Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-9897 State: PUBLISHED Published: 2016-08-06T10:00:00 Last Updated: 2024-08-06T14:02:36.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: sound/soc/msm/qdsp6v2/msm-lsm-client.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not validate certain user-space data, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28769856 and Qualcomm internal bug CR563752. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - http://www.securityfocus.com/bid/92222 - https://source.codeaurora.org/quic/la/kernel/msm-3.10/c
letin/2016-08-01.html - http://www.securityfocus.com/bid/92222 - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=46135d80765cb70a914f02a6e7b6abe64679ec86
CVE ID: CVE-2014-9898 State: PUBLISHED Published: 2016-08-06T10:00:00 Last Updated: 2024-08-06T14:02:37.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: arch/arm/mach-msm/qdsp6v2/ultrasound/usf.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not properly validate input parameters, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28814690 and Qualcomm internal bug CR554575. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=80be0e249c90
id.com/security/bulletin/2016-08-01.html - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=80be0e249c906704085d13d4ae446f73913fc225 - http://www.securityfocus.com/bid/92222
CVE ID: CVE-2014-9899 State: PUBLISHED Published: 2016-08-06T10:00:00 Last Updated: 2024-08-06T14:02:38.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/usb/host/ehci-msm2.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices omits certain minimum calculations before copying data, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28803909 and Qualcomm internal bug CR547910. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - http://www.securityfocus.com/bid/92222 - https://source.codeaurora.org/quic/la/kernel/msm-3.1
bulletin/2016-08-01.html - http://www.securityfocus.com/bid/92222 - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=8756624acb1e090b45baf07b2a8d0ebde114000e
CVE ID: CVE-2014-9900 State: PUBLISHED Published: 2016-08-06T10:00:00 Last Updated: 2024-08-06T14:02:37.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ethtool_get_wol function in net/core/ethtool.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, does not initialize a certain data structure, which allows local users to obtain sensitive information via a crafted application, aka Android internal bug 28803952 and Qualcomm internal bug CR570754. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - https://source.codeaurora.org/quic/la/kernel/msm-3.
ces: - http://source.android.com/security/bulletin/2016-08-01.html - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=63c317dbee97983004dffdd9f742a20d17150071 - http://www.securityfocus.com/bid/92222
CVE ID: CVE-2014-9901 State: PUBLISHED Published: 2016-08-05T20:00:00 Last Updated: 2024-08-06T14:02:37.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Qualcomm Wi-Fi driver in Android before 2016-08-05 on Nexus 7 (2013) devices makes incorrect snprintf calls, which allows remote attackers to cause a denial of service (device hang or reboot) via crafted frames, aka Android internal bug 28670333 and Qualcomm internal bug CR548711. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/prima/commit/?id=637f0f7931dd7265ac1c250dc28
https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/prima/commit/?id=637f0f7931dd7265ac1c250dc2884d6389c66bde - http://www.securityfocus.com/bid/92247
CVE ID: CVE-2014-9902 State: PUBLISHED Published: 2016-08-05T20:00:00 Last Updated: 2024-08-06T14:02:38.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in CORE/SYS/legacy/src/utils/src/dot11f.c in the Qualcomm Wi-Fi driver in Android before 2016-08-05 on Nexus 7 (2013) devices allows remote attackers to execute arbitrary code via a crafted Information Element (IE) in an 802.11 management frame, aka Android internal bug 28668638 and Qualcomm internal bugs CR553937 and CR553941. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - https://source.codeaurora.org/quic/la/platform/vendor/qcom-
ttp://source.android.com/security/bulletin/2016-08-01.html - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/prima/commit/?id=3b1c44a3a7129dc25abe2c23543f6f66c59e8f50 - http://www.securityfocus.com/bid/92223
CVE ID: CVE-2014-9903 State: PUBLISHED Published: 2016-06-27T10:00:00 Last Updated: 2024-08-06T14:02:36.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sched_read_attr function in kernel/sched/core.c in the Linux kernel 3.14-rc before 3.14-rc4 uses an incorrect size, which allows local users to obtain sensitive information from kernel stack memory via a crafted sched_getattr system call. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4efbc454ba68def5ef285b26ebfcfdb605b52755 - https://github.com/torvalds/linux/commit/4efbc454ba68def5ef285b26ebfcfdb605b52755 - http://www.securityfocu
