Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
crash dump boot flow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ6018 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin
CVE ID: CVE-2019-14117 State: PUBLISHED Published: 2020-09-08T09:31:33 Last Updated: 2024-08-05T00:12:42.421Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables Problem Types: Use After Free Issue in WLAN Description: u'Whenever the page list is updated via privileged user, the previous list elements are freed but are not deleted from the list which results in a use after free causing an unhandled page fault exception in rmnet driver' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in Bitra, MDM96
on Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in Bitra, MDM9607, QCS405, Saipan, SC8180X, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/august-2020-bulletin
CVE ID: CVE-2019-14118 State: REJECTED Published: 2021-12-20T22:43:39 Last Updated: 2021-12-20T22:43:39 Description: No description available.
CVE ID: CVE-2019-14119 State: PUBLISHED Published: 2020-09-08T09:31:34 Last Updated: 2024-08-05T00:12:42.511Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking Problem Types: Time of Check Time of Use Race Condition in QTEE Description: u'While processing SMCInvoke asynchronous message header, message count is modified leading to a TOCTOU race condition and lead to memory corruption' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdr
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ6018, Kamorta, MDM9205, MDM9607, Nicobar, QCS404, QCS405, QCS605, QCS610, Rennell, SA415M, SA515M, SA6155P, SC7180, SC8180X, SDM670, SDM710, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/august-2020-bulletin
CVE ID: CVE-2019-14122 State: PUBLISHED Published: 2020-04-16T10:46:17 Last Updated: 2024-08-05T00:12:42.546Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Mobile Problem Types: Detection of Error Condition without Action in Qualcomm IPC Description: Memory failure in SKB if it fails to to add the requested padding to the skb in low memory targets or targets with major memory fragmentation in Snapdragon Auto, Snapdragon Mobile in Saipan, SM8150, SM8250, SXR2130 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin
CVE ID: CVE-2019-14123 State: PUBLISHED Published: 2020-07-30T11:40:29 Last Updated: 2024-08-05T00:12:43.401Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking Problem Types: Improper Input Validation in Content Protection Description: Possible buffer overflow and over read possible due to missing bounds checks for fixed limits if we consider widevine HLOS client as non-trustable in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Kamorta, QCS404, Rennell, SC7180, SDX55, SM6150, SM7150, SM8250, SXR2130 Additional Analyst Notes: - CVE Program Containe
amorta, QCS404, Rennell, SC7180, SDX55, SM6150, SM7150, SM8250, SXR2130 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/july-2020-bulletin
CVE ID: CVE-2019-14124 State: PUBLISHED Published: 2020-07-30T11:40:30 Last Updated: 2024-08-05T00:12:42.600Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking Problem Types: Access of Uninitialized Pointer in Content Protection Description: Memory failure in content protection module due to not having pointer within the scope in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Kamorta, QCS404, Rennell, SC7180, SDX55, SM6150, SM7150, SM8250, SXR2130 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/prod
, SM8250, SXR2130 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/july-2020-bulletin
CVE ID: CVE-2019-14125 State: REJECTED Published: 2021-12-20T22:43:40 Last Updated: 2021-12-20T22:43:40 Description: No description available.
CVE ID: CVE-2019-14126 State: REJECTED Published: 2021-12-20T22:43:41 Last Updated: 2021-12-20T22:43:41 Description: No description available.
CVE ID: CVE-2019-14127 State: PUBLISHED Published: 2020-04-16T10:46:18 Last Updated: 2024-08-05T00:12:42.717Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables Problem Types: Buffer Copy Without Checking Size of Input in Video Description: Possible buffer overflow while playing mkv clip due to lack of validation of atom size buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, M
le, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCS605, QM215, Rennell, SA6155P, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin
CVE ID: CVE-2019-14128 State: REJECTED Published: 2021-12-20T22:43:42 Last Updated: 2021-12-20T22:43:42 Description: No description available.
