Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
?h=VER-2-7 - http://www.securitytracker.com/id/1038090 - https://security.gentoo.org/glsa/201706-14 - https://source.android.com/security/bulletin/2017-04-01 - http://www.securityfocus.com/bid/97405 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36 - http://www.debian.org/security/2017/dsa-3839 - http://www.securitytracker.com/id/1038201 - https://www.oracle.com/security-alerts/cpuapr2020.html
CVE ID: CVE-2016-10245 State: PUBLISHED Published: 2019-05-24T16:24:38 Last Updated: 2024-08-06T03:14:42.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insufficient sanitization of the query parameter in templates/html/search_opensearch.php could lead to reflected cross-site scripting or iframe injection. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.gnome.org/show_bug.cgi?id=762934 - https://github.com/doxygen/doxygen/commit/1cc1adad2de03a0f013881b8960daf89aa155081 - http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_12 - http://www.securityfocus.com/bid/108476 - https://lists.debian.org/debian-lts-announce/2019/05/msg0004
html#log_1_8_12 - http://www.securityfocus.com/bid/108476 - https://lists.debian.org/debian-lts-announce/2019/05/msg00046.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00000.html - https://usn.ubuntu.com/4002-1/
CVE ID: CVE-2016-10246 State: PUBLISHED Published: 2017-03-16T14:00:00 Last Updated: 2024-09-16T15:22:15.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the main function in jstest_main.c in Mujstest in Artifex Software, Inc. MuPDF before 1.10 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.openwall.com/lists/oss-security/2017/03/13/21 - https://blogs.gentoo.org/ago/2016/09/24/mupdf-mujstest-global-buffer-overflow-in-main-jstest_main-c/ - http://git.ghostscript.com/?p=mupdf.git%3Bh=cfe8f35bca61056363368c343be368
obal-buffer-overflow-in-main-jstest_main-c/ - http://git.ghostscript.com/?p=mupdf.git%3Bh=cfe8f35bca61056363368c343be36812abde0a06 - https://lists.debian.org/debian-lts-announce/2021/09/msg00013.html - https://bugs.ghostscript.com/show_bug.cgi?id=697020
CVE ID: CVE-2016-10247 State: PUBLISHED Published: 2017-03-16T14:00:00 Last Updated: 2024-09-13T14:08:06.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the my_getline function in jstest_main.c in Mujstest in Artifex Software, Inc. MuPDF before 1.10 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/97099 - http://git.ghostscript.com/?p=mupdf.git%3Bh=446097f97b71ce20fa8d1e45e070f2e62676003e - https://blogs.gentoo.org/ago/2016/09/24/mupdf-mujstest-global-buffer-overflow-in-my_getline-jstest_mai
070f2e62676003e - https://blogs.gentoo.org/ago/2016/09/24/mupdf-mujstest-global-buffer-overflow-in-my_getline-jstest_main-c/ - http://www.openwall.com/lists/oss-security/2017/03/13/20 - https://lists.debian.org/debian-lts-announce/2021/09/msg00013.html - https://bugs.ghostscript.com/show_bug.cgi?id=697021
CVE ID: CVE-2016-10248 State: PUBLISHED Published: 2017-03-15T14:00:00 Last Updated: 2024-08-06T03:14:42.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jpc_tsfb_synthesize function in jpc_tsfb.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer dereference) via vectors involving an empty sequence. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2016/10/20/jasper-null-pointer-dereference-in-jpc_tsfb_synthesize-jpc_tsfb-c/ - https://github.com/mdadams/jasper/commit/2e82fa00466ae525339754bb3ab0a0474a31d4bd - https://access.redhat.com/errata/RHSA-2017:1208 - http://www.securityfocus.com/b
2fa00466ae525339754bb3ab0a0474a31d4bd - https://access.redhat.com/errata/RHSA-2017:1208 - http://www.securityfocus.com/bid/93797 - https://usn.ubuntu.com/3693-1/
