Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-5869 State: PUBLISHED Published: 2019-01-18T22:00:00 Last Updated: 2024-08-05T05:47:55.922Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile,Snapdragon Wear Problem Types: Improper Input Validation in TrustZone Description: Improper input validation in the QTEE keymaster app can lead to invalid memory access in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 800, SD 810 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securityfocus.com/bid/106128
CVE ID: CVE-2018-5870 State: PUBLISHED Published: 2018-11-28T15:00:00 Last Updated: 2024-08-05T05:47:55.923Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Untrusted Pointer Dereference in TrustZone Description: While loading a service image, an untrusted pointer dereference can occur in Snapdragon Mobile in versions SD 835, SDA660, SDX24. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securityfocus.com/bid/105838
CVE ID: CVE-2018-5871 State: PUBLISHED Published: 2018-09-20T13:00:00 Last Updated: 2024-08-05T05:47:55.965Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Cryptographic Issues in WLAN Description: In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710, Snapdragon_High_Med_2016, MAC address randomization performed during probe requests (for privacy reasons) is not done properly due to a
Med_2016, MAC address randomization performed during probe requests (for privacy reasons) is not done properly due to a flawed RNG which produces repeating output much earlier than expected. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-09-01#qualcomm-closed-source-components - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2018-5872 State: PUBLISHED Published: 2018-07-06T19:00:00Z Last Updated: 2024-09-16T19:30:59.374Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Use of Out-of-range Pointer Offset in WLAN Description: While parsing over-the-air information elements in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, the use of an out-of-range pointer offset can occur. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin - https://source.android.co
ps://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin - https://source.android.com/security/bulletin/2018-07-01 - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qca-wifi-host-cmn/commit/?id=7d65c1b32df795d4e95cdf2cfb624126f5125220
CVE ID: CVE-2018-5873 State: PUBLISHED Published: 2018-07-06T19:00:00Z Last Updated: 2024-09-17T01:20:54.467Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Use After Free in Kernel Description: An issue was discovered in the __ns_get_path function in fs/nsfs.c in the Linux kernel before 4.11. Due to a race condition when accessing files, a Use After Free condition can occur. This also affects all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulleti
2018-07-05. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/kernel/msm-4.9/commit/?id=34742aaf7cb16c95edba4a7afed6d2c4fa7e434b - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=073c516ff73557a8f7315066856c04b50383ac34 - https://source.android.com/security/bulletin/2018-07-01 - https://github.com/torvalds/linux/commit/073c516ff73557a8f7315066856c04b50383ac34
CVE ID: CVE-2018-5874 State: PUBLISHED Published: 2018-07-06T17:00:00Z Last Updated: 2024-09-17T02:15:37.369Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Stack-based Buffer Overflow in Multimedia Description: While parsing an mp4 file, a stack-based buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2018-5875 State: PUBLISHED Published: 2018-07-06T17:00:00Z Last Updated: 2024-09-17T02:36:16.447Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Integer Overflow to Buffer Overflow in Multimedia Description: While parsing an mp4 file, an integer overflow leading to a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2018-5876 State: PUBLISHED Published: 2018-07-06T17:00:00Z Last Updated: 2024-09-17T02:16:41.148Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer Copy without Checking Size of Input in Multimedia Description: While parsing an mp4 file, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2018-5877 State: PUBLISHED Published: 2018-11-28T15:00:00 Last Updated: 2024-08-05T05:47:56.014Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Incorrect Calculation of Buffer Size in Boot Description: In the device programmer target-side code for firehose, a string may not be properly NULL terminated can lead to a incorrect buffer size in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 600, SD 820, SD 820A, SD 835, SDA660, SDX20. Additional Analyst Notes: - CVE Program Container: References: - https://www.
0, SD 820, SD 820A, SD 835, SDA660, SDX20. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securityfocus.com/bid/105838
CVE ID: CVE-2018-5878 State: PUBLISHED Published: 2018-07-06T17:00:00Z Last Updated: 2024-09-16T22:26:36.805Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer Copy without Checking Size of Input in RIL Description: While sending the response to a RIL_REQUEST_GET_SMSC_ADDRESS message, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2018-5879 State: PUBLISHED Published: 2019-01-18T22:00:00 Last Updated: 2024-08-05T05:47:55.927Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Description: Improper length check while processing an MQTT message can lead to heap overflow in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 835, SDA660, SDM630, SDM660 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2018-5880 State: PUBLISHED Published: 2019-01-18T22:00:00 Last Updated: 2024-08-05T05:47:55.924Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Description: Improper data length check while processing an event report indication can lead to a buffer overflow in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 835, SDA660, SDM630, SDM660 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2018-5881 State: PUBLISHED Published: 2019-01-18T22:00:00 Last Updated: 2024-08-05T05:47:55.816Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Description: Improper validation of buffer length checks in the lwm2m device management protocol can leads to a buffer overflow in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 835, SDA660, SDM630, SDM660 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bull
Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2018-5882 State: PUBLISHED Published: 2018-07-06T17:00:00Z Last Updated: 2024-09-16T23:31:15.795Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer Over-read in Multimedia Description: While parsing a Flac file with a corrupted comment block, a buffer over-read can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2018-5883 State: PUBLISHED Published: 2019-06-14T17:02:10 Last Updated: 2024-08-05T05:47:55.981Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music Problem Types: Improper Validation of Array Index in WLAN Description: Buffer overflow in WLAN driver event handlers due to improper validation of array index in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS405, QCS605, SD 636, SD 675, SD 730, SD 820A, SD 835, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24 Additional Analys
QCS405, QCS605, SD 636, SD 675, SD 730, SD 820A, SD 835, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24 Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2019/05/06/may-2019-code-aurora-security-bulletin
CVE ID: CVE-2018-5884 State: PUBLISHED Published: 2018-07-06T17:00:00Z Last Updated: 2024-09-16T18:23:39.251Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Improper Access Control in Multimedia Description: Improper Access Control in Multimedia in Snapdragon Mobile and Snapdragon Wear, Non-standard applications without permission may acquire permission of Qualcomm-specific proprietary intents. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2018-5885 State: PUBLISHED Published: 2018-07-06T17:00:00Z Last Updated: 2024-09-17T02:05:42.816Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Possible buffer overflow in Secure UI Description: While loading dynamic fonts, a buffer overflow may occur if the number of segments in the font file is out of range in Snapdragon Mobile and Snapdragon Wear. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2018-5886 State: PUBLISHED Published: 2018-07-06T19:00:00Z Last Updated: 2024-09-17T01:00:51.505Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Over-read in DSP Description: A pointer in an ADSPRPC command is not properly validated in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android), which can lead to kernel memory being accessed. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=97017d5915808
july-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=97017d59158086689488bdcfcafb59654a6f10da
CVE ID: CVE-2018-5887 State: PUBLISHED Published: 2018-07-06T17:00:00Z Last Updated: 2024-09-16T17:32:43.172Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Improper Validation of Array Index in Boot Description: While processing the USB StrSerialDescriptor array, an array index out of bounds can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=c8415f6f2271008aef5056689950236df627d9b1 - https://source.android.com
deaurora.org/quic/la/abl/tianocore/edk2/commit/?id=c8415f6f2271008aef5056689950236df627d9b1 - https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components
CVE ID: CVE-2018-5888 State: PUBLISHED Published: 2018-07-06T17:00:00Z Last Updated: 2024-09-16T23:26:43.958Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Incorrect Calculation of Buffer Size in Boot Description: While processing the system path, an out of bounds access can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=5388803fa6d004382f4a857056ce06d963698d9c - https://source.android.com/security/bulletin/pi
abl/tianocore/edk2/commit/?id=5388803fa6d004382f4a857056ce06d963698d9c - https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components
CVE ID: CVE-2018-5889 State: PUBLISHED Published: 2018-07-06T17:00:00Z Last Updated: 2024-09-16T16:58:28.446Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Improper Restriction of Operations within the Bounds of a Memory Buffer in Boot Description: While processing a compressed kernel image, a buffer overflow can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components - https://source.codeaurora.org/quic/