CVE ID: CVE-2019-14130 State: PUBLISHED Published: 2020-07-30T11:40:30 Last Updated: 2024-08-05T00:12:42.696Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking Problem Types: Use of Out-of-range Pointer Offset Issue in Content Protection Description: Memory corruption can occurs in trusted application if offset size from HLOS is more than actual mapped buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Kamorta, QCS404, Rennell, SC7180, SDX55, SM6150, SM7150, SM8250, SXR2130 Additional Analyst Notes: - CVE Program Container: References: -
Rennell, SC7180, SDX55, SM6150, SM7150, SM8250, SXR2130 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/july-2020-bulletin
CVE ID: CVE-2019-14131 State: PUBLISHED Published: 2020-04-16T10:46:18 Last Updated: 2024-08-05T00:12:43.382Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music Problem Types: Improper Validation of Array Index in WLAN Description: Out of bound write can occur in radio measurement request if STA receives multiple invalid rrm measurement request from AP in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8053, APQ8096AU, MSM8998, Nicobar, QCA6574AU, QCS605, Rennell, SA6155P, Saipan, SC8180X
, Snapdragon Voice & Music in APQ8053, APQ8096AU, MSM8998, Nicobar, QCA6574AU, QCS605, Rennell, SA6155P, Saipan, SC8180X, SDM660, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin
CVE ID: CVE-2019-14132 State: PUBLISHED Published: 2020-04-16T10:46:19 Last Updated: 2024-08-05T00:12:42.821Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile Problem Types: Reachable Assertion in Video Description: Buffer over-write when this 0-byte buffer is typecasted to some other structure and hence memory corruption in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in QCS605, SA6155P, SM8150 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin
CVE ID: CVE-2019-14133 State: REJECTED Published: 2021-12-20T22:43:42 Last Updated: 2021-12-20T22:43:42 Description: No description available.
CVE ID: CVE-2019-14134 State: PUBLISHED Published: 2020-04-16T10:46:19 Last Updated: 2024-08-05T00:12:42.225Z Vendors: Qualcomm, Inc. Products: Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking Problem Types: Buffer Over-read Issue in WLAN Description: Possible out of bound access in WLAN handler when the received value of length in rx path is shorter than the expected value of country IE in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ8074, QCA8081, QCS605, SDA845, SDM670, SDM710, SDM845, SDM850, SM6150, SM
agon Wired Infrastructure and Networking in IPQ8074, QCA8081, QCS605, SDA845, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SXR1130 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin
CVE ID: CVE-2019-14135 State: PUBLISHED Published: 2020-04-16T10:46:20 Last Updated: 2024-08-05T00:12:42.588Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking Problem Types: Buffer Copy Without Checking Size of Input in WLAN Description: Possible integer overflow to buffer overflow in WLAN while parsing nonstandard NAN IE messages. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consume
agon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA4010, QCA6174A, QCA6574AU, QCA6584AU, QCA8081, QCA9377, QCA9379, QCA9886, QCN7605, QCS405, QCS605, SA6155P, Saipan, SDA845, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SM6150, SM7150, SM8150, SXR1130 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/
ional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin
CVE ID: CVE-2019-14136 State: REJECTED Published: 2021-12-20T22:43:43 Last Updated: 2021-12-20T22:43:43 Description: No description available.
CVE ID: CVE-2019-14137 State: REJECTED Published: 2021-12-20T22:43:44 Last Updated: 2021-12-20T22:43:44 Description: No description available.
CVE ID: CVE-2019-14138 State: REJECTED Published: 2021-12-20T22:43:44 Last Updated: 2021-12-20T22:43:44 Description: No description available.
CVE ID: CVE-2019-14139 State: REJECTED Published: 2021-12-20T22:43:45 Last Updated: 2021-12-20T22:43:45 Description: No description available.
CVE ID: CVE-2019-14140 State: REJECTED Published: 2021-12-20T22:43:46 Last Updated: 2021-12-20T22:43:46 Description: No description available.
CVE ID: CVE-2019-14141 State: REJECTED Published: 2021-12-20T22:43:47 Last Updated: 2021-12-20T22:43:47 Description: No description available.
CVE ID: CVE-2019-14142 State: REJECTED Published: 2021-12-20T22:43:47 Last Updated: 2021-12-20T22:43:47 Description: No description available.
CVE ID: CVE-2019-14143 State: REJECTED Published: 2021-12-20T22:43:48 Last Updated: 2021-12-20T22:43:48 Description: No description available.
CVE ID: CVE-2019-14144 State: REJECTED Published: 2021-12-20T22:43:49 Last Updated: 2021-12-20T22:43:49 Description: No description available.
CVE ID: CVE-2019-14145 State: REJECTED Published: 2021-12-20T22:43:49 Last Updated: 2021-12-20T22:43:49 Description: No description available.
CVE ID: CVE-2019-14146 State: REJECTED Published: 2021-12-20T22:43:50 Last Updated: 2021-12-20T22:43:50 Description: No description available.
CVE ID: CVE-2019-14147 State: REJECTED Published: 2021-12-20T22:43:51 Last Updated: 2021-12-20T22:43:51 Description: No description available.
CVE ID: CVE-2019-14148 State: REJECTED Published: 2021-12-20T22:43:52 Last Updated: 2021-12-20T22:43:52 Description: No description available.
CVE ID: CVE-2019-14149 State: REJECTED Published: 2021-12-20T22:43:52 Last Updated: 2021-12-20T22:43:52 Description: No description available.
CVE ID: CVE-2019-14150 State: REJECTED Published: 2021-12-20T22:43:53 Last Updated: 2021-12-20T22:43:53 Description: No description available.
