Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-15802 State: PUBLISHED Published: 2017-10-22T19:00:00 Last Updated: 2024-08-05T20:04:50.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dll file that is mishandled during an attempt to render the DLL icon, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77310000!LdrpResCompareResourceNames+0x0000000000000087." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15802
CVE ID: CVE-2017-15803 State: PUBLISHED Published: 2017-10-22T19:00:00 Last Updated: 2024-08-05T20:04:50.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dll file that is mishandled during an attempt to render the DLL icon, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at ntdll_77310000!LdrpResCompareResourceNames+0x0000000000000150." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15803
CVE ID: CVE-2017-15804 State: PUBLISHED Published: 2017-10-22T17:00:00 Last Updated: 2024-08-05T20:04:50.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27 contains a buffer overflow during unescaping of user names with the ~ operator. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=22332 - https://access.redhat.com/errata/RHSA-2018:1879 - https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Ba=commit%3Bh=a159b53fa059947cc2548e3b0d5bdcf7b9630ba8 - http://www.securityfocus.com/bid/101535 - https://access.redhat.com/errata/RHSA-2018:0805
CVE ID: CVE-2017-15805 State: PUBLISHED Published: 2017-10-23T08:00:00 Last Updated: 2024-08-05T20:04:50.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Small Business SA520 and SA540 devices with firmware 2.1.71 and 2.2.0.7 allow ../ directory traversal in scgi-bin/platform.cgi via the thispage parameter, for reading arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://www.fwhibbit.es/lfi-en-cisco-small-business-sa500-series-cuando-la-seguridad-de-tu-red-esta-hecha-un-cisco
CVE ID: CVE-2017-15806 State: PUBLISHED Published: 2017-11-15T16:00:00 Last Updated: 2024-08-05T20:04:50.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: The send function in the ezcMailMtaTransport class in Zeta Components Mail before 1.8.2 does not properly restrict the set of characters used in the ezcMail returnPath property, which might allow remote attackers to execute arbitrary code via a crafted email address, as demonstrated by one containing "-X/path/to/wwwroot/file.php." Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43155/ - https://kay-malwarebenchmark.github.io/blog/cve-2017-15806-critical-rce-vulnerability/ -
xploit-db.com/exploits/43155/ - https://kay-malwarebenchmark.github.io/blog/cve-2017-15806-critical-rce-vulnerability/ - https://kay-malwarebenchmark.github.io/blog/cve-2017-15806-yuan-cheng-dai-ma-zhi-xing-lou-dong/ - https://github.com/zetacomponents/Mail/issues/58 - https://github.com/zetacomponents/Mail/releases/tag/1.8.2 - http://www.securityfocus.com/bid/101866
CVE ID: CVE-2017-15808 State: PUBLISHED Published: 2017-10-23T17:00:00.000Z Last Updated: 2025-04-16T14:45:54.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: In phpMyFaq before 2.9.9, there is CSRF in admin/ajax.config.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thorsten/phpMyFAQ/commit/a249b4645fb86f6a9fbe5d2344ab1cbdb906b75c - https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2017-15808.md
CVE ID: CVE-2017-15809 State: PUBLISHED Published: 2017-10-23T17:00:00Z Last Updated: 2024-09-17T04:15:09.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: In phpMyFaq before 2.9.9, there is XSS in admin/tags.main.php via a crafted tag. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thorsten/phpMyFAQ/commit/cb648f0d5690b81647dd5c9efe942ebf6cce7da9
CVE ID: CVE-2017-15810 State: PUBLISHED Published: 2017-10-23T17:00:00 Last Updated: 2024-08-05T20:04:50.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PopCash.Net Code Integration Tool plugin before 1.1 for WordPress has XSS via the tab parameter to wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/144583/WordPress-PopCash.Net-Publisher-Code-Integration-1.0-Cross-Site-Scripting.html - https://wordpress.org/plugins/popcashnet-code-integration-tool/#developers - https://wpvulndb.com/vulnerabilities/8936
CVE ID: CVE-2017-15811 State: PUBLISHED Published: 2017-10-23T17:00:00 Last Updated: 2024-08-05T20:04:50.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Pootle Button plugin before 1.2.0 for WordPress has XSS via the assets_url parameter in assets/dialog.php, exploitable via wp-admin/admin-ajax.php. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8930 - https://plugins.trac.wordpress.org/changeset/1745805/pootle-button/tags/ - https://packetstormsecurity.com/files/144582/WordPress-Pootle-Button-1.1.1-Cross-Site-Scripting.html
CVE ID: CVE-2017-15812 State: PUBLISHED Published: 2017-10-23T17:00:00 Last Updated: 2024-08-05T20:04:50.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Easy Appointments plugin before 1.12.0 for WordPress has XSS via a Settings values in the admin panel. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8937 - https://wordpress.org/plugins/easy-appointments/#developers
CVE ID: CVE-2017-15813 State: PUBLISHED Published: 2017-12-05T17:00:00Z Last Updated: 2024-09-17T04:29:28.122Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Copy without Checking Size of Input in WLAN Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a buffer overflow can occur while reading firmware logs. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2017-12-01
CVE ID: CVE-2017-15814 State: PUBLISHED Published: 2018-03-16T22:00:00Z Last Updated: 2024-09-16T20:17:27.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in msm_flash_subdev_do_ioctl of drivers/media/platform/msm/camera_v2/sensor/flash/msm_flash.c, there is a possible out of bounds read if flash_data.cfg_type is CFG_FLASH_INIT due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https:
User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-03-01
CVE ID: CVE-2017-15815 State: PUBLISHED Published: 2018-03-15T21:00:00 Last Updated: 2024-08-05T20:04:50.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a potential buffer overflow can happen when processing any 802.11 MGMT frames like Auth frame in limProcessAuthFrame. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=a5096157fd80350a0e0409e7ad96265ae60861f6 - https://source.android.com/security/bulletin/2018-03-01 - http://www.securityfocus.com/bid/10325
409e7ad96265ae60861f6 - https://source.android.com/security/bulletin/2018-03-01 - http://www.securityfocus.com/bid/103254
CVE ID: CVE-2017-15816 State: REJECTED Published: 2019-10-25T15:23:34 Last Updated: 2019-10-25T15:23:34 Description: No description available.