b605b52755 - https://github.com/torvalds/linux/commit/4efbc454ba68def5ef285b26ebfcfdb605b52755 - http://www.securityfocus.com/bid/91511
CVE ID: CVE-2014-9904 State: PUBLISHED Published: 2016-06-27T10:00:00 Last Updated: 2024-08-06T14:02:37.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: The snd_compress_check_input function in sound/core/compress_offload.c in the ALSA subsystem in the Linux kernel before 3.17 does not properly check for an integer overflow, which allows local users to cause a denial of service (insufficient memory allocation) or possibly have unspecified other impact via a crafted SNDRV_COMPRESS_SET_PARAMS ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html - http://www.securitytracker.com/id/1
nces: - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html - http://www.securitytracker.com/id/1036189 - http://www.securityfocus.com/bid/91510 - http://www.debian.org/security/2016/dsa-3616 - https://github.com/torvalds/linux/commit/6217e5ede23285ddfee10d2e4ba0cc2d4c046205 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6217e5ede23285ddfee10d2e4ba0cc2d4c046205 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html
CVE ID: CVE-2014-9905 State: PUBLISHED Published: 2017-02-17T17:00:00 Last Updated: 2024-08-06T14:02:38.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Web Calendar in SOGo before 2.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) title of an appointment or (2) contact fields. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/inverse-inc/sogo/commit/80a09407652ec04e8c9fb6cb48e1029e69a15765 - http://www.openwall.com/lists/oss-security/2016/07/09/3 - https://github.com/inverse-inc/sogo/commit/3a5e44e7eb8b390b67a8f8a83030b49606956501 - https://github.com/inve
/07/09/3 - https://github.com/inverse-inc/sogo/commit/3a5e44e7eb8b390b67a8f8a83030b49606956501 - https://github.com/inverse-inc/sogo/commit/c94595ea7f0f843c2d7abf25df039b2bbe707625 - https://sogo.nu/bugs/view.php?id=2598 - https://github.com/inverse-inc/sogo/commit/1a7fc2a0e90a19dfb1fce292ae5ff53aa513ade9
CVE ID: CVE-2014-9906 State: PUBLISHED Published: 2016-08-19T21:00:00 Last Updated: 2024-08-06T14:02:36.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in DBD::mysql before 4.029 allows attackers to cause a denial of service (program crash) or possibly execute arbitrary code via vectors related to a lost server connection. Additional Analyst Notes: - CVE Program Container: References: - https://rt.cpan.org/Public/Bug/Display.html?id=97625 - http://www.openwall.com/lists/oss-security/2016/07/27/5 - https://github.com/perl5-dbi/DBD-mysql/commit/a56ae87a4c1c1fead7d09c3653905841ccccf1cc - http://www.openwall.com/lists/oss-security/2016/07/27/6 - http:
-mysql/commit/a56ae87a4c1c1fead7d09c3653905841ccccf1cc - http://www.openwall.com/lists/oss-security/2016/07/27/6 - http://www.debian.org/security/2016/dsa-3635 - http://cpansearch.perl.org/src/CAPTTOFU/DBD-mysql-4.029/ChangeLog - http://www.securityfocus.com/bid/92149
CVE ID: CVE-2014-9907 State: PUBLISHED Published: 2017-04-19T14:00:00 Last Updated: 2024-08-06T14:02:36.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: coders/dds.c in ImageMagick allows remote attackers to cause a denial of service via a crafted DDS file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/09/22/2 - https://bugzilla.redhat.com/show_bug.cgi?id=1378734 - https://github.com/ImageMagick/ImageMagick/commit/504ada82b6fa38a30c846c1c29116af7290decb2 - http://www.securityfocus.com/bid/93231 - https://github.com/ImageMagick/ImageMagick/commit/21eae25a8db5fdcd112dbcfcd9e5c37e32d32e2f - https://github.com/Imag
1 - https://github.com/ImageMagick/ImageMagick/commit/21eae25a8db5fdcd112dbcfcd9e5c37e32d32e2f - https://github.com/ImageMagick/ImageMagick/commit/d7325bac173492b358417a0ad49fabad44447d52
CVE ID: CVE-2014-9908 State: PUBLISHED Published: 2020-01-08T14:46:14 Last Updated: 2024-08-06T14:02:38.208Z Vendors: Google Products: Android Problem Types: denial of service Description: A Denial of Service vulnerability exists in Google Android 4.4.4, 5.0.2, and 5.1.1, which allows malicious users to block Bluetooh access (Android Bug ID A-28672558). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94167 - https://source.android.com/security/bulletin/2016-11-01.html - https://vuldb.com/?id.93449 - https://github.com/Genymobile/f2ut_platform_frameworks_base/commit/f24cec326f5f65c693544fb0b92c37f633bacda2
CVE ID: CVE-2014-9909 State: PUBLISHED Published: 2017-01-18T17:00:00 Last Updated: 2024-08-06T14:02:37.989Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31676542. References: B-RB#26684. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2016-12-01.html - http://www.securityfocus.com/bi
