Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-9067 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-17T01:26:32.296Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Information Exposure in TrustZone Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a potential compiler optimization of memset() is addressed. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - http://www.securityfocus.com/bid/99467
CVE ID: CVE-2015-9068 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-16T16:22:43.305Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Improper Input Validation in TrustZone Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a mink syscall is not properly validated. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - http://www.securityfocus.com/bid/99467
CVE ID: CVE-2015-9069 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-16T20:26:26.277Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Detection of Error Condition Without Action in TrustZone Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, the Secure File System can become corrupted. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - http://www.securityfocus.com/bid/99467
CVE ID: CVE-2015-9070 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-17T03:42:39.127Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Buffer Over-read in TrustZone Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in a TrustZone syscall. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - http://www.securityfocus.com/bid/99467
CVE ID: CVE-2015-9071 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-16T22:40:49.985Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Buffer Over-read in TrustZone Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in a TrustZone syscall. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - http://www.securityfocus.com/bid/99467
CVE ID: CVE-2015-9072 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-16T18:48:55.111Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Untrusted Pointer Dereference in TrustZone Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, an untrusted pointer dereference can occur in a TrustZone syscall. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - http://www.securityfocus.com/bid/99467
CVE ID: CVE-2015-9073 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-16T22:41:24.421Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Untrusted Pointer Dereference in TrustZone Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, an untrusted pointer dereference can occur in a TrustZone syscall. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - http://www.securityfocus.com/bid/99467
CVE ID: CVE-2015-9074 State: REJECTED Published: 2021-11-23T19:58:20 Last Updated: 2021-11-23T19:58:20 Description: No description available.
CVE ID: CVE-2015-9075 State: REJECTED Published: 2021-11-23T19:58:21 Last Updated: 2021-11-23T19:58:21 Description: No description available.
CVE ID: CVE-2015-9076 State: REJECTED Published: 2021-11-23T19:58:21 Last Updated: 2021-11-23T19:58:21 Description: No description available.
CVE ID: CVE-2015-9077 State: REJECTED Published: 2021-11-23T19:58:22 Last Updated: 2021-11-23T19:58:22 Description: No description available.
CVE ID: CVE-2015-9078 State: REJECTED Published: 2021-11-23T19:58:23 Last Updated: 2021-11-23T19:58:23 Description: No description available.
CVE ID: CVE-2015-9079 State: REJECTED Published: 2021-11-23T19:58:24 Last Updated: 2021-11-23T19:58:24 Description: No description available.
CVE ID: CVE-2015-9080 State: REJECTED Published: 2021-11-23T19:58:24 Last Updated: 2021-11-23T19:58:24 Description: No description available.
CVE ID: CVE-2015-9081 State: REJECTED Published: 2021-11-23T19:58:25 Last Updated: 2021-11-23T19:58:25 Description: No description available.
CVE ID: CVE-2015-9082 State: REJECTED Published: 2021-11-23T19:58:26 Last Updated: 2021-11-23T19:58:26 Description: No description available.
CVE ID: CVE-2015-9083 State: REJECTED Published: 2021-11-23T19:58:27 Last Updated: 2021-11-23T19:58:27 Description: No description available.
CVE ID: CVE-2015-9084 State: REJECTED Published: 2021-11-23T19:58:27 Last Updated: 2021-11-23T19:58:27 Description: No description available.
CVE ID: CVE-2015-9085 State: REJECTED Published: 2021-11-23T19:58:28 Last Updated: 2021-11-23T19:58:28 Description: No description available.
CVE ID: CVE-2015-9086 State: REJECTED Published: 2021-11-23T19:58:29 Last Updated: 2021-11-23T19:58:29 Description: No description available.
CVE ID: CVE-2015-9087 State: REJECTED Published: 2021-11-23T19:58:29 Last Updated: 2021-11-23T19:58:29 Description: No description available.
CVE ID: CVE-2015-9088 State: REJECTED Published: 2021-11-23T19:58:30 Last Updated: 2021-11-23T19:58:30 Description: No description available.
