Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
Notes: - CVE Program Container: References: - https://www.symantec.com/security-center/network-protection-security-advisories/SA160 - http://www.securityfocus.com/bid/104164
CVE ID: CVE-2017-18269 State: PUBLISHED Published: 2018-05-18T16:00:00 Last Updated: 2024-08-05T21:13:49.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S in the GNU C Library (aka glibc or libc6) 2.21 through 2.27 does not correctly perform the overlapping memory check if the source memory range spans the middle of the address space, resulting in corrupt data being produced by the copy operation. This may disclose information to context-dependent attackers, or result in a denial of service, or, possibly, code execution. Additional Analyst Notes: - CVE Program Container: Ref
, or result in a denial of service, or, possibly, code execution. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=cd66c0e584c6d692bc8347b5e72723d02b8a8ada - https://github.com/fingolfin/memmove-bug - https://sourceware.org/bugzilla/show_bug.cgi?id=22644 - https://security.netapp.com/advisory/ntap-20190329-0001/ - https://security.netapp.com/advisory/ntap-20190401-0001/ - https://usn.ubuntu.com/4416-1/
CVE ID: CVE-2017-18270 State: PUBLISHED Published: 2018-05-18T16:00:00 Last Updated: 2024-08-05T21:13:49.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 4.13.5, a local user could create keyrings for other users via keyctl commands, setting unwanted defaults or causing a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/237bbd29f7a049d310d907f4b2716a7feef9abf3 - https://usn.ubuntu.com/3754-1/ - https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.5 - http://www.securityfocus.com/bid/104254 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=237b
http://www.securityfocus.com/bid/104254 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=237bbd29f7a049d310d907f4b2716a7feef9abf3 - https://support.f5.com/csp/article/K37301725 - https://bugzilla.redhat.com/show_bug.cgi?id=1856774#c9 - https://bugzilla.redhat.com/show_bug.cgi?id=1856774#c11 - https://bugzilla.redhat.com/show_bug.cgi?id=1580979
CVE ID: CVE-2017-18271 State: PUBLISHED Published: 2018-05-18T19:00:00 Last Updated: 2024-08-05T21:13:49.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted MIFF image file. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/05/msg00012.html - https://usn.ubuntu.com/3681-1/ - https://github.com/ImageMagick/ImageMagick/issues/911 - https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html - htt
github.com/ImageMagick/ImageMagick/issues/911 - https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html - https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
CVE ID: CVE-2017-18272 State: PUBLISHED Published: 2018-05-18T19:00:00Z Last Updated: 2024-09-16T16:22:46.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-25, there is a use-after-free in ReadOneMNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted MNG image file that is mishandled in an MngInfoDiscardObject call. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/918
CVE ID: CVE-2017-18273 State: PUBLISHED Published: 2018-05-18T19:00:00 Last Updated: 2024-08-05T21:13:49.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadTXTImage in coders/txt.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted image file that is mishandled in a GetImageIndexInList call. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/05/msg00012.html - https://usn.ubuntu.com/3681-1/ - https://github.com/ImageMagick/ImageMagick/issues/910 - https://lists.debian.org/debia
https://usn.ubuntu.com/3681-1/ - https://github.com/ImageMagick/ImageMagick/issues/910 - https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html - https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
CVE ID: CVE-2017-18274 State: PUBLISHED Published: 2019-05-06T22:37:54 Last Updated: 2024-08-05T21:13:49.235Z Vendors: Qualcomm Technologies, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: CWE129: Improper Validation of Array Index Description: While iterating through the models contained in a fixed-size array in the actData structure, which also stores an incorrect number of models that is greater than the size of the array, a buffer overflow occurs in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835 Additional Analy
M9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2017-18275 State: PUBLISHED Published: 2019-05-06T22:43:05 Last Updated: 2024-08-05T21:13:49.291Z Vendors: Qualcomm Technologies, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: CWE284: Improper Access Control Description: A new account can be inserted into simContacts service using Android command line tool in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-securit
D 845. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2017-18276 State: PUBLISHED Published: 2019-05-06T22:46:52 Last Updated: 2024-08-05T21:13:49.213Z Vendors: Qualcomm Technologies, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: CWE284: Improper Access Control Description: Secure camera logic allows display/secure camera controllers to access HLOS memory during secure display or camera session in Snapdragon Mobile, Snapdragon Wear in MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, SD 845, SD 850 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2017-18277 State: PUBLISHED Published: 2018-10-23T13:00:00 Last Updated: 2024-08-05T21:13:49.222Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Loop with Unreachable Exit Condition in WLAN Description: When dynamic memory allocation fails, currently the process sleeps for one second and continues with infinite loop without retrying for memory allocation in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, QCN5502, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835. Additional Analyst N