CVE ID: CVE-2016-10249 State: PUBLISHED Published: 2017-03-15T14:00:00 Last Updated: 2024-08-06T03:14:42.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.12 allows remote attackers to have unspecified impact via a crafted image file, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2016/10/23/jasper-heap-based-buffer-overflow-in-jpc_dec_tiledecode-jpc_dec-c/ - https://github.com/mdadams/jasper/commit/988f8365f7d8ad8073b6786e433d34c553ecf568 - https://access.redhat.com/errata/RHSA-2017:1208 - http://www
ms/jasper/commit/988f8365f7d8ad8073b6786e433d34c553ecf568 - https://access.redhat.com/errata/RHSA-2017:1208 - http://www.debian.org/security/2017/dsa-3827 - http://www.securityfocus.com/bid/93838
CVE ID: CVE-2016-10250 State: PUBLISHED Published: 2017-03-15T14:00:00 Last Updated: 2024-08-06T03:14:42.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jp2_colr_destroy function in jp2_cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service (NULL pointer dereference) by leveraging incorrect cleanup of JP2 box data on error. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8887. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mdadams/jasper/commit/bdfe95a6e81ffb4b2fad31a76b57943695beed20 - https://blogs.gentoo.org/ago/2016/10/23/jasper-null-pointer-dereference-in-jp2_colr_destroy-jp2
ad31a76b57943695beed20 - https://blogs.gentoo.org/ago/2016/10/23/jasper-null-pointer-dereference-in-jp2_colr_destroy-jp2_cod-c-incomplete-fix-for-cve-2016-8887/ - https://usn.ubuntu.com/3693-1/
CVE ID: CVE-2016-10251 State: PUBLISHED Published: 2017-03-15T14:00:00 Last Updated: 2024-08-06T03:14:42.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the jpc_pi_nextcprl function in jpc_t2cod.c in JasPer before 1.900.20 allows remote attackers to have unspecified impact via a crafted file, which triggers use of an uninitialized value. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2016/11/04/jasper-use-of-uninitialized-value-in-jpc_pi_nextcprl-jpc_t2cod-c/ - https://github.com/mdadams/jasper/commit/1f0dfe5a42911b6880a1445f13f6d615ddb55387 - https://access.redhat.com/errata/RHSA-2017:1208 - http://www.securi
er/commit/1f0dfe5a42911b6880a1445f13f6d615ddb55387 - https://access.redhat.com/errata/RHSA-2017:1208 - http://www.securityfocus.com/bid/97584 - http://www.debian.org/security/2017/dsa-3827 - https://www.oracle.com/security-alerts/cpuapr2020.html
CVE ID: CVE-2016-10252 State: PUBLISHED Published: 2017-03-14T22:00:00 Last Updated: 2024-08-06T03:14:42.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the IsOptionMember function in MagickCore/option.c in ImageMagick before 6.9.2-2, as used in ODR-PadEnc and other products, allows attackers to trigger memory consumption. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=857426 - https://github.com/Opendigitalradio/ODR-PadEnc/issues/2 - http://git.imagemagick.org/repos/ImageMagick/commit/6790815c75bdea0357df5564345847856e995d6b - http://www.debian.org/security/2017/dsa-3808
CVE ID: CVE-2016-10253 State: PUBLISHED Published: 2017-03-18T20:10:00 Last Updated: 2024-08-06T03:14:42.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Erlang/OTP 18.x. Erlang's generation of compiled regular expressions is vulnerable to a heap overflow. Regular expressions using a malformed extpattern can indirectly specify an offset that is used as an array index. This ordinal permits arbitrary regions within the erts_alloc arena to be both read and written to. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3571-1/ - https://github.com/erlang/otp/pull/1108
CVE ID: CVE-2016-10254 State: PUBLISHED Published: 2017-03-23T16:00:00 Last Updated: 2024-08-06T03:14:42.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: The allocate_elf function in common.h in elfutils before 0.168 allows remote attackers to cause a denial of service (crash) via a crafted ELF file, which triggers a memory allocation failure. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3670-1/ - http://www.openwall.com/lists/oss-security/2017/03/22/2 - https://security.gentoo.org/glsa/201710-10 - https://blogs.gentoo.org/ago/2016/11/04/elfutils-memory-allocation-failure-in-allocate_elf-common-h/ - https://lists.fedorahosted.org/arch