CVE ID: CVE-2017-15817 State: PUBLISHED Published: 2018-02-23T23:00:00Z Last Updated: 2024-09-16T21:03:36.761Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Stack-based Buffer Overflow in WLAN Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, when an access point sends a challenge text greater than 128 bytes, the host driver is unable to validate this potentially leading to authentication failure. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-02-01 - http://www.securityfocus.com/bid/102974
CVE ID: CVE-2017-15818 State: PUBLISHED Published: 2018-09-18T18:00:00 Last Updated: 2024-08-05T20:04:50.433Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Integer Overflow to Buffer Overflow in Core Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while loading a user application in qseecom, an integer overflow could potentially occur if the application partition size is rounded up to page_size. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin - https://
ences: - https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=abe4f7042cbdef928ffc152335a17150fb39b096 - http://www.securityfocus.com/bid/105872
CVE ID: CVE-2017-15820 State: PUBLISHED Published: 2018-02-23T23:00:00Z Last Updated: 2024-09-16T20:22:38.726Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Use After Free in Graphics Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, in a KGSL IOCTL handler, a Use After Free Condition can potentially occur. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-02-01 - http://www.securityfocus.com/bid/102974
CVE ID: CVE-2017-15821 State: PUBLISHED Published: 2018-03-15T21:00:00 Last Updated: 2024-08-05T20:04:50.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the function wma_p2p_noa_event_handler(), there is no bound check on a value coming from firmware which can potentially lead to a buffer overwrite. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-03-01 - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=44cd589c8a0f5a245e0003a7d0c4be1b5f3ba890 - http:
.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=44cd589c8a0f5a245e0003a7d0c4be1b5f3ba890 - http://www.securityfocus.com/bid/103254
CVE ID: CVE-2017-15822 State: PUBLISHED Published: 2018-04-03T17:00:00Z Last Updated: 2024-09-16T18:02:59.132Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Copy without Checking Size of Input in WLAN Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, while processing a 802.11 management frame, a buffer overflow may potentially occur. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01
CVE ID: CVE-2017-15823 State: PUBLISHED Published: 2018-03-30T21:00:00Z Last Updated: 2024-09-17T03:23:59.601Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Improper Input Validation in WLAN Description: In spectral_create_samp_msg() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-11, some values from firmware are not properly validated potentially leading to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=49c1ce19c8a4689c33e6e8f17ab77d77fae6ff93 - https://source.android.com/security/bul
opensource/wlan/qcacld-3.0/commit/?id=49c1ce19c8a4689c33e6e8f17ab77d77fae6ff93 - https://source.android.com/security/bulletin/pixel/2018-02-01
CVE ID: CVE-2017-15824 State: PUBLISHED Published: 2018-07-06T17:00:00Z Last Updated: 2024-09-17T02:11:17.193Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Information Exposure Vulnerability in Boot Description: In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, the function UpdateDeviceStatus() writes a local stack buffer without initialization to flash memory using WriteToPartition() which may potentially leak memory. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-06-01#qual
Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components
CVE ID: CVE-2017-15825 State: PUBLISHED Published: 2018-09-18T18:00:00 Last Updated: 2024-08-05T20:04:50.311Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Out of bounds Access When Accessing Partition Entries in Update gpt Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing a gpt update, an out of bounds memory access may potentially occur. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/kernel/lk/co
ty-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=252e22c9adb9b59c36e59e00d8b43013facec4d6 - https://source.android.com/security/bulletin/2018-09-01#qualcomm-components
CVE ID: CVE-2017-15826 State: PUBLISHED Published: 2018-03-30T21:00:00Z Last Updated: 2024-09-16T22:25:20.812Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Double free in mdss_rotator_release_from_work_distribution() Description: Due to a race condition in MDSS rotator in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-20, a double free vulnerability may potentially exist when two threads free the same perf structures. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-02-01 - https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=5ac3e9d038a
oid.com/security/bulletin/pixel/2018-02-01 - https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=5ac3e9d038a7ee7edf77dde2dffae6f8ba528848
CVE ID: CVE-2017-15828 State: PUBLISHED Published: 2018-09-18T18:00:00 Last Updated: 2024-08-05T20:04:50.326Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Integer Overflow to Buffer Overflow vulnerability in Bootloader Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while accessing the keystore in LK, an integer overflow vulnerability exists which may potentially lead to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin - https://sourc