425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - https://source.android.com/security/bulletin/2018-07-01#qualcomm-closed-source-components
CVE ID: CVE-2017-18278 State: PUBLISHED Published: 2019-05-06T22:54:13 Last Updated: 2024-08-05T21:13:49.242Z Vendors: Qualcomm Technologies, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: CWE680: Integer Overflow to Buffer Overflow Description: An integer underflow may occur due to lack of check when received data length from font_mgr_qsee_request_service is bigger than the minimal value of the segment header, which may result in a buffer overflow, in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SD 850. Addition
9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SD 850. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2017-18279 State: PUBLISHED Published: 2019-05-06T22:58:17 Last Updated: 2024-08-05T21:13:49.301Z Vendors: Qualcomm Technologies, Inc. Products: Small Cell SoC, Snapdragon Mobile, Snapdragon Wear Problem Types: CWE680: Integer Overflow to Buffer Overflow Description: Lack of check of buffer length before copying can lead to buffer overflow in camera module in Small Cell SoC, Snapdragon Mobile, Snapdragon Wear in FSM9055, FSM9955, IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA9531, QCA9558, QCA9563, QCA9880, QCA9886, QCA9980, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD
0/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 835, SDM630, SDM636, SDM660, SDX20, Snapdragon_High_Med_2016. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2017-18280 State: PUBLISHED Published: 2018-09-20T13:00:00 Last Updated: 2024-08-05T21:13:49.271Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Access to the SPI/I2C bus is non-exclusive Description: In Snapdragon (Automobile, Mobile, Wear) in version MDM9607, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDM429, SDM439, SDM632, Snapdragon_High_Med_2016, when a Trusted Application has opened the SPI/I2C interface to a particular device, it is possible for another Trusted Application to read the data on this open interface by calling
o a particular device, it is possible for another Trusted Application to read the data on this open interface by calling the SPI/I2C read function. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securitytracker.com/id/1041432 - https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components
CVE ID: CVE-2017-18281 State: PUBLISHED Published: 2018-10-29T18:00:00 Last Updated: 2024-08-05T21:20:49.695Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Use of Out-of-range Pointer Offset in Video Description: A bool variable in Video function, which gets typecasted to int before being read could result in an out of bound read access in all Android releases from CAF using the linux kernel Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041432 - https://www.codeaurora.org/security-bulletin/2018/10/01/october-2018-code-aurora-security-bulletin
CVE ID: CVE-2017-18282 State: PUBLISHED Published: 2018-10-23T13:00:00 Last Updated: 2024-08-05T21:20:49.699Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: NImproper Access Control in Access Control module Description: Non-secure SW can cause SDCC to generate secure bus accesses, which may expose RPM access in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 835, SDA660. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securitytracker.com/id/1041432 - https://source.android.co
.qualcomm.com/company/product-security/bulletins - http://www.securitytracker.com/id/1041432 - https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components
CVE ID: CVE-2017-18283 State: PUBLISHED Published: 2018-10-23T13:00:00 Last Updated: 2024-08-05T21:20:49.968Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Improper Input Validation in Bluetooth Controller Description: Possible memory corruption when Read Val Blob Req is received with invalid parameters in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 625, SD 835, SD 845, SD 850, SDA660. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securitytracker.com/id/1041432 - https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components
CVE ID: CVE-2017-18284 State: PUBLISHED Published: 2018-06-04T06:00:00 Last Updated: 2024-08-05T21:20:49.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Gentoo app-backup/burp package before 2.1.32 sets the ownership of the PID file directory to the burp account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script sends a SIGKILL. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201806-03 - https://bugs.gentoo.org/628770
CVE ID: CVE-2017-18285 State: PUBLISHED Published: 2018-06-04T06:00:00 Last Updated: 2024-08-05T21:20:49.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Gentoo app-backup/burp package before 2.1.32 has incorrect group ownership of the /etc/burp directory, which might allow local users to obtain read and write access to arbitrary files by leveraging access to a certain account for a burp-server.conf change. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201806-03 - https://bugs.gentoo.org/641842 - https://security.gentoo.org/glsa/201904-05
CVE ID: CVE-2017-18286 State: PUBLISHED Published: 2018-06-05T06:00:00 Last Updated: 2024-08-05T21:20:49.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: nZEDb v0.7.3.3 has XSS in the 404 error page. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/143725/nZEDb-0.7.3.3-Cross-Site-Scripting.html
CVE ID: CVE-2017-18287 State: PUBLISHED Published: 2018-06-12T18:00:00Z Last Updated: 2024-09-17T01:41:07.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the POST user_search parameter. Additional Analyst Notes: - CVE Program Container: References: - https://rchase.com/blog/posts/pvpgn-stats-multiple-sql-injection-vulnerabilities/