CVE ID: CVE-2015-9089 State: REJECTED Published: 2021-11-23T19:58:31 Last Updated: 2021-11-23T19:58:31 Description: No description available.
CVE ID: CVE-2015-9090 State: REJECTED Published: 2021-11-23T19:58:32 Last Updated: 2021-11-23T19:58:32 Description: No description available.
CVE ID: CVE-2015-9091 State: REJECTED Published: 2021-11-23T19:58:32 Last Updated: 2021-11-23T19:58:32 Description: No description available.
CVE ID: CVE-2015-9092 State: REJECTED Published: 2021-11-23T19:58:33 Last Updated: 2021-11-23T19:58:33 Description: No description available.
CVE ID: CVE-2015-9093 State: REJECTED Published: 2021-11-23T19:58:34 Last Updated: 2021-11-23T19:58:34 Description: No description available.
CVE ID: CVE-2015-9094 State: REJECTED Published: 2021-11-23T19:58:34 Last Updated: 2021-11-23T19:58:34 Description: No description available.
CVE ID: CVE-2015-9095 State: REJECTED Published: 2021-11-23T19:58:35 Last Updated: 2021-11-23T19:58:35 Description: No description available.
CVE ID: CVE-2015-9096 State: PUBLISHED Published: 2017-06-12T20:00:00 Last Updated: 2024-08-06T08:36:31.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: Net::SMTP in Ruby before 2.4.0 is vulnerable to SMTP command injection via CRLF sequences in a RCPT TO or MAIL FROM command, as demonstrated by CRLF sequences immediately before and after a DATA substring. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2017/dsa-3966 - https://hackerone.com/reports/137631 - https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html - https://github.com/rubysec/ruby-advisory-db/issues/215 - https://github.com/ruby/ruby/commit/0827a7e52ba3
sg00012.html - https://github.com/rubysec/ruby-advisory-db/issues/215 - https://github.com/ruby/ruby/commit/0827a7e52ba3d957a634b063bf5a391239b9ffee - http://www.mbsd.jp/Whitepaper/smtpi.pdf
CVE ID: CVE-2015-9097 State: PUBLISHED Published: 2017-06-12T20:00:00Z Last Updated: 2024-09-17T03:28:30.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mail gem before 2.5.5 for Ruby (aka A Really Ruby Mail Library) is vulnerable to SMTP command injection via CRLF sequences in a RCPT TO or MAIL FROM command, as demonstrated by CRLF sequences immediately before and after a DATA substring. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mikel/mail/pull/1097 - https://hackerone.com/reports/137631 - https://github.com/mikel/mail/commit/72befdc4dab3e6e288ce226a7da2aa474cf5be83 - http://openwall.com/lists/oss-security/2015/12/11/3 - https://
el/mail/commit/72befdc4dab3e6e288ce226a7da2aa474cf5be83 - http://openwall.com/lists/oss-security/2015/12/11/3 - https://rubysec.com/advisories/mail-OSVDB-131677 - https://github.com/rubysec/ruby-advisory-db/issues/215 - http://www.mbsd.jp/Whitepaper/smtpi.pdf
CVE ID: CVE-2015-9098 State: PUBLISHED Published: 2017-06-22T19:00:00 Last Updated: 2024-08-06T08:36:31.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Redgate SQL Monitor before 3.10 and 4.x before 4.2, a remote attacker can gain unauthenticated access to the Base Monitor, resulting in the ability to execute arbitrary SQL commands on any monitored Microsoft SQL Server machines. If the Base Monitor is connecting to these machines using an account with SQL admin privileges, then code execution on the operating system can result in full system compromise (if Microsoft SQL Server is running with local administrator privileges). Additional Analyst Notes: - CVE Program Containe
f Microsoft SQL Server is running with local administrator privileges). Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42444/ - http://www.red-gate.com/products/dba/sql-monitor/entrypage/security-vulnerability
CVE ID: CVE-2015-9099 State: PUBLISHED Published: 2017-06-25T19:00:00 Last Updated: 2024-08-06T08:36:31.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: The lame_init_params function in lame.c in libmp3lame.a in LAME 3.99.5 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted audio file with a negative sample rate. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775959 - http://www.securityfocus.com/bid/99279
CVE ID: CVE-2015-9100 State: PUBLISHED Published: 2017-06-25T19:00:00 Last Updated: 2024-08-06T08:36:31.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fill_buffer_resample function in util.c in libmp3lame.a in LAME 3.99.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted audio file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99278 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=777160