: - https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=86ea9e5dd16d918f8960067157012cc15176f82f
CVE ID: CVE-2017-15829 State: PUBLISHED Published: 2018-02-23T23:00:00Z Last Updated: 2024-09-17T00:46:51.394Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Race condition in GPU Driver Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a GPU Driver which can potentially lead to a Use After Free condition. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-02-01 - http://www.securityfocus.com/bid/102974
CVE ID: CVE-2017-15830 State: PUBLISHED Published: 2018-03-16T22:00:00Z Last Updated: 2024-09-17T00:55:32.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper ch_list array index initialization in function sme_set_plm_request() causes potential buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=8a7a2a9c5d203e3395811963061c79d3bc257ebe - https://source.android.com/security/bulletin/pixel/2018-03-01
CVE ID: CVE-2017-15831 State: PUBLISHED Published: 2018-03-16T22:00:00Z Last Updated: 2024-09-17T01:22:06.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the function wma_ndp_end_indication_event_handler(), there is no input validation check on a event_info value coming from firmware, which can cause an integer overflow and then leads to potential heap overwrite. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=31e6a657320e4299c659e3d57d38a89afe8c1ce1
eaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=31e6a657320e4299c659e3d57d38a89afe8c1ce1 - https://source.android.com/security/bulletin/pixel/2018-03-01
CVE ID: CVE-2017-15832 State: PUBLISHED Published: 2024-11-26T08:55:16.904Z Last Updated: 2024-11-26T14:09:23.592Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-20 Description: Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html
CVE ID: CVE-2017-15833 State: PUBLISHED Published: 2018-03-16T22:00:00Z Last Updated: 2024-09-17T04:04:16.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, untrusted pointer dereference in update_userspace_power() function in power leads to information exposure. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-03-01 - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=51ce6aec73d80e1f1fcc9c7fa71e9c2fcbdbc0fd
CVE ID: CVE-2017-15834 State: PUBLISHED Published: 2018-03-16T22:00:00Z Last Updated: 2024-09-16T22:09:34.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, race condition in diag_dbgfs_read_dcistats(), while accessing diag_dbgfs_dci_data_index, causes potential heap overflow. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-03-01 - https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=2e1b54e38f1516e70d9f6581c4f1ee935effb903
CVE ID: CVE-2017-15835 State: PUBLISHED Published: 2018-12-07T14:00:00 Last Updated: 2024-08-05T20:04:50.374Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Loop with Unreachable Exit Condition in WLAN Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, While processing the RIC Data Descriptor IE in an artificially crafted 802.11 frame with IE length more than 255, an infinite loop may potentially occur resulting in a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-11-01#qualcomm-comp
otes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-11-01#qualcomm-components - https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2
CVE ID: CVE-2017-15836 State: PUBLISHED Published: 2018-04-03T17:00:00Z Last Updated: 2024-09-17T04:28:58.600Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Integer Overflow to Buffer Overflow in WLAN Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, if the firmware sends a service ready event to the host with a large number in the num_hw_modes or num_phy, then it could result in an integer overflow which may potentially lead to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https
which may potentially lead to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-04-01
CVE ID: CVE-2017-15837 State: PUBLISHED Published: 2018-04-03T17:00:00Z Last Updated: 2024-09-16T22:50:40.654Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Over-read in WLAN Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, a policy for the packet pattern attribute NL80211_PKTPAT_OFFSET is not defined which can lead to a buffer over-read in nla_get_u32(). Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-04-01
CVE ID: CVE-2017-15838 State: REJECTED Published: 2019-10-25T15:24:08 Last Updated: 2019-10-25T15:24:08 Description: No description available.
CVE ID: CVE-2017-15839 State: REJECTED Published: 2019-10-25T15:24:35 Last Updated: 2019-10-25T15:24:35 Description: No description available.
CVE ID: CVE-2017-15840 State: REJECTED Published: 2019-10-25T15:25:20 Last Updated: 2019-10-25T15:25:20 Description: No description available.
CVE ID: CVE-2017-15841 State: PUBLISHED Published: 2019-05-06T22:23:45 Last Updated: 2024-08-05T20:04:50.419Z Vendors: Qualcomm Technologies, Inc. Products: Snapdragon Mobile Problem Types: CWE285: Improper Authorization Description: When HOST sends a Special command ID packet, Controller triggers a RAM Dump and FW reset in Snapdragon Mobile in version SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, Snapdragon_High_Med_2016. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins