Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-5839 State: PUBLISHED Published: 2019-02-25T23:00:00 Last Updated: 2024-08-05T05:47:55.932Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile Problem Types: Improper Access Control in Core Description: Improperly configured memory protection allows read/write access to modem image from HLOS kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in versions MDM9150, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8996AU, QCS605, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8
50, MDM9655, MSM8996AU, QCS605, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX20, SXR1130. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securityfocus.com/bid/106845
CVE ID: CVE-2018-5840 State: PUBLISHED Published: 2018-06-06T21:00:00Z Last Updated: 2024-09-16T21:08:15.391Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Copy without Checking Size of Input in Display Description: Buffer Copy without Checking Size of Input can occur during the DRM SDE driver initialization sequence in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2
CVE ID: CVE-2018-5841 State: PUBLISHED Published: 2018-06-06T21:00:00Z Last Updated: 2024-09-16T19:35:26.609Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Improper Input Validation in Kernel Description: dcc_curr_list is initialized with a default invalid value that is expected to be programmed by the user through a sysfs node which could lead to an invalid access in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2
CVE ID: CVE-2018-5842 State: PUBLISHED Published: 2018-06-12T20:00:00Z Last Updated: 2024-09-17T03:02:43.363Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Copy without Checking Size of Input in WLAN Description: An arbitrary address write can occur if a compromised WLAN firmware sends incorrect data to WLAN driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2
CVE ID: CVE-2018-5843 State: PUBLISHED Published: 2018-06-12T20:00:00Z Last Updated: 2024-09-17T03:12:41.205Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Improper Restriction of Operations within the Bounds of a memory Buffer in WLAN Description: In the function wma_pdev_div_info_evt_handler() in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel, there is no upper bound check on the value event->num_chains_valid received from firmware which can lead to a buffer overwrite of the fixed size chain_rssi_result structure. Additional Analyst Notes: - CVE Program Container: References: - http
ite of the fixed size chain_rssi_result structure. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2
CVE ID: CVE-2018-5844 State: PUBLISHED Published: 2018-06-12T20:00:00Z Last Updated: 2024-09-17T00:52:20.870Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Use After Free in Video Description: In the video driver function set_output_buffers(), binfo can be accessed after being freed in a failure scenario in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2
CVE ID: CVE-2018-5845 State: PUBLISHED Published: 2018-06-06T21:00:00Z Last Updated: 2024-09-16T20:37:01.272Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Use After Free in Display Driver Description: A race condition in drm_atomic_nonblocking_commit() in the display driver can potentially lead to a Use After Free scenario in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2
CVE ID: CVE-2018-5846 State: PUBLISHED Published: 2018-06-06T21:00:00Z Last Updated: 2024-09-17T01:06:45.549Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Use After Free in IPA Description: A Use After Free condition can occur in the IPA driver whenever the IPA IOCTLs IPA_IOC_NOTIFY_WAN_UPSTREAM_ROUTE_ADD/IPA_IOC_NOTIFY_WAN_UPSTREAM_ROUTE_DEL/IPA_IOC_NOTIFY_WAN_EMBMS_CONNECTED are called in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-securi
CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2
CVE ID: CVE-2018-5847 State: PUBLISHED Published: 2018-06-12T20:00:00Z Last Updated: 2024-09-16T22:46:06.006Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Use After Free in Display Description: Early or late retirement of rotation requests can result in a Use After Free condition in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2
CVE ID: CVE-2018-5848 State: PUBLISHED Published: 2018-06-12T20:00:00Z Last Updated: 2024-09-17T00:31:46.093Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Copy without Checking Size of Input in WIGIG Description: In the function wmi_set_ie(), the length validation code does not handle unsigned integer overflow properly. As a result, a large value of the 'ie_len' argument can cause a buffer overflow in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:3083 - https://access.
Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:3083 - https://access.redhat.com/errata/RHSA-2018:2948 - https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2 - https://access.redhat.com/errata/RHSA-2018:3096 - https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html - https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html - https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html
CVE ID: CVE-2018-5849 State: PUBLISHED Published: 2018-06-12T20:00:00Z Last Updated: 2024-09-16T20:43:15.057Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Use After Free in QTEE Description: Due to a race condition in the QTEECOM driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel, when more than one HLOS client loads the same TA, a Use After Free condition can occur. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2
CVE ID: CVE-2018-5850 State: PUBLISHED Published: 2018-06-06T21:00:00Z Last Updated: 2024-09-16T18:08:46.216Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Improper Input Validation in WLAN Description: In the function csr_update_fils_params_rso(), insufficient validation on a key length can result in an integer underflow leading to a buffer overflow in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2
CVE ID: CVE-2018-5851 State: PUBLISHED Published: 2018-06-12T20:00:00Z Last Updated: 2024-09-16T17:48:22.345Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Improper Validation of Array Index in WLAN Description: Buffer over flow can occur while processing a HTT_T2H_MSG_TYPE_TX_COMPL_IND message with an out-of-range num_msdus value in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2
CVE ID: CVE-2018-5852 State: PUBLISHED Published: 2024-11-26T13:56:25.527Z Last Updated: 2024-11-26T15:00:48.248Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4_nat' Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html
CVE ID: CVE-2018-5853 State: PUBLISHED Published: 2018-07-06T19:00:00Z Last Updated: 2024-09-16T16:43:00.765Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Use After Free in WLAN Description: A race condition exists in a driver in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-05-05 potentially leading to a use-after-free condition. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin - https://source.android.com/security/bulletin/pixel/2018-05-0
lletin/2018/07/02/july-2018-code-aurora-security-bulletin - https://source.android.com/security/bulletin/pixel/2018-05-01 - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=f64e9815f0488a7b37e4e1395a1457d1dfefda66
CVE ID: CVE-2018-5854 State: PUBLISHED Published: 2018-06-15T15:00:00Z Last Updated: 2024-09-16T19:00:05.338Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Stack-based Buffer Overflow in Boot Description: A stack-based buffer overflow can occur in fastboot from all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/06/04/june-2018-code-aurora-security-bulletin
CVE ID: CVE-2018-5855 State: PUBLISHED Published: 2018-07-06T19:00:00Z Last Updated: 2024-09-17T04:04:54.658Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Over-read in WLAN Description: While padding or shrinking a nested wmi packet in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, a buffer over-read can potentially occur. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/platform/vendor/q
ty-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qca-wifi-host-cmn/commit/?id=61f4a467177afc23bdc1944ec61e52bed156c104 - https://source.android.com/security/bulletin/2018-07-01 - http://www.securityfocus.com/bid/107770
CVE ID: CVE-2018-5856 State: PUBLISHED Published: 2018-11-27T18:00:00 Last Updated: 2024-08-05T05:47:55.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, due to a race condition, a Use After Free condition can occur in Audio. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/platform/vendor/opensource/audio-kernel/commit/?id=7ab92dd2952d59f3c15c856effe94bba1858e3ff - https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=3b666735fcc49f5cd3a63440fdc0667ae9316f17 - https://www.codeaurora.org/security-bulletin/201
a/kernel/msm-3.18/commit/?id=3b666735fcc49f5cd3a63440fdc0667ae9316f17 - https://www.codeaurora.org/security-bulletin/2018/11/05/november-2018-code-aurora-forum-security-bulletin
CVE ID: CVE-2018-5857 State: PUBLISHED Published: 2018-06-15T15:00:00Z Last Updated: 2024-09-16T16:13:32.000Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Use After Free in Audio Description: In the WCD CPE codec, a Use After Free condition can occur in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/06/04/june-2018-code-aurora-security-bulletin
CVE ID: CVE-2018-5858 State: PUBLISHED Published: 2018-07-06T19:00:00Z Last Updated: 2024-09-17T02:22:07.802Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Copy without Checking Size of Input in Audio Description: In the audio debugfs in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, out of bounds access can occur. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id
in/2018/07/02/july-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=cd1f0cdd4715e8eae4066bd34df2eef4cf94bd7f - https://source.android.com/security/bulletin/pixel/2018-07-01 - https://source.codeaurora.org/quic/la/platform/vendor/opensource/audio-kernel/commit/?id=78193fa06b267c1d6582e5e6f9fb779cf067015e