CVE ID: CVE-2019-14151 State: REJECTED Published: 2021-12-20T22:43:54 Last Updated: 2021-12-20T22:43:54 Description: No description available.
CVE ID: CVE-2019-14152 State: REJECTED Published: 2021-12-20T22:43:54 Last Updated: 2021-12-20T22:43:54 Description: No description available.
CVE ID: CVE-2019-14153 State: REJECTED Published: 2021-12-20T22:43:55 Last Updated: 2021-12-20T22:43:55 Description: No description available.
CVE ID: CVE-2019-14154 State: REJECTED Published: 2021-12-20T22:43:56 Last Updated: 2021-12-20T22:43:56 Description: No description available.
CVE ID: CVE-2019-14155 State: REJECTED Published: 2021-12-20T22:43:57 Last Updated: 2021-12-20T22:43:57 Description: No description available.
CVE ID: CVE-2019-14156 State: REJECTED Published: 2021-12-20T22:43:57 Last Updated: 2021-12-20T22:43:57 Description: No description available.
CVE ID: CVE-2019-14157 State: REJECTED Published: 2021-12-20T22:43:58 Last Updated: 2021-12-20T22:43:58 Description: No description available.
CVE ID: CVE-2019-14158 State: REJECTED Published: 2021-12-20T22:43:59 Last Updated: 2021-12-20T22:43:59 Description: No description available.
CVE ID: CVE-2019-14159 State: REJECTED Published: 2021-12-20T22:44:00 Last Updated: 2021-12-20T22:44:00 Description: No description available.
CVE ID: CVE-2019-14160 State: REJECTED Published: 2021-12-20T22:44:00 Last Updated: 2021-12-20T22:44:00 Description: No description available.
CVE ID: CVE-2019-14161 State: REJECTED Published: 2021-12-20T22:44:02 Last Updated: 2021-12-20T22:44:02 Description: No description available.
CVE ID: CVE-2019-14162 State: REJECTED Published: 2021-12-20T22:44:03 Last Updated: 2021-12-20T22:44:03 Description: No description available.
CVE ID: CVE-2019-14163 State: REJECTED Published: 2021-12-20T22:44:04 Last Updated: 2021-12-20T22:44:04 Description: No description available.
CVE ID: CVE-2019-14164 State: REJECTED Published: 2021-12-20T22:44:05 Last Updated: 2021-12-20T22:44:05 Description: No description available.
CVE ID: CVE-2019-14165 State: REJECTED Published: 2021-12-20T22:44:05 Last Updated: 2021-12-20T22:44:05 Description: No description available.
CVE ID: CVE-2019-14166 State: REJECTED Published: 2021-12-20T22:44:06 Last Updated: 2021-12-20T22:44:06 Description: No description available.
CVE ID: CVE-2019-14167 State: REJECTED Published: 2021-12-20T22:44:07 Last Updated: 2021-12-20T22:44:07 Description: No description available.
CVE ID: CVE-2019-14168 State: REJECTED Published: 2021-12-20T22:44:08 Last Updated: 2021-12-20T22:44:08 Description: No description available.
CVE ID: CVE-2019-14169 State: REJECTED Published: 2021-12-20T22:44:08 Last Updated: 2021-12-20T22:44:08 Description: No description available.
CVE ID: CVE-2019-14170 State: REJECTED Published: 2021-12-20T22:44:09 Last Updated: 2021-12-20T22:44:09 Description: No description available.
CVE ID: CVE-2019-14171 State: REJECTED Published: 2021-12-20T22:44:10 Last Updated: 2021-12-20T22:44:10 Description: No description available.
CVE ID: CVE-2019-14172 State: REJECTED Published: 2021-12-20T22:44:11 Last Updated: 2021-12-20T22:44:11 Description: No description available.
CVE ID: CVE-2019-14173 State: REJECTED Published: 2021-12-20T22:44:11 Last Updated: 2021-12-20T22:44:11 Description: No description available.
CVE ID: CVE-2019-14174 State: REJECTED Published: 2021-12-20T22:44:12 Last Updated: 2021-12-20T22:44:12 Description: No description available.
CVE ID: CVE-2019-14175 State: REJECTED Published: 2021-12-20T22:44:13 Last Updated: 2021-12-20T22:44:13 Description: No description available.
CVE ID: CVE-2019-14176 State: REJECTED Published: 2021-12-20T22:44:13 Last Updated: 2021-12-20T22:44:13 Description: No description available.
CVE ID: CVE-2019-14177 State: REJECTED Published: 2021-12-20T22:44:14 Last Updated: 2021-12-20T22:44:14 Description: No description available.