CVE ID: CVE-2017-18288 State: PUBLISHED Published: 2018-06-12T18:00:00Z Last Updated: 2024-09-16T20:32:38.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET game parameter. Additional Analyst Notes: - CVE Program Container: References: - https://rchase.com/blog/posts/pvpgn-stats-multiple-sql-injection-vulnerabilities/
CVE ID: CVE-2017-18289 State: PUBLISHED Published: 2018-06-12T18:00:00Z Last Updated: 2024-09-16T20:02:23.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exist in ladder/stats.php via the GET type parameter. Additional Analyst Notes: - CVE Program Container: References: - https://rchase.com/blog/posts/pvpgn-stats-multiple-sql-injection-vulnerabilities/
CVE ID: CVE-2017-18290 State: PUBLISHED Published: 2018-06-12T18:00:00Z Last Updated: 2024-09-16T16:48:19.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET sort_direction parameter. Additional Analyst Notes: - CVE Program Container: References: - https://rchase.com/blog/posts/pvpgn-stats-multiple-sql-injection-vulnerabilities/
CVE ID: CVE-2017-18291 State: PUBLISHED Published: 2018-06-12T18:00:00Z Last Updated: 2024-09-17T02:42:13.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET user parameter. Additional Analyst Notes: - CVE Program Container: References: - https://rchase.com/blog/posts/pvpgn-stats-multiple-sql-injection-vulnerabilities/
CVE ID: CVE-2017-18292 State: PUBLISHED Published: 2018-10-23T13:00:00 Last Updated: 2024-08-05T21:20:51.210Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Lack of Input Validation May Lead to System Reset Description: Secure app running in non secure space can restart TZ by calling Widevine app API repeatedly in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 820A. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/compa
SD 810, SD 820, SD 820A. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securitytracker.com/id/1041432 - https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components
CVE ID: CVE-2017-18293 State: PUBLISHED Published: 2018-10-23T13:00:00 Last Updated: 2024-08-05T21:20:50.291Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Improper Access Control on TLMM Banked GPIO Registers Description: When a particular GPIO is protected by blocking access to the corresponding GPIO resource registers, the protection can be bypassed using the corresponding banked GPIO registers instead in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 835, SDA660. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/compan
650/52, SD 835, SDA660. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securitytracker.com/id/1041432 - https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components
CVE ID: CVE-2017-18294 State: PUBLISHED Published: 2018-10-23T13:00:00 Last Updated: 2024-08-05T21:20:51.166Z Vendors: Qualcomm, Inc. Products: Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Improper Input Validation in QSEECOM Driver Description: While reading file class type from ELF header, a buffer overread may happen if the ELF file size is less than the size of ELF64 header size in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version FSM9055, MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDA660, S
0/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDA660, SDX20. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securitytracker.com/id/1041432 - https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components
CVE ID: CVE-2017-18295 State: PUBLISHED Published: 2018-10-23T13:00:00 Last Updated: 2024-08-05T21:20:51.126Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer Copy Without Checking Size of Input in DSP Services Description: Possible buffer overflow if input is not null terminated in DSP Service module in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDX20. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-securit
SDX20. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securitytracker.com/id/1041432 - https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components
CVE ID: CVE-2017-18296 State: PUBLISHED Published: 2018-10-23T13:00:00 Last Updated: 2024-08-05T21:20:49.971Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Improper Access Control in Safeswitch Description: Access control on applications is not applied while accessing SafeSwitch services can lead to improper access in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDA660, SDX20. Additional Analyst Notes: - CVE Program Container: References:
650/52, SD 820, SD 820A, SD 835, SD 845, SDA660, SDX20. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securitytracker.com/id/1041432 - https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components
CVE ID: CVE-2017-18297 State: PUBLISHED Published: 2018-10-23T13:00:00 Last Updated: 2024-08-05T21:20:50.229Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Double Free in Trusted Application Environment Description: Double memory free while closing TEE SE API Session management in Snapdragon Mobile in version SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securitytracker.com/id/1041432 - https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components
CVE ID: CVE-2017-18298 State: PUBLISHED Published: 2018-10-23T13:00:00 Last Updated: 2024-08-05T21:20:49.926Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Null Pointer Dereference in Broadcast Description: Lack of Input Validation in SDMX API can lead to NULL pointer access in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660 . Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com
835, SD 845, SD 850, SDA660 . Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securitytracker.com/id/1041432 - https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components