oo.org/ago/2016/11/04/elfutils-memory-allocation-failure-in-allocate_elf-common-h/ - https://lists.fedorahosted.org/archives/list/elfutils-devel%40lists.fedorahosted.org/message/EJWVY7TMRDEMWPAPNVU3V4MZYG5HANF2/
CVE ID: CVE-2016-10255 State: PUBLISHED Published: 2017-03-23T16:00:00 Last Updated: 2024-08-06T03:14:42.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: The __libelf_set_rawdata_wrlock function in elf_getdata.c in elfutils before 0.168 allows remote attackers to cause a denial of service (crash) via a crafted (1) sh_off or (2) sh_size ELF header value, which triggers a memory allocation failure. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3670-1/ - https://bugzilla.redhat.com/show_bug.cgi?id=1387584 - https://security.gentoo.org/glsa/201710-10 - http://www.openwall.com/lists/oss-security/2017/03/22/1 - https://lists.fedorahosted.org
ity.gentoo.org/glsa/201710-10 - http://www.openwall.com/lists/oss-security/2017/03/22/1 - https://lists.fedorahosted.org/archives/list/elfutils-devel%40lists.fedorahosted.org/thread/Q4LE47FPEVRZANMV6JE2NMHYO4H5MHGJ/ - https://blogs.gentoo.org/ago/2016/11/04/elfutils-memory-allocation-failure-in-__libelf_set_rawdata_wrlock-elf_getdata-c/
CVE ID: CVE-2016-10256 State: PUBLISHED Published: 2018-01-10T02:00:00Z Last Updated: 2024-09-17T00:06:18.696Z Vendors: Symantec Corporation Products: ProxySG Problem Types: Reflected XSS Description: The Symantec ProxySG 6.5 (prior to 6.5.10.6), 6.6, and 6.7 (prior to 6.7.2.1) management console is susceptible to a reflected XSS vulnerability. A remote attacker can use a crafted management console URL in a phishing attack to inject arbitrary JavaScript code into the management console web client application. This is a separate vulnerability from CVE-2016-10257. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040138 - https://www.symantec.c
Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040138 - https://www.symantec.com/security-center/network-protection-security-advisories/SA155 - http://www.securityfocus.com/bid/102451
CVE ID: CVE-2016-10257 State: PUBLISHED Published: 2018-01-10T02:00:00Z Last Updated: 2024-09-16T18:39:51.797Z Vendors: Symantec Corporation Products: ASG, ProxySG Problem Types: Reflected XSS Description: The Symantec Advanced Secure Gateway (ASG) 6.6, ASG 6.7 (prior to 6.7.2.1), ProxySG 6.5 (prior to 6.5.10.6), ProxySG 6.6, and ProxySG 6.7 (prior to 6.7.2.1) management console is susceptible to a reflected XSS vulnerability. A remote attacker can use a crafted management console URL in a phishing attack to inject arbitrary JavaScript code into the management console web client application. This is a separate vulnerability from CVE-2016-10256. Additional Analyst Notes: - CVE Program Contain
lient application. This is a separate vulnerability from CVE-2016-10256. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040138 - https://www.symantec.com/security-center/network-protection-security-advisories/SA155 - http://www.securityfocus.com/bid/102447
CVE ID: CVE-2016-10258 State: PUBLISHED Published: 2018-04-11T14:00:00Z Last Updated: 2024-09-17T02:37:23.286Z Vendors: Symantec Corporation Products: Advanced Secure Gateway (ASG), ProxySG Problem Types: Unrestricted file upload Description: Unrestricted file upload vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A malicious appliance administrator can upload arbitrary malicious files to the management console and trick another administrator user into downloading and executing malicious code. Additional Analyst Notes: - CVE Program Container: References: - https://www.symantec.com/security-center/network-protection-security-advisories/SA162 - htt
