Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-4979. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-17-859 - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2017-10958 State: PUBLISHED Published: 2017-12-20T14:00:00 Last Updated: 2024-08-05T17:50:12.857Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the value attribute of Field objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the
ject prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-4980. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-17-860
CVE ID: CVE-2017-10959 State: PUBLISHED Published: 2017-12-20T14:00:00 Last Updated: 2024-08-05T17:57:56.736Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the setAction method of Link objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the
ject prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-4981. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-17-861
CVE ID: CVE-2017-10961 State: PUBLISHED Published: 2017-07-18T14:00:00 Last Updated: 2024-08-05T17:57:56.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: REDCap before 7.5.1 has CSRF in the deletion feature of the File Repository and File Upload components. Additional Analyst Notes: - CVE Program Container: References: - https://community.projectredcap.org/articles/13/changelog-standard-release.html - https://gist.github.com/jordanpotti/fef4f1ada404d5ba7f88ab42e93cdaae
CVE ID: CVE-2017-10962 State: PUBLISHED Published: 2017-07-18T14:00:00 Last Updated: 2024-08-05T17:57:56.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: REDCap before 7.5.1 has XSS via the query string. Additional Analyst Notes: - CVE Program Container: References: - https://community.projectredcap.org/articles/13/changelog-standard-release.html - https://gist.github.com/jordanpotti/fef4f1ada404d5ba7f88ab42e93cdaae
CVE ID: CVE-2017-10963 State: PUBLISHED Published: 2018-02-20T19:00:00 Last Updated: 2024-08-05T17:57:56.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Knox SDS IAM (Identity Access Management) and EMM (Enterprise Mobility Management) 16.11 on Samsung mobile devices, a man-in-the-middle attacker can install any application into the Knox container (without the user's knowledge) by inspecting network traffic from a Samsung server and injecting content at a certain point in the update sequence. This installed application can further leak information stored inside the Knox container to the outside world. Additional Analyst Notes: - CVE Program Container: References: - https:/
inside the Knox container to the outside world. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/e96e02/12ce905e3b724954273dd7d543a968f1 - https://www.lgsinnovations.com/lgs-innovations-discovers-samsung-mobile-product-security-vulnerability/
CVE ID: CVE-2017-10965 State: PUBLISHED Published: 2017-07-07T14:00:00 Last Updated: 2024-08-05T17:57:56.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Irssi before 1.0.4. When receiving messages with invalid time stamps, Irssi would try to dereference a NULL pointer. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2017/dsa-4016 - https://irssi.org/security/irssi_sa_2017_07.txt - https://github.com/irssi/irssi/commit/5e26325317c72a04c1610ad952974e206384d291
CVE ID: CVE-2017-10966 State: PUBLISHED Published: 2017-07-07T14:00:00 Last Updated: 2024-08-05T17:57:56.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Irssi before 1.0.4. While updating the internal nick list, Irssi could incorrectly use the GHashTable interface and free the nick while updating it. This would then result in use-after-free conditions on each access of the hash table. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2017/dsa-4016 - https://irssi.org/security/irssi_sa_2017_07.txt - https://github.com/irssi/irssi/commit/5e26325317c72a04c1610ad952974e206384d291
CVE ID: CVE-2017-10967 State: PUBLISHED Published: 2017-07-06T16:00:00 Last Updated: 2024-08-05T17:57:56.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: In FineCMS before 2017-07-06, application\core\controller\config.php allows XSS in the (1) key_name, (2) key_value, and (3) meaning parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/andrzuk/FineCMS/pull/9
CVE ID: CVE-2017-10968 State: PUBLISHED Published: 2017-07-07T11:00:00 Last Updated: 2024-08-05T17:57:56.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: In FineCMS through 2017-07-07, application\core\controller\template.php allows remote PHP code execution by placing the code after "<?php" in a route=template request. Additional Analyst Notes: - CVE Program Container: References: - http://www.yuesec.com/img/cccccve/finecms_codeexec/finecmscodeexec_2017_07_06_submit.html