Container: References: - https://source.android.com/security/bulletin/2016-12-01.html - http://www.securityfocus.com/bid/94685
CVE ID: CVE-2014-9910 State: PUBLISHED Published: 2017-01-18T17:00:00 Last Updated: 2024-08-06T14:02:38.194Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31746399. References: B-RB#26710. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2016-12-01.html - http://www.securityfocus.com/bi
CVE ID: CVE-2014-9911 State: PUBLISHED Published: 2017-01-04T20:00:00 Last Updated: 2024-08-06T14:02:37.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the ures_getByKeyWithFallback function in common/uresbund.cpp in International Components for Unicode (ICU) before 54.1 for C/C++ allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted uloc_getDisplayName call. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.icu-project.org/trac/changeset/35699 - https://bugzilla.redhat.com/show_bug.cgi?id=1383569 - http://www.securitytracker.com/id/1037556 - http://www.securityfoc
https://bugzilla.redhat.com/show_bug.cgi?id=1383569 - http://www.securitytracker.com/id/1037556 - http://www.securityfocus.com/bid/94520 - http://www.openwall.com/lists/oss-security/2016/11/25/1 - https://bugs.php.net/bug.php?id=67397 - http://bugs.icu-project.org/trac/ticket/1089 - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
CVE ID: CVE-2014-9912 State: PUBLISHED Published: 2017-01-04T20:00:00 Last Updated: 2024-08-06T14:02:36.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_icu_disp_value_src_php function in ext/intl/locale/locale_methods.c in PHP before 5.3.29, 5.4.x before 5.4.30, and 5.5.x before 5.5.14 does not properly restrict calls to the ICU uresbund.cpp component, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a locale_get_display_name call with a long first argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68549 - https://bugzilla.redhat.com/show_
Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68549 - https://bugzilla.redhat.com/show_bug.cgi?id=1383569 - http://www.openwall.com/lists/oss-security/2016/11/25/1 - http://www.php.net/ChangeLog-5.php - https://bugs.php.net/bug.php?id=67397
CVE ID: CVE-2014-9913 State: PUBLISHED Published: 2017-01-18T17:00:00 Last Updated: 2024-08-06T14:02:36.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the list_files function in list.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service (crash) via vectors related to the compression method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95081 - https://bugs.launchpad.net/ubuntu/+source/unzip/+bug/1643750 - http://www.openwall.com/lists/oss-security/2016/12/05/19 - http://www.openwall.com/lists/oss-security/2016/12/05/13 - http://www.openwall.com/lists/oss-security/2016/12/05/20 - htt
ttp://www.openwall.com/lists/oss-security/2016/12/05/13 - http://www.openwall.com/lists/oss-security/2016/12/05/20 - http://www.openwall.com/lists/oss-security/2014/11/03/5
CVE ID: CVE-2014-9914 State: PUBLISHED Published: 2017-02-07T07:02:00 Last Updated: 2024-08-06T14:02:37.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the ip4_datagram_release_cb function in net/ipv4/datagram.c in the Linux kernel before 3.15.2 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging incorrect expectations about locking during multithreaded access to internal data structures for IPv4 UDP sockets. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037798 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9709674e68646cee5a24e300
cker.com/id/1037798 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9709674e68646cee5a24e3000b3558d25412203a - http://source.android.com/security/bulletin/2017-02-01.html - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.2 - http://www.securityfocus.com/bid/96100 - https://github.com/torvalds/linux/commit/9709674e68646cee5a24e3000b3558d25412203a
CVE ID: CVE-2014-9915 State: PUBLISHED Published: 2017-03-23T17:00:00 Last Updated: 2024-08-06T14:02:36.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in ImageMagick before 6.6.0-4 allows remote attackers to cause a denial of service (application crash) via a crafted 8BIM profile. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1410436 - http://www.openwall.com/lists/oss-security/2016/12/26/9
CVE ID: CVE-2014-9916 State: PUBLISHED Published: 2017-02-23T21:00:00 Last Updated: 2024-08-06T14:02:36.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Bilboplanet 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) tribe_name or (2) tags parameter in a tribes page request to user/ or the (3) user_id or (4) fullname parameter to signup.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/34089