CVE ID: CVE-2019-14178 State: REJECTED Published: 2021-12-20T22:44:15 Last Updated: 2021-12-20T22:44:15 Description: No description available.
CVE ID: CVE-2019-14179 State: REJECTED Published: 2021-12-20T22:44:16 Last Updated: 2021-12-20T22:44:16 Description: No description available.
CVE ID: CVE-2019-14180 State: REJECTED Published: 2021-12-20T22:44:16 Last Updated: 2021-12-20T22:44:16 Description: No description available.
CVE ID: CVE-2019-14181 State: REJECTED Published: 2021-12-20T22:44:17 Last Updated: 2021-12-20T22:44:17 Description: No description available.
CVE ID: CVE-2019-14182 State: REJECTED Published: 2021-12-20T22:44:18 Last Updated: 2021-12-20T22:44:18 Description: No description available.
CVE ID: CVE-2019-14183 State: REJECTED Published: 2021-12-20T22:44:19 Last Updated: 2021-12-20T22:44:19 Description: No description available.
CVE ID: CVE-2019-14184 State: REJECTED Published: 2021-12-20T22:44:19 Last Updated: 2021-12-20T22:44:19 Description: No description available.
CVE ID: CVE-2019-14185 State: REJECTED Published: 2021-12-20T22:44:20 Last Updated: 2021-12-20T22:44:20 Description: No description available.
CVE ID: CVE-2019-14186 State: REJECTED Published: 2021-12-20T22:44:21 Last Updated: 2021-12-20T22:44:21 Description: No description available.
CVE ID: CVE-2019-14187 State: REJECTED Published: 2021-12-20T22:44:22 Last Updated: 2021-12-20T22:44:22 Description: No description available.
CVE ID: CVE-2019-14188 State: REJECTED Published: 2021-12-20T22:44:22 Last Updated: 2021-12-20T22:44:22 Description: No description available.
CVE ID: CVE-2019-14189 State: REJECTED Published: 2021-12-20T22:44:23 Last Updated: 2021-12-20T22:44:23 Description: No description available.
CVE ID: CVE-2019-14190 State: REJECTED Published: 2021-12-20T22:44:24 Last Updated: 2021-12-20T22:44:24 Description: No description available.
CVE ID: CVE-2019-14191 State: REJECTED Published: 2021-12-20T22:44:24 Last Updated: 2021-12-20T22:44:24 Description: No description available.
CVE ID: CVE-2019-14192 State: PUBLISHED Published: 2019-07-31T12:18:53 Last Updated: 2024-08-05T00:12:43.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_input_packet call. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/u-boot/u-boot - https://blog.semmle.com/uboot-rce-nfs-vulnerability/
CVE ID: CVE-2019-14193 State: PUBLISHED Published: 2019-07-31T12:35:18 Last Updated: 2024-08-05T00:12:42.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated length at nfs_readlink_reply, in the "if" block after calculating the new path length. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/u-boot/u-boot - https://blog.semmle.com/uboot-rce-nfs-vulnerability/
CVE ID: CVE-2019-14194 State: PUBLISHED Published: 2019-07-31T12:22:19 Last Updated: 2024-08-05T00:12:43.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv2 case. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/u-boot/u-boot - https://blog.semmle.com/uboot-rce-nfs-vulnerability/
CVE ID: CVE-2019-14195 State: PUBLISHED Published: 2019-07-31T12:23:58 Last Updated: 2024-08-05T00:12:42.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated length at nfs_readlink_reply in the "else" block after calculating the new path length. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/u-boot/u-boot - https://blog.semmle.com/uboot-rce-nfs-vulnerability/
CVE ID: CVE-2019-14196 State: PUBLISHED Published: 2019-07-31T12:30:00.000Z Last Updated: 2025-11-03T19:25:25.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/u-boot/u-boot - https://blog.semmle.com/uboot-rce-nfs-vulnerability/
CVE ID: CVE-2019-14197 State: PUBLISHED Published: 2019-07-31T12:28:53 Last Updated: 2024-08-05T00:12:42.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Das U-Boot through 2019.07. There is a read of out-of-bounds data at nfs_read_reply. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/u-boot/u-boot - https://blog.semmle.com/uboot-rce-nfs-vulnerability/
CVE ID: CVE-2019-14198 State: PUBLISHED Published: 2019-07-31T12:27:36 Last Updated: 2024-08-05T00:12:43.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv3 case. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/u-boot/u-boot - https://blog.semmle.com/uboot-rce-nfs-vulnerability/
CVE ID: CVE-2019-14199 State: PUBLISHED Published: 2019-07-31T12:31:09 Last Updated: 2024-08-05T00:12:42.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an *udp_packet_handler call. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/u-boot/u-boot - https://blog.semmle.com/uboot-rce-nfs-vulnerability/