ram Container: References: - https://www.symantec.com/security-center/network-protection-security-advisories/SA162 - http://www.securityfocus.com/bid/103685 - http://www.securitytracker.com/id/1040757
CVE ID: CVE-2016-10259 State: PUBLISHED Published: 2017-04-11T14:00:00Z Last Updated: 2024-09-17T01:45:40.309Z Vendors: Symantec Corporation Products: SSL Visibility Problem Types: Denial of Service Description: Symantec SSL Visibility (SSLV) 3.8.4FC, 3.9, 3.10 before 3.10.4.1, and 3.11 before 3.11.3.1 is susceptible to a denial-of-service vulnerability that impacts the SSL servers for intercepted SSL connections. A malicious SSL client can, under certain circumstances, temporarily exhaust the TCP connection pool of an SSL server. Additional Analyst Notes: - CVE Program Container: References: - https://www.symantec.com/security-center/network-protection-security-advisories/SA142 - http://www
tainer: References: - https://www.symantec.com/security-center/network-protection-security-advisories/SA142 - http://www.securityfocus.com/bid/97525 - https://bto.bluecoat.com/security-advisory/sa142
CVE ID: CVE-2016-10266 State: PUBLISHED Published: 2017-03-24T19:00:00 Last Updated: 2024-08-06T03:14:42.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_read.c:351:22. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3844 - https://usn.ubuntu.com/3602-1/ - https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-divide-by-zero - http://www.securityfocus.com/bid/97115 - https://github.com/vadz/libtiff/commit/438274f938e046d33cb0e1230b41da32ffe223e1
CVE ID: CVE-2016-10267 State: PUBLISHED Published: 2017-03-24T19:00:00 Last Updated: 2024-08-06T03:14:42.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_ojpeg.c:816:8. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3844 - https://security.gentoo.org/glsa/201709-27 - http://www.securityfocus.com/bid/97117 - https://usn.ubuntu.com/3602-1/ - https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-divide-by-zero - https://github.com/vadz/libtiff/commit/43bc256d8ae
s://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-divide-by-zero - https://github.com/vadz/libtiff/commit/43bc256d8ae44b92d2734a3c5bc73957a4d7c1ec
CVE ID: CVE-2016-10268 State: PUBLISHED Published: 2017-03-24T19:00:00 Last Updated: 2024-08-06T03:14:42.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: tools/tiffcp.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (integer underflow and heap-based buffer under-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 78490" and libtiff/tif_unix.c:115:23. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-heap-based-buffer-overflow/ - https://security.gentoo.org/glsa/201709-27 - https://github.com/vadz/libtiff/commit/5397a417e61258c69209904e65
erflow/ - https://security.gentoo.org/glsa/201709-27 - https://github.com/vadz/libtiff/commit/5397a417e61258c69209904e652a1f409ec3b9df - https://usn.ubuntu.com/3602-1/ - http://www.securityfocus.com/bid/97202
CVE ID: CVE-2016-10269 State: PUBLISHED Published: 2017-03-24T19:00:00 Last Updated: 2024-08-06T03:14:42.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6 and 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 512" and libtiff/tif_unix.c:340:2. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-heap-based-buffer-overflow/ - http://www.debian.org/security/2017/dsa-
/blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-heap-based-buffer-overflow/ - http://www.debian.org/security/2017/dsa-3844 - https://usn.ubuntu.com/3602-1/ - https://github.com/vadz/libtiff/commit/1044b43637fa7f70fb19b93593777b78bd20da86 - http://www.securityfocus.com/bid/97201 - https://github.com/Hack-Me/Pocs_for_Multi_Versions/tree/main/CVE-2016-10269
CVE ID: CVE-2016-10270 State: PUBLISHED Published: 2017-03-24T19:00:00 Last Updated: 2024-08-06T03:14:42.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 8" and libtiff/tif_read.c:523:22. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-heap-based-buffer-overflow/ - http://www.debian.org/security/2017/dsa-3844 - http://www.securityfocus.com/bid/97200 - https://github.com/vadz/libtiff/commit/9a72a69e035ee70ff5c41541c8c6