CVE ID: CVE-2017-10970 State: PUBLISHED Published: 2017-07-06T11:00:00 Last Updated: 2024-08-05T17:57:56.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in link.php in Cacti 1.1.12 allows remote anonymous users to inject arbitrary web script or HTML via the id parameter, related to the die_html_input_error function in lib/html_validate.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038908 - https://github.com/Cacti/cacti/issues/838
CVE ID: CVE-2017-10971 State: PUBLISHED Published: 2017-07-06T11:00:00 Last Updated: 2024-08-05T17:57:56.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the X.Org X server before 2017-06-19, a user authenticated to an X Session could crash or execute code in the context of the X Server by exploiting a stack overflow in the endianness conversion of X Events. Additional Analyst Notes: - CVE Program Container: References: - https://cgit.freedesktop.org/xorg/xserver/commit/?id=215f894965df5fb0bb45b107d84524e700d2073c - http://www.securityfocus.com/bid/99546 - http://www.debian.org/security/2017/dsa-3905 - https://cgit.freedesktop.org/xorg/xserver/commit/?id=ba336b24052122b1364
http://www.debian.org/security/2017/dsa-3905 - https://cgit.freedesktop.org/xorg/xserver/commit/?id=ba336b24052122b136486961c82deac76bbde455 - https://bugzilla.suse.com/show_bug.cgi?id=1035283 - https://cgit.freedesktop.org/xorg/xserver/commit/?id=8caed4df36b1f802b4992edcfd282cbeeec35d9d
CVE ID: CVE-2017-10972 State: PUBLISHED Published: 2017-07-06T11:00:00 Last Updated: 2024-08-05T17:57:56.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Uninitialized data in endianness conversion in the XEvent handling of the X.Org X Server before 2017-06-19 allowed authenticated malicious users to access potentially privileged data from the X server. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3905 - http://www.securityfocus.com/bid/99543 - https://cgit.freedesktop.org/xorg/xserver/commit/?id=05442de962d3dc624f79fc1a00eca3ffc5489ced - https://bugzilla.suse.com/show_bug.cgi?id=1035283
CVE ID: CVE-2017-10973 State: PUBLISHED Published: 2017-07-06T16:00:00 Last Updated: 2024-08-05T17:57:56.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: In FineCMS before 2017-07-06, application/lib/ajax/get_image_data.php has SSRF, related to requests for non-image files with a modified HTTP Host header. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/andrzuk/FineCMS/pull/11 - https://github.com/andrzuk/FineCMS/pull/10
CVE ID: CVE-2017-10974 State: PUBLISHED Published: 2017-07-07T11:00:00 Last Updated: 2024-08-05T17:57:57.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yaws 1.91 allows Unauthenticated Remote File Disclosure via HTTP Directory Traversal with /%5C../ to port 8080. NOTE: this CVE is only about use of an initial /%5C sequence to defeat traversal protection mechanisms; the initial /%5C sequence was apparently not discussed in earlier research on this product. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99515 - https://www.exploit-db.com/exploits/42303/ - http://hyp3rlinx.altervista.org/advisories/YAWS-WEB-SERVER-v1.91-UNAUTHE
- https://www.exploit-db.com/exploits/42303/ - http://hyp3rlinx.altervista.org/advisories/YAWS-WEB-SERVER-v1.91-UNAUTHENTICATED-REMOTE-FILE-DISCLOSURE.txt
CVE ID: CVE-2017-10975 State: PUBLISHED Published: 2017-07-06T14:00:00Z Last Updated: 2024-09-16T23:01:20.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Lutim before 0.8 might allow remote attackers to inject arbitrary web script or HTML via a crafted filename that is mishandled in an upload notification and in the myfiles component, if the attacker can convince the victim to proceed with an upload despite the appearance of an XSS payload in the filename. Additional Analyst Notes: - CVE Program Container: References: - https://framagit.org/luc/lutim/issues/40
CVE ID: CVE-2017-10976 State: PUBLISHED Published: 2017-07-06T15:00:00Z Last Updated: 2024-09-16T17:23:56.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: When SWFTools 0.9.2 processes a crafted file in ttftool, it can lead to a heap-based buffer over-read in the readBlock() function in lib/ttf.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/28
CVE ID: CVE-2017-10978 State: PUBLISHED Published: 2017-07-17T16:00:00 Last Updated: 2024-08-05T17:57:56.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: An FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "Read / write overflow in make_secret()" and a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038914 - http://www.securityfocus.com/bid/99893 - https://access.redhat.com/errata/RHSA-2017:1759 - http://www.debian.org/security/2017/dsa-3930 - https://access.redhat.com/errata/RHSA-2017:2389 - http://freeradius.org/security/fuzzer-2017.html