https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components - https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=a95ca8e2eeb8a030e977f033cff122cad408158c
CVE ID: CVE-2018-5890 State: PUBLISHED Published: 2018-07-06T17:00:00Z Last Updated: 2024-09-16T16:22:56.407Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Integer Underflow in Boot Description: If the fdt_totalsize is reported as 0 for the current device tree, it bypasses an error check for a valid device tree in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=c9c8de8000ff32f8d1e24e697d861d92d8ed0b7a - https://source.a
/source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=c9c8de8000ff32f8d1e24e697d861d92d8ed0b7a - https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components
CVE ID: CVE-2018-5891 State: PUBLISHED Published: 2018-07-06T17:00:00Z Last Updated: 2024-09-17T01:35:51.050Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Use After Free in Data Description: While processing modem SSR after IMS is registered, the IMS data daemon is restarted but the ipc_dataHandle is no longer available. Consequently, the DPL thread frees the internal memory for dataDHandle but the local variable pointer is not updated which can lead to a Use After Free condition in Snapdragon Mobile and Snapdragon Wear. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2018-5892 State: PUBLISHED Published: 2018-07-06T17:00:00Z Last Updated: 2024-09-17T03:52:45.885Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Configuration in Android Description: The Touch Pal application can collect user behavior data without awareness by the user in Snapdragon Mobile and Snapdragon Wear. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2018-5893 State: PUBLISHED Published: 2018-07-06T17:00:00Z Last Updated: 2024-09-16T22:14:27.175Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Copy without Checking Size of Input in WLAN Description: While processing a message from firmware in htt_t2h_msg_handler_fast() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, a buffer overwrite can occur. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin - https://source.androi
https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin - https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=4cc54a30958d2a8d989364aa45a27fde3dd17352
CVE ID: CVE-2018-5894 State: PUBLISHED Published: 2018-07-06T17:00:00Z Last Updated: 2024-09-16T19:25:17.793Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Improper Validation of Array Index in Multimedia Description: Improper Validation of Array Index in Multimedia While parsing an mp4 file in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds access can occur. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2018-5895 State: PUBLISHED Published: 2018-07-06T17:00:00Z Last Updated: 2024-09-16T17:32:53.762Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Over-read in WLAN Description: Buffer over-read may happen in wma_process_utf_event() due to improper buffer length validation before writing into param_buf->num_wow_packet_buffer in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin -
ntainer: References: - https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin - https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components
CVE ID: CVE-2018-5896 State: PUBLISHED Published: 2018-07-06T17:00:00Z Last Updated: 2024-09-16T18:03:38.636Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Information Exposure in DIAG services Description: In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, kernel panic may happen due to out-of-bound read, caused by not checking source buffer length against length of packet stream to be copied. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-06-01#qualcomm-components
CVE ID: CVE-2018-5897 State: PUBLISHED Published: 2018-07-06T17:00:00Z Last Updated: 2024-09-16T18:18:48.088Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Over-read in DIAG Services Description: While reading the data from buffer in dci_process_ctrl_status() there can be buffer over-read problem if the len is not checked correctly in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components
CVE ID: CVE-2018-5898 State: PUBLISHED Published: 2018-07-06T17:00:00Z Last Updated: 2024-09-17T01:06:33.177Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Integer Overflow to Bufer Overflow in Audio Description: Integer overflow can occur in msm_pcm_adsp_stream_cmd_put() function if the user supplied data "param_length" goes beyond certain limit in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components
CVE ID: CVE-2018-5899 State: PUBLISHED Published: 2018-07-06T17:00:00Z Last Updated: 2024-09-16T16:38:16.167Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Use After Free in WLAN Description: In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, whenever TDLS connection is setup, we are freeing the netbuf in ol_tx_completion_handler and after that, we are accessing it in NBUF_UPDATE_TX_PKT_COUNT causing a use after free. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-cod
lyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin - https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components
CVE ID: CVE-2018-5903 State: PUBLISHED Published: 2019-06-14T17:02:10 Last Updated: 2024-08-05T05:47:56.186Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music Problem Types: Improper Validation of Array Index in WLAN Description: Out of bounds read occurs due to improper validation of array while processing VDEV stop response from WLAN firmware in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS405, QCS605, SD 210/SD 212/SD 205, SD 615/16/SD 415, SD