9a0052b7c709a4ad054 - http://www.securityfocus.com/bid/91628 - http://source.android.com/security/bulletin/2016-07-01.ht
9a0052b7c709a4ad054 - http://www.securityfocus.com/bid/91628 - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2014-9803 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T13:55:04.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: arch/arm64/include/asm/pgtable.h in the Linux kernel before 3.15-rc5-next-20140519, as used in Android before 2016-07-05 on Nexus 5X and 6P devices, mishandles execute-only pages, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28557020. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-07-01.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5a0fdfada3a2aa50d7b947a2e958bf00cbe0d830 - http
ttp://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5a0fdfada3a2aa50d7b947a2e958bf00cbe0d830 - https://www.kernel.org/pub/linux/kernel/next/patch-v3.15-rc5-next-20140519.xz - https://github.com/torvalds/linux/commit/5a0fdfada3a2aa50d7b947a2e958bf00cbe0d830