Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-5811 State: PUBLISHED Published: 2018-12-07T22:00:00 Last Updated: 2024-08-05T05:47:56.175Z Vendors: n/a Products: LibRaw Problem Types: DoS (Denial of Service) through out-of-bounds read memory access Description: An error within the "nikon_coolscan_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to cause an out-of-bounds read memory access and subsequently cause a crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt - https://secuniaresearch.flexerasoftware.com/secunia_research/2018-10/ - https://secuniaresearch.flexerasoftware.com/advisories/8
secuniaresearch.flexerasoftware.com/secunia_research/2018-10/ - https://secuniaresearch.flexerasoftware.com/advisories/81800/ - https://github.com/LibRaw/LibRaw/commit/fd6330292501983ac75fe4162275794b18445bd9 - https://usn.ubuntu.com/3838-1/
CVE ID: CVE-2018-5812 State: PUBLISHED Published: 2018-12-07T22:00:00 Last Updated: 2024-08-05T05:47:54.564Z Vendors: n/a Products: LibRaw Problem Types: DoS (Denial of Service) through NULL pointer dereference Description: An error within the "nikon_coolscan_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to trigger a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt - https://secuniaresearch.flexerasoftware.com/secunia_research/2018-10/ - https://secuniaresearch.flexerasoftware.com/advisories/81800/ - https://github.com/LibRaw/LibRaw/commi
search/2018-10/ - https://secuniaresearch.flexerasoftware.com/advisories/81800/ - https://github.com/LibRaw/LibRaw/commit/fd6330292501983ac75fe4162275794b18445bd9 - https://usn.ubuntu.com/3838-1/
CVE ID: CVE-2018-5813 State: PUBLISHED Published: 2018-12-07T22:00:00 Last Updated: 2024-08-05T05:47:55.193Z Vendors: n/a Products: LibRaw Problem Types: DoS (Denial of Service) through infinite loop Description: An error within the "parse_minolta()" function (dcraw/dcraw.c) in LibRaw versions prior to 0.18.11 can be exploited to trigger an infinite loop via a specially crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt - https://secuniaresearch.flexerasoftware.com/advisories/83050/ - https://usn.ubuntu.com/3838-1/ - https://secuniaresearch.flexerasoftware.com/secunia_research/2018-13/ - https://github.com
ps://usn.ubuntu.com/3838-1/ - https://secuniaresearch.flexerasoftware.com/secunia_research/2018-13/ - https://github.com/LibRaw/LibRaw/commit/e47384546b43d0fd536e933249047bc397a4d88b
CVE ID: CVE-2018-5814 State: PUBLISHED Published: 2018-06-12T16:00:00 Last Updated: 2024-08-05T05:47:55.989Z Vendors: Linux Foundation Products: Linux Kernel Problem Types: Denial of Service Description: In the Linux Kernel before version 4.16.11, 4.14.43, 4.9.102, and 4.4.133, multiple race condition errors when handling probe, disconnect, and rebind operations can be exploited to trigger a use-after-free condition or a NULL pointer dereference by sending multiple USB over IP packets. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3752-2/ - https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html - https://usn.ubuntu.com/3696-1/ - https://u
752-2/ - https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html - https://usn.ubuntu.com/3696-1/ - https://usn.ubuntu.com/3752-3/ - https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.11 - https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.43 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.133 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.102 - https://secuniaresearch.flexerasoftware.com/secunia_research/2018-8/ - https://usn.ubuntu.com/3696-2/ - http://www.securitytracker.com/id/1041050 - https://se
e.com/secunia_research/2018-8/ - https://usn.ubuntu.com/3696-2/ - http://www.securitytracker.com/id/1041050 - https://secuniaresearch.flexerasoftware.com/advisories/81540/ - https://usn.ubuntu.com/3752-1/ - https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/?id=22076557b07c12086eeb16b8ce2b0b735f7a27e7 - https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/?id=c171654caa875919be3c533d3518da8be5be966e - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00043.html
CVE ID: CVE-2018-5815 State: PUBLISHED Published: 2018-12-07T22:00:00 Last Updated: 2024-08-05T05:47:56.115Z Vendors: n/a Products: LibRaw Problem Types: DoS (Denial of Service) through infinite loop Description: An integer overflow error within the "parse_qt()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.12 can be exploited to trigger an infinite loop via a specially crafted Apple QuickTime file. Additional Analyst Notes: - CVE Program Container: References: - https://secuniaresearch.flexerasoftware.com/secunia_research/2018-14/ - https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt - https://usn.ubuntu.com/3838-1/ - https://secuniaresearch.flexerasoftware.co