/dsa-3844 - http://www.securityfocus.com/bid/97200 - https://github.com/vadz/libtiff/commit/9a72a69e035ee70ff5c41541c8c61cd97990d018
CVE ID: CVE-2016-10271 State: PUBLISHED Published: 2017-03-24T19:00:00 Last Updated: 2024-08-06T03:14:42.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: tools/tiffcrop.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read and buffer overflow) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 1" and libtiff/tif_fax3.c:413:13. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-heap-based-buffer-overflow/ - http://www.securityfocus.com/bid/97199 - https://github.com/vadz/libtiff/commit/9657bbe3cdce4aaa90e07d50c1c70ae52da
w/ - http://www.securityfocus.com/bid/97199 - https://github.com/vadz/libtiff/commit/9657bbe3cdce4aaa90e07d50c1c70ae52da0ba6a
CVE ID: CVE-2016-10272 State: PUBLISHED Published: 2017-03-24T19:00:00 Last Updated: 2024-08-06T03:14:42.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted TIFF image, related to "WRITE of size 2048" and libtiff/tif_next.c:64:9. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-heap-based-buffer-overflow/ - https://github.com/vadz/libtiff/commit/9657bbe3cdce4aaa90e07d50c1c70ae52da0ba6a - http://www.securityfocus.com/bid/97197
CVE ID: CVE-2016-10273 State: PUBLISHED Published: 2017-03-26T05:47:00Z Last Updated: 2024-09-17T04:29:07.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack buffer overflow vulnerabilities in Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4) devices allow remote attackers to execute arbitrary code or crash the web service via the (1) ateFunc, (2) ateGain, (3) ateTxCount, (4) ateChan, (5) ateRate, (6) ateMacID, (7) e2pTxPower1, (8) e2pTxPower2, (9) e2pTxPower3, (10) e2pTxPower4, (11) e2pTxPower5, (12) e2pTxPower6, (13) e2pTxPower7, (14) e2pTx2Power1, (15) e
wer2, (9) e2pTxPower3, (10) e2pTxPower4, (11) e2pTxPower5, (12) e2pTxPower6, (13) e2pTxPower7, (14) e2pTx2Power1, (15) e2pTx2Power2, (16) e2pTx2Power3, (17) e2pTx2Power4, (18) e2pTx2Power5, (19) e2pTx2Power6, (20) e2pTx2Power7, (21) ateTxFreqOffset, (22) ateMode, (23) ateBW, (24) ateAntenna, (25) e2pTxFreqOffset, (26) e2pTxPwDeltaB, (27) e2pTxPwDeltaG, (28) e2pTxPwDeltaMix, (29) e2pTxPwDeltaN, and (30) readE2P parameters of the /goform/formWlanMP endpoint. Additional Analyst Notes: - CVE Program Container: References: - https://www.riskbasedsecurity.com/research/RBS-2016-004.pdf
CVE ID: CVE-2016-10274 State: PUBLISHED Published: 2017-05-12T15:00:00 Last Updated: 2024-08-06T03:14:42.929Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the MediaTek touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-30202412. References: M-ALPS02897901. Additional Analyst Notes: - CVE Program Container: References: - https
droid ID: A-30202412. References: M-ALPS02897901. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-05-01 - http://www.securityfocus.com/bid/98145
CVE ID: CVE-2016-10275 State: PUBLISHED Published: 2017-05-12T15:00:00 Last Updated: 2024-08-06T03:14:42.967Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-34514954. References: QC-CR#1009111. Additional Analyst Notes: - CVE Program Container: References: - http://www.sec
: A-34514954. References: QC-CR#1009111. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98146 - https://source.android.com/security/bulletin/2017-05-01
CVE ID: CVE-2016-10276 State: PUBLISHED Published: 2017-05-12T15:00:00 Last Updated: 2024-08-06T03:14:42.895Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-32952839. References: QC-CR#1094105. Additional Analyst Notes: - CVE Program Container: References: - https://source
: A-32952839. References: QC-CR#1094105. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-05-01 - http://www.securityfocus.com/bid/98148