CVE ID: CVE-2014-9917 State: PUBLISHED Published: 2019-05-15T13:23:02 Last Updated: 2024-08-06T14:02:36.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bilboplanet 2.0. There is a stored XSS vulnerability when adding a tag via the user/?page=tribes tags parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/34089/
CVE ID: CVE-2014-9918 State: PUBLISHED Published: 2019-05-15T13:21:28 Last Updated: 2024-08-06T14:02:36.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bilboplanet 2.0. Stored XSS exists in the user_id parameter to signup.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/34089/
CVE ID: CVE-2014-9919 State: PUBLISHED Published: 2019-05-15T13:17:30 Last Updated: 2024-08-06T14:02:36.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bilboplanet 2.0. Stored XSS exists in the fullname parameter to signup.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/34089/
CVE ID: CVE-2014-9920 State: PUBLISHED Published: 2017-03-14T22:00:00 Last Updated: 2024-08-06T14:02:36.881Z Vendors: Intel Products: McAfee Application Control (MAC) Problem Types: Unauthorized execution of binary vulnerability Description: Unauthorized execution of binary vulnerability in McAfee (now Intel Security) McAfee Application Control (MAC) 6.0.0 before hotfix 9726, 6.0.1 before hotfix 9068, 6.1.0 before hotfix 692, 6.1.1 before hotfix 399, 6.1.2 before hotfix 426, and 6.1.3 before hotfix 357 and earlier allows attackers to create a malformed Windows binary that is considered non-executable and is not protected through the whitelisting protection feature via a specific set of circu
s considered non-executable and is not protected through the whitelisting protection feature via a specific set of circumstances. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10077
CVE ID: CVE-2014-9921 State: PUBLISHED Published: 2017-03-14T22:00:00 Last Updated: 2024-08-06T14:02:36.827Z Vendors: Intel Products: Cloud Analysis and Deconstructive Services (CADS) Problem Types: Information disclosure vulnerability Description: Information disclosure vulnerability in McAfee (now Intel Security) Cloud Analysis and Deconstructive Services (CADS) 1.0.0.3x, 1.0.0.4d and earlier allows remote unauthenticated users to view, add, and remove users via a configuration error. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10087
CVE ID: CVE-2014-9922 State: PUBLISHED Published: 2017-04-04T04:54:00 Last Updated: 2024-08-06T14:02:36.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: The eCryptfs subsystem in the Linux kernel before 3.18 allows local users to gain privileges via a large filesystem stack that includes an overlayfs layer, related to fs/ecryptfs/main.c and fs/overlayfs/super.c. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=69c433ed2ecd2d3264efd7afec4439524b319121 - http://source.android.com/security/bulletin/2017-04-01.html - https://github.com/torvalds/linux/commit/69c433ed2ecd2d3264efd7afec4439524b3
oid.com/security/bulletin/2017-04-01.html - https://github.com/torvalds/linux/commit/69c433ed2ecd2d3264efd7afec4439524b319121 - http://www.securityfocus.com/bid/97354 - http://www.securitytracker.com/id/1038201
CVE ID: CVE-2014-9923 State: PUBLISHED Published: 2017-06-06T14:00:00 Last Updated: 2024-08-06T14:02:36.846Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Buffer Copy without Checking Size of Input Vulnerability in NAS Description: In NAS in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98225 - https://source.android.com/security/bulletin/2017-05-01
CVE ID: CVE-2014-9924 State: PUBLISHED Published: 2017-06-06T14:00:00 Last Updated: 2024-08-06T14:02:36.635Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Signed to Unsigned Conversion Error in 1x Description: In 1x in all Android releases from CAF using the Linux kernel, a Signed to Unsigned Conversion Error could potentially occur. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-05-01 - http://www.securityfocus.com/bid/98226
CVE ID: CVE-2014-9925 State: PUBLISHED Published: 2017-06-06T14:00:00 Last Updated: 2024-08-06T14:02:37.340Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Buffer Copy without Checking Size of Input Vulnerability in HDR Description: In HDR in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98227 - https://source.android.com/security/bulletin/2017-05-01
CVE ID: CVE-2014-9926 State: PUBLISHED Published: 2017-06-06T14:00:00 Last Updated: 2024-08-06T14:02:37.363Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Use After Free Vulnerability in GNSS Description: In GNSS in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98228 - https://source.android.com/security/bulletin/2017-05-01
CVE ID: CVE-2014-9927 State: PUBLISHED Published: 2017-06-06T14:00:00 Last Updated: 2024-08-06T14:02:36.806Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Buffer Copy without Checking Size of Input Vulnerability in UIM Description: In UIM in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-05-01