om/LibRaw/LibRaw/blob/master/Changelog.txt - https://usn.ubuntu.com/3838-1/ - https://secuniaresearch.flexerasoftware.com/advisories/83507/ - https://github.com/LibRaw/LibRaw/commit/1334647862b0c90b2e8cb2f668e66627d9517b17
CVE ID: CVE-2018-5816 State: PUBLISHED Published: 2018-12-07T22:00:00 Last Updated: 2024-08-05T05:47:56.117Z Vendors: n/a Products: LibRaw Problem Types: DoS (Denial of Service) through division by zero Description: An integer overflow error within the "identify()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.12 can be exploited to trigger a division by zero via specially crafted NOKIARAW file (Note: This vulnerability is caused due to an incomplete fix of CVE-2018-5804). Additional Analyst Notes: - CVE Program Container: References: - https://secuniaresearch.flexerasoftware.com/secunia_research/2018-14/ - https://github.com/LibRaw/LibRaw/commit/1d8d1b452e5dc74033ee9
iaresearch.flexerasoftware.com/secunia_research/2018-14/ - https://github.com/LibRaw/LibRaw/commit/1d8d1b452e5dc74033ee9f846081a0efb616cc39 - https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt - https://usn.ubuntu.com/3838-1/ - https://secuniaresearch.flexerasoftware.com/advisories/83507/
CVE ID: CVE-2018-5817 State: PUBLISHED Published: 2019-02-20T18:00:00Z Last Updated: 2024-09-16T19:15:52.663Z Vendors: Flexera Software LLC Products: LibRaw Problem Types: DoS (Denial of Service) via infinite loop Description: A type confusion error within the "unpacked_load_raw()" function within LibRaw versions prior to 0.19.1 (internal/dcraw_common.cpp) can be exploited to trigger an infinite loop. Additional Analyst Notes: - CVE Program Container: References: - https://secuniaresearch.flexerasoftware.com/secunia_research/2018-27/ - https://www.libraw.org/news/libraw-0-19-2-release - https://lists.debian.org/debian-lts-announce/2019/03/msg00036.html - https://usn.ubuntu.com/3989-1/
CVE ID: CVE-2018-5818 State: PUBLISHED Published: 2019-02-20T18:00:00 Last Updated: 2024-08-05T05:47:55.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: An error within the "parse_rollei()" function (internal/dcraw_common.cpp) within LibRaw versions prior to 0.19.1 can be exploited to trigger an infinite loop. Additional Analyst Notes: - CVE Program Container: References: - https://secuniaresearch.flexerasoftware.com/secunia_research/2018-27/ - https://www.libraw.org/news/libraw-0-19-2-release - https://lists.debian.org/debian-lts-announce/2019/03/msg00036.html - https://usn.ubuntu.com/3989-1/
CVE ID: CVE-2018-5819 State: PUBLISHED Published: 2019-02-20T18:00:00Z Last Updated: 2024-09-17T04:29:32.330Z Vendors: Flexera Software LLC Products: LibRaw Problem Types: DoS (Denial of Service) via CPU resource exhaustion Description: An error within the "parse_sinar_ia()" function (internal/dcraw_common.cpp) within LibRaw versions prior to 0.19.1 can be exploited to exhaust available CPU resources. Additional Analyst Notes: - CVE Program Container: References: - https://secuniaresearch.flexerasoftware.com/secunia_research/2018-27/ - https://www.libraw.org/news/libraw-0-19-2-release - https://lists.debian.org/debian-lts-announce/2019/03/msg00036.html - https://usn.ubuntu.com/3989-1/
CVE ID: CVE-2018-5820 State: PUBLISHED Published: 2018-04-03T17:00:00Z Last Updated: 2024-09-16T22:35:24.574Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Integer Overflow to Buffer Overflow in WLAN Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in the function wma_tbttoffset_update_event_handler(), a parameter received from firmware is used to allocate memory for a local buffer and is not properly validated. This can potentially result in an integer overflow subsequently leading to a heap overwrite. Additional A
rly validated. This can potentially result in an integer overflow subsequently leading to a heap overwrite. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-04-01
CVE ID: CVE-2018-5821 State: PUBLISHED Published: 2018-04-03T17:00:00Z Last Updated: 2024-09-17T00:11:34.135Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in function wma_wow_wakeup_host_event(), wake_info->vdev_id is received from FW and is used directly as array index to access wma->interfaces whose max index should be (max_bssid-1). If wake_info->vdev_id is greater than or equal to max