CVE ID: CVE-2017-10979 State: PUBLISHED Published: 2017-07-17T16:00:00 Last Updated: 2024-08-05T17:57:56.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: An FR-GV-202 issue in FreeRADIUS 2.x before 2.2.10 allows "Write overflow in rad_coalesce()" - this allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038914 - https://access.redhat.com/errata/RHSA-2017:1759 - http://www.debian.org/security/2017/dsa-3930 - http://freeradius.org/security/fuzzer-2017.html - http://www.securityfocus.com/bid/99901
CVE ID: CVE-2017-10980 State: PUBLISHED Published: 2017-07-17T16:00:00 Last Updated: 2024-08-05T17:57:57.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: An FR-GV-203 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in decode_tlv()" and a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038914 - https://access.redhat.com/errata/RHSA-2017:1759 - http://www.debian.org/security/2017/dsa-3930 - http://www.securityfocus.com/bid/99905 - http://freeradius.org/security/fuzzer-2017.html
CVE ID: CVE-2017-10981 State: PUBLISHED Published: 2017-07-17T16:00:00 Last Updated: 2024-08-05T17:57:57.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: An FR-GV-204 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in fr_dhcp_decode()" and a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038914 - https://access.redhat.com/errata/RHSA-2017:1759 - http://www.debian.org/security/2017/dsa-3930 - http://freeradius.org/security/fuzzer-2017.html - http://www.securityfocus.com/bid/99898
CVE ID: CVE-2017-10982 State: PUBLISHED Published: 2017-07-17T16:00:00 Last Updated: 2024-08-05T17:57:56.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: An FR-GV-205 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Buffer over-read in fr_dhcp_decode_options()" and a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038914 - https://access.redhat.com/errata/RHSA-2017:1759 - http://www.securityfocus.com/bid/99912 - http://www.debian.org/security/2017/dsa-3930 - http://freeradius.org/security/fuzzer-2017.html
CVE ID: CVE-2017-10983 State: PUBLISHED Published: 2017-07-17T16:00:00 Last Updated: 2024-08-05T17:57:57.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: An FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "DHCP - Read overflow when decoding option 63" and a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038914 - https://access.redhat.com/errata/RHSA-2017:1759 - http://www.debian.org/security/2017/dsa-3930 - http://www.securityfocus.com/bid/99915 - https://access.redhat.com/errata/RHSA-2017:2389 - http://freeradius.org/security/fuzzer-2017.html
CVE ID: CVE-2017-10984 State: PUBLISHED Published: 2017-07-17T16:00:00 Last Updated: 2024-08-05T17:57:57.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: An FR-GV-301 issue in FreeRADIUS 3.x before 3.0.15 allows "Write overflow in data2vp_wimax()" - this allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3930 - https://access.redhat.com/errata/RHSA-2017:2389 - http://freeradius.org/security/fuzzer-2017.html - http://www.securityfocus.com/bid/99876
CVE ID: CVE-2017-10985 State: PUBLISHED Published: 2017-07-17T16:00:00 Last Updated: 2024-08-05T17:57:56.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: An FR-GV-302 issue in FreeRADIUS 3.x before 3.0.15 allows "Infinite loop and memory exhaustion with 'concat' attributes" and a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3930 - https://access.redhat.com/errata/RHSA-2017:2389 - http://www.securityfocus.com/bid/99968 - http://freeradius.org/security/fuzzer-2017.html
CVE ID: CVE-2017-10986 State: PUBLISHED Published: 2017-07-17T16:00:00 Last Updated: 2024-08-05T17:57:56.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Infinite read in dhcp_attr2vp()" and a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99971 - http://www.debian.org/security/2017/dsa-3930 - https://access.redhat.com/errata/RHSA-2017:2389 - http://freeradius.org/security/fuzzer-2017.html
CVE ID: CVE-2017-10987 State: PUBLISHED Published: 2017-07-17T16:00:00 Last Updated: 2024-08-05T17:57:56.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: An FR-GV-304 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Buffer over-read in fr_dhcp_decode_suboptions()" and a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99970 - http://www.debian.org/security/2017/dsa-3930 - https://access.redhat.com/errata/RHSA-2017:2389 - http://freeradius.org/security/fuzzer-2017.html
CVE ID: CVE-2017-10988 State: REJECTED Published: 2017-07-17T15:00:00 Last Updated: 2017-07-17T14:57:01 Description: No description available.