CVE ID: CVE-2015-9101 State: PUBLISHED Published: 2017-06-25T19:00:00 Last Updated: 2024-08-06T08:36:31.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fill_buffer_resample function in util.c in libmp3lame.a in LAME 3.98.4, 3.98.2, 3.98, 3.99, 3.99.1, 3.99.2, 3.99.3, 3.99.4 and 3.99.5 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted audio file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99269 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=777161 - https://blogs.gentoo.org/ago/2017/06/17/lame-heap-based-buffer-overflow-in-fill_buffer_resample-ut
port.cgi?bug=777161 - https://blogs.gentoo.org/ago/2017/06/17/lame-heap-based-buffer-overflow-in-fill_buffer_resample-util-c/ - https://github.com/Hack-Me/Pocs_for_Multi_Versions/tree/main/CVE-2015-9101
CVE ID: CVE-2015-9102 State: PUBLISHED Published: 2017-06-30T13:00:00Z Last Updated: 2024-09-17T03:14:38.172Z Vendors: Synology Products: Photo Station Problem Types: CWE-79 Description: Multiple cross-site scripting (XSS) vulnerabilities in Synology Photo Station 6.0 before 6.0-2638 and 6.3 before 6.3-2962 allow remote authenticated attackers to inject arbitrary web script or HTML via the (1) album name, (2) file name of uploaded photos, (3) description of photos, or (4) tag of the photos. Additional Analyst Notes: - CVE Program Container: References: - http://www.fortiguard.com/zeroday/FG-VD-15-104 - http://www.fortiguard.com/zeroday/FG-VD-15-109 - http://www.fortiguard.com/zeroday/FG-VD-1
rd.com/zeroday/FG-VD-15-104 - http://www.fortiguard.com/zeroday/FG-VD-15-109 - http://www.fortiguard.com/zeroday/FG-VD-15-112 - https://www.synology.com/en-global/support/security/Photo_Station_6_3_2962 - http://www.fortiguard.com/zeroday/FG-VD-15-103
CVE ID: CVE-2015-9103 State: PUBLISHED Published: 2017-06-30T13:00:00Z Last Updated: 2024-09-17T03:07:47.909Z Vendors: Synology Products: Note Station Problem Types: CWE-79 Description: Multiple cross-site scripting (XSS) vulnerabilities in Synology Note Station 1.1-0212 and earlier allow remote authenticated attackers to inject arbitrary web script or HTML via the (1) note title or (2) file name of attachments. Additional Analyst Notes: - CVE Program Container: References: - http://www.fortiguard.com/zeroday/FG-VD-15-110 - http://www.fortiguard.com/zeroday/FG-VD-15-111 - https://www.synology.com/en-global/support/security/Note_Station_1_1_0214
CVE ID: CVE-2015-9104 State: PUBLISHED Published: 2017-06-30T13:00:00Z Last Updated: 2024-09-17T02:37:13.477Z Vendors: Synology Products: Audio Station Problem Types: CWE-79 Description: Cross-site scripting (XSS) vulnerabilities in Synology Audio Station 5.1 before 5.1-2550 and 5.4 before 5.4-2857 allows remote authenticated attackers to inject arbitrary web script or HTML via the album title. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/en-global/support/security/Audio_Station_5_4_2857 - http://www.fortiguard.com/zeroday/FG-VD-15-106
CVE ID: CVE-2015-9105 State: PUBLISHED Published: 2017-06-30T13:00:00Z Last Updated: 2024-09-16T18:55:51.751Z Vendors: Synology Products: Video Station Problem Types: CWE-79 Description: Multiple cross-site scripting (XSS) vulnerabilities in Synology Video Station 1.2 before 1.2-0455, 1.5 before 1.5-0772, and 1.6 before 1.6-0847 allow remote authenticated attackers to inject arbitrary web script or HTML via the (1) file name or (2) collection name of videos. Additional Analyst Notes: - CVE Program Container: References: - http://www.fortiguard.com/zeroday/FG-VD-15-107 - https://www.synology.com/en-global/support/security/Video_station_1_5_0772 - http://www.fortiguard.com/zeroday/FG-VD-15-108
CVE ID: CVE-2015-9107 State: PUBLISHED Published: 2017-08-04T00:00:00 Last Updated: 2024-08-06T08:36:31.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine OpManager 11 through 12.2 uses a custom encryption algorithm to protect the credential used to access the monitored devices. The implemented algorithm doesn't use a per-system key or even a salt; therefore, it's possible to create a universal decryptor. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/theguly/DecryptOpManager
CVE ID: CVE-2015-9108 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T19:04:15.793Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile Problem Types: Untrusted pointer dereference in QSEE syscall Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, no address argument validation performed on calls to a QSEE syscall may lead to arbitrary read/write or NULL Pointer exception when calling a downstream function. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.