CVE ID: CVE-2018-5859 State: PUBLISHED Published: 2018-07-06T19:00:00Z Last Updated: 2024-09-16T18:39:59.410Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Use After Free in Display Description: Due to a race condition in the MDSS MDP driver in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, a Use After Free condition can occur. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/kernel/msm-3.18/comm
bulletin/2018/07/02/july-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=36400a7fa3753028a3bf89a9cdb28c5e25693c59 - https://source.android.com/security/bulletin/pixel/2018-07-01
CVE ID: CVE-2018-5860 State: PUBLISHED Published: 2018-06-15T20:00:00Z Last Updated: 2024-09-16T23:36:35.589Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Use of Uninitialized Variable in Display Description: In the MDSS driver in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel, a data structure may be used without being initialized correctly. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/06/04/june-2018-code-aurora-security-bulletin
CVE ID: CVE-2018-5861 State: PUBLISHED Published: 2018-11-27T18:00:00 Last Updated: 2024-08-05T05:47:55.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, existing checks in place on partition size are incomplete and can lead to heap overwrite vulnerabilities while loading a secure application from the boot loader. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=114a392e29bc900c0fe15cc1f3e9ba369cd03244 - https://www.codeaurora.org/security-bulletin/2018/11/05/november-2018-code-aurora-forum-security
15cc1f3e9ba369cd03244 - https://www.codeaurora.org/security-bulletin/2018/11/05/november-2018-code-aurora-forum-security-bulletin
CVE ID: CVE-2018-5862 State: PUBLISHED Published: 2018-07-06T19:00:00Z Last Updated: 2024-09-17T01:21:33.137Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Incorrect Calculation of Buffer Size in WLAN Description: In __wlan_hdd_cfg80211_vendor_scan() in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, when SCAN_SSIDS and QCA_WLAN_VENDOR_ATTR_SCAN_FREQUENCIES are parsed, a buffer overwrite can potentially occur. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-au
Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=41ad3f76792e08a84962a0b8e9cfb1ba6c4c9ca6 - https://source.android.com/security/bulletin/pixel/2018-07-01
CVE ID: CVE-2018-5863 State: PUBLISHED Published: 2018-06-15T20:00:00Z Last Updated: 2024-09-16T20:32:53.491Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Copy without Checking Size of Input in WLAN Description: If userspace provides a too-large WPA RSN IE length in wlan_hdd_cfg80211_set_ie(), a buffer overflow occurs in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/06/04/june-2018-code-aurora-security-bulletin
CVE ID: CVE-2018-5864 State: PUBLISHED Published: 2018-07-06T19:00:00Z Last Updated: 2024-09-16T20:21:24.585Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Description: While processing a WMI_APFIND event in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, a buffer over-read and information leak can potentially occur. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-b
rogram Container: References: - https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin - https://source.android.com/security/bulletin/pixel/2018-07-01 - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=9c042f7827e0d21e5b93c04b418bca0230de91dc
CVE ID: CVE-2018-5865 State: PUBLISHED Published: 2018-07-06T19:00:00Z Last Updated: 2024-09-16T18:55:45.291Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Integer Underflow in WLAN Description: While processing a debug log event from firmware in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, an integer underflow and/or buffer over-read can occur. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/
aurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=8fb4202e3bb8cfbbb9f9f0e8695891c9971cfcc2 - https://source.android.com/security/bulletin/pixel/2018-07-01
CVE ID: CVE-2018-5866 State: PUBLISHED Published: 2018-10-26T13:00:00 Last Updated: 2024-08-05T05:47:55.889Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Untrusted Pointer Dereference in TrustZone Description: While processing logs, data is copied into a buffer pointed to by an untrusted pointer in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 835, SD 845, SD 850, SDA660. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2018-5867 State: PUBLISHED Published: 2019-01-18T22:00:00 Last Updated: 2024-08-05T05:47:55.936Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer Copy without Checking Size of Input in TrustZone Description: Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDM439, SDM63
25, SD 632, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDM439, SDM630, SDM660, SDX24, Snapdragon_High_Med_2016, SXR1130 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securityfocus.com/bid/106128
CVE ID: CVE-2018-5868 State: PUBLISHED Published: 2019-01-18T22:00:00 Last Updated: 2024-08-05T05:47:55.912Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile Problem Types: Buffer Copy without Checking Size of Input in TrustZone. Description: Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile and snapdragon mobile in versions MSM8996AU, SD 425, SD 430, SD 450, SD 625, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX24, SXR1130 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securityfocus.com/bid/106128