CVE ID: CVE-2017-10989 State: PUBLISHED Published: 2017-07-07T12:00:00 Last Updated: 2024-08-05T17:57:56.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: The getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other products, mishandles undersized RTree blobs in a crafted database, leading to a heap-based buffer over-read or possibly unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - https://support.apple.com/HT208144 - https://lists.debian.org/debian-lts-announce/2019/01/msg00009.html - https://sqlite.org/src/vpatch?from=0db
m/HT208144 - https://lists.debian.org/debian-lts-announce/2019/01/msg00009.html - https://sqlite.org/src/vpatch?from=0db20efe201736b3&to=66de6f4a9504ec26 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2405 - https://sqlite.org/src/info/66de6f4a - http://www.securitytracker.com/id/1039427 - https://bugs.launchpad.net/ubuntu/+source/sqlite3/+bug/1700937 - https://support.apple.com/HT208113 - https://support.apple.com/HT208112 - http://marc.info/?l=sqlite-users&m=149933696214713&w=2 - https://support.apple.com/HT208115 - http://www.securityfocus.com/bid/99502 - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00050.html - https://usn.ubuntu.com/4019-1/ - https://usn.ubun
/lists.opensuse.org/opensuse-security-announce/2019-05/msg00050.html - https://usn.ubuntu.com/4019-1/ - https://usn.ubuntu.com/4019-2/
CVE ID: CVE-2017-10991 State: PUBLISHED Published: 2017-07-07T14:00:00Z Last Updated: 2024-09-16T23:50:52.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WP Statistics plugin through 12.0.9 for WordPress has XSS in the rangestart and rangeend parameters on the wps_referrers_page page. Additional Analyst Notes: - CVE Program Container: References: - https://lorexxar.cn/2017/07/07/WordPress%20WP%20Statistics%20authenticated%20xss%20Vulnerability%28WP%20Statistics%20-=12.0.9%29/
CVE ID: CVE-2017-10992 State: PUBLISHED Published: 2020-03-10T12:51:50 Last Updated: 2024-08-05T17:57:57.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: In HPE Storage Essentials 9.5.0.142, there is Unauthenticated Java Deserialization with remote code execution via OS commands in a request to invoker/JMXInvokerServlet, aka PSRT110461. Additional Analyst Notes: - CVE Program Container: References: - https://labs.integrity.pt/advisories/cve-2017-10992/
CVE ID: CVE-2017-10993 State: PUBLISHED Published: 2017-07-21T06:00:00 Last Updated: 2024-08-05T17:57:57.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Contao before 3.5.28 and 4.x before 4.4.1 allows remote attackers to include and execute arbitrary local PHP files via a crafted parameter in a URL, aka Directory Traversal. Additional Analyst Notes: - CVE Program Container: References: - https://contao.org/en/news/contao-3_5_28.html
CVE ID: CVE-2017-10994 State: PUBLISHED Published: 2017-07-07T16:00:00 Last Updated: 2024-08-05T17:57:57.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foxit Reader before 8.3.1 and PhantomPDF before 8.3.1 have an Arbitrary Write vulnerability, which allows remote attackers to execute arbitrary code via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99499 - http://www.securitytracker.com/id/1039113 - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2017-10995 State: PUBLISHED Published: 2017-07-07T16:00:00 Last Updated: 2024-08-05T17:57:57.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mng_get_long function in coders/png.c in ImageMagick 7.0.6-0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted MNG image. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/538 - https://usn.ubuntu.com/3681-1/ - http://www.securityfocus.com/bid/99496 - https://www.debian.org/security/2018/dsa-4204
CVE ID: CVE-2017-10996 State: PUBLISHED Published: 2017-09-21T15:00:00 Last Updated: 2024-08-05T17:57:57.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, out of bounds access is possible in c_show(), due to compat_hwcap_str[] not being NULL-terminated. This error is not fatal, however the device might crash/reboot with memory violation/out of bounds access. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-09-01 - http://www.securityfocus.com/bid/100658
CVE ID: CVE-2017-10997 State: PUBLISHED Published: 2017-09-21T15:00:00 Last Updated: 2024-08-05T17:57:57.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, using a debugfs node, a write to a PCIe register can cause corruption of kernel memory. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-09-01 - http://www.securityfocus.com/bid/100658
CVE ID: CVE-2017-10998 State: PUBLISHED Published: 2017-09-21T15:00:00 Last Updated: 2024-08-05T17:57:56.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, in audio_aio_ion_lookup_vaddr, the buffer length, which is user input, ends up being used to validate if the buffer is fully within the valid region. If the buffer length is large enough then the address + length operation could overflow and produce a result far below the valid region. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-09-01 - http://www.securityfocus.com/bid/100658
CVE ID: CVE-2017-10999 State: PUBLISHED Published: 2017-09-21T15:00:00 Last Updated: 2024-08-05T17:57:56.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, concurrent calls into ioctl RMNET_IOCTL_ADD_MUX_CHANNEL in ipa wan driver may lead to memory corruption due to missing locks. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-09-01 - http://www.securityfocus.com/bid/100658
CVE ID: CVE-2017-11000 State: PUBLISHED Published: 2017-09-21T15:00:00 Last Updated: 2024-08-05T17:57:57.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, in an ISP Camera kernel driver function, an incorrect bounds check may potentially lead to an out-of-bounds write. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-09-01 - http://www.securityfocus.com/bid/100658