calling a downstream function. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9109 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T23:51:12.865Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile Problem Types: Potential Untrusted pointer dereference in QTEE Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, lack of address argument validation inqsee_fuse_write could lead to untrusted pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.co
E Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9110 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T16:24:12.552Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile Problem Types: Untrusted pointer dereference in qsee_get_secure_state syscall Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, no address argument validation is performed on calls to the qsee_get_secure_state syscall. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/
Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9111 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T21:03:39.668Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile Problem Types: Untrusted Pointer Dereference in TrustZone Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, in a QTEE syscall handler, an untrusted pointer dereference can occur. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9112 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T02:02:48.451Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile Problem Types: Untrusted Pointer Dereference in Core Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, SD 400, SD 800, SD 820, and SD 820A, lack of input validation in QSEE can cause potential buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9113 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T18:34:01.816Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile Problem Types: Untrusted pointer dereference in QSEE syscall Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 810, SD 820, and SD 820A, untrusted pointer dereference in QSEE Syscall without proper validation can lead to access of blacklisted memory. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http:/
l Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9114 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T01:15:30.520Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile Problem Types: Potential Untrusted pointer dereference in QTEE Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, lack of address argument validation in qsee_query_counter syscall could lead to untrusted pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus
CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9115 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T19:01:05.845Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile Problem Types: Untrusted Pointer Dereference in Core. Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, and SD 820A, no address argument validation is performed on calls to the qsee_prng_getdata syscall. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.
lyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9116 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T16:13:16.163Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile Problem Types: Untrusted Pointer Dereference in TrustZone Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 810, SD 820, and SD 820A, in a QTEE syscall handler, an untrusted pointer dereference can occur. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9117 State: REJECTED Published: 2021-11-23T19:58:36 Last Updated: 2021-11-23T19:58:36 Description: No description available.
CVE ID: CVE-2015-9118 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T03:23:53.373Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Integer overflow to buffer overflow in ADSP request handler Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, SD 400, SD 410/12, SD 615/16/SD 415, SD 800, SD 808, and SD 810, in ADSP's QDI Root-PD driver, untrusted arguments from User PD may cause integer overflow resulting in buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocu
- CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9119 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T19:10:40.423Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer overread vulnerability in Core. Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SD 850, and SDX20, sensitive information may be returned to the QMI client as a response. Add
0, SD 820, SD 835, SD 845, SD 850, and SDX20, sensitive information may be returned to the QMI client as a response. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671