to access wma->interfaces whose max index should be (max_bssid-1). If wake_info->vdev_id is greater than or equal to max_bssid, an out-of-bounds read occurs. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-04-01
CVE ID: CVE-2018-5822 State: PUBLISHED Published: 2018-04-03T17:00:00Z Last Updated: 2024-09-16T22:09:01.786Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer overflow vulnerability in WLAN Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, compromised WLAN FW can potentially cause a buffer overwrite. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-04-01
CVE ID: CVE-2018-5823 State: PUBLISHED Published: 2018-04-03T17:00:00Z Last Updated: 2024-09-16T16:58:43.812Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Copy without Checking Size of Input in WLAN Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, improper buffer length validation in extscan hotlist event can lead to potential buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-04-01
CVE ID: CVE-2018-5824 State: PUBLISHED Published: 2018-04-03T17:00:00Z Last Updated: 2024-09-16T17:08:14.616Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Copy without Checking Size of Input in WLAN Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, while processing HTT_T2H_MSG_TYPE_RX_FLUSH or HTT_T2H_MSG_TYPE_RX_PN_IND messages, a buffer overflow can occur if the tid value obtained from the firmware is out of range. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/s
firmware is out of range. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-04-01
CVE ID: CVE-2018-5825 State: PUBLISHED Published: 2018-04-03T17:00:00Z Last Updated: 2024-09-16T22:57:12.558Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Use After Free in Data Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in the kernel IPA driver, a Use After Free condition can occur. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-04-01
CVE ID: CVE-2018-5826 State: PUBLISHED Published: 2018-04-03T17:00:00Z Last Updated: 2024-09-17T01:22:02.408Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Use After Free in WLAN Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, due to a race condition, a Use After Free condition can occur in the WLAN driver. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-04-01
CVE ID: CVE-2018-5827 State: PUBLISHED Published: 2018-05-17T22:00:00Z Last Updated: 2024-09-17T02:10:43.550Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Copy without Checking Size of Input in WLAN Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, a buffer overflow vulnerability exists in WLAN while processing an extscan hotlist event. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=53e6d889ac293
rences: - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=53e6d889ac29336ba212a0d4a987455a85736fa8 - https://source.android.com/security/bulletin/pixel/2018-04-01
CVE ID: CVE-2018-5828 State: PUBLISHED Published: 2018-04-03T17:00:00Z Last Updated: 2024-09-16T22:30:11.495Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in function wma_extscan_start_stop_event_handler(), vdev_id comes from the variable event from firmware and is not properly validated potentially leading to a buffer overwrite. Additional Analyst Notes: - CVE Program Container: Referenc
roperly validated potentially leading to a buffer overwrite. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-04-01
CVE ID: CVE-2018-5829 State: PUBLISHED Published: 2018-07-06T17:00:00Z Last Updated: 2024-09-16T16:52:41.630Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Over-read in WLAN Description: In wlan_hdd_cfg80211_set_privacy_ibss() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, a buffer over-read can potentially occur. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensou
/2018/07/02/july-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=27381e9d253629180dcdaa698d3fd01bec28d351 - https://source.android.com/security/bulletin/2018-06-01#qualcomm-components
CVE ID: CVE-2018-5830 State: PUBLISHED Published: 2018-07-06T17:00:00Z Last Updated: 2024-09-17T04:19:29.206Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Description: While processing the HTT_T2H_MSG_TYPE_MGMT_TX_COMPL_IND message, a buffer overflow can potentially occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security
Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=8174eb0235a7e581153ea1d4a401e7ea8354cc08 - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=129e76e0ea923b319555f37ea601dfb974a06bfe - https://source.android.com/security/bulletin/2018-06-01#qualcomm-components
CVE ID: CVE-2018-5831 State: PUBLISHED Published: 2018-07-06T17:00:00Z Last Updated: 2024-09-17T03:48:49.154Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Integer Overflow or Wraparound in Graphics Description: In the KGSL driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, a reference counting error can lead to a Use After Free condition. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin - https://source.android.com/security/bulletin
.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin - https://source.android.com/security/bulletin/2018-06-01#qualcomm-components - https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=e3e13d745238ad8853af47c2d938344ea8d3c77f
CVE ID: CVE-2018-5832 State: PUBLISHED Published: 2018-07-06T17:00:00Z Last Updated: 2024-09-16T23:42:20.128Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Use After Free in Camera Description: Due to a race condition in a camera driver ioctl handler in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, a Use After Free condition can occur. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin - https://source.android.com/security/bulletin/pixel/20
rity-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin - https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components
CVE ID: CVE-2018-5834 State: PUBLISHED Published: 2018-07-06T17:00:00Z Last Updated: 2024-09-16T17:22:59.288Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Incorrect Calculation of Buffer Size in WLAN Description: In __wlan_hdd_cfg80211_vendor_scan(), a buffer overwrite can potentially occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/platform/ve
security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=ede0f8a4d11ec56ee87177478cc0c25af0894860 - https://source.android.com/security/bulletin/2018-06-01#qualcomm-components
CVE ID: CVE-2018-5835 State: PUBLISHED Published: 2018-07-06T17:00:00Z Last Updated: 2024-09-16T16:39:03.766Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Copy without Checking Size of Input in WLAN Description: If the seq_len is greater then CSR_MAX_RSC_LEN, a buffer overflow in __wlan_hdd_cfg80211_add_key() may occur when copying keyRSC in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bull
ram Container: References: - https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin - https://source.android.com/security/bulletin/2018-06-01#qualcomm-components - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/prima/commit/?id=5a0eeb72c3cde7dcb8096967561a88a678ad9aec
CVE ID: CVE-2018-5836 State: PUBLISHED Published: 2018-07-06T17:00:00Z Last Updated: 2024-09-16T16:48:16.075Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Over-read in WLAN Description: In wma_nan_rsp_event_handler() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, the data_len value is received from firmware and not properly validated which could potentially lead to an out-of-bounds access. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security
Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=12a789c2e0e9fd2df40ac13ac27fe99487263887 - https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components
CVE ID: CVE-2018-5837 State: PUBLISHED Published: 2018-09-20T13:00:00 Last Updated: 2024-08-05T05:47:55.801Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Cryptographic Issues in WLAN Description: In Snapdragon (Automobile, Mobile, Wear) in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710, Snapdragon_High_Med_2016, MAC address randomization performed during probe requests is not done properly due to a flawed RNG which produced repeating output
s randomization performed during probe requests is not done properly due to a flawed RNG which produced repeating output much earlier than expected. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - https://source.android.com/security/bulletin/2018-07-01#qualcomm-closed-source-components
CVE ID: CVE-2018-5838 State: PUBLISHED Published: 2018-07-06T17:00:00Z Last Updated: 2024-09-16T19:30:24.163Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Improper Validation of Array Index in Graphics Description: Improper Validation of Array Index In the adreno OpenGL driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds access can occur in SurfaceFlinger. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins