Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-14848 State: PUBLISHED Published: 2017-10-02T21:00:00 Last Updated: 2024-08-05T19:42:21.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: WPHRM Human Resource Management System for WordPress 1.0 allows SQL Injection via the employee_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42924/ - https://wpvulndb.com/vulnerabilities/8929
CVE ID: CVE-2017-14849 State: PUBLISHED Published: 2017-09-28T00:00:00 Last Updated: 2024-08-05T19:42:22.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: Node.js 8.5.0 before 8.6.0 allows remote attackers to access unintended files, because a change to ".." handling was incompatible with the pathname validation used by unspecified community modules. Additional Analyst Notes: - CVE Program Container: References: - https://nodejs.org/en/blog/vulnerability/september-2017-path-validation/ - http://www.securityfocus.com/bid/101056 - https://twitter.com/nodejs/status/913131152868876288
CVE ID: CVE-2017-14850 State: PUBLISHED Published: 2019-06-03T18:51:37 Last Updated: 2024-08-05T19:42:22.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: All known versions of the Orpak SiteOmat web management console is vulnerable to multiple instances of Stored Cross-site Scripting due to improper external user-input validation. An attacker with access to the web interface is able to hijack sessions or navigate victims outside of SiteOmat, to a malicious server owned by him. Additional Analyst Notes: - CVE Program Container: References: - https://www.orpak.com - https://ics-cert.us-cert.gov/advisories/ICSA-19-122-01 - http://www.securityfocus.com/bid/108167
CVE ID: CVE-2017-14851 State: PUBLISHED Published: 2019-06-03T18:53:28 Last Updated: 2024-08-05T19:42:22.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability exists in all Orpak SiteOmat versions prior to 2017-09-25. The vulnerability is in the login page, where the authentication validation process contains an insecure SELECT query. The attack allows for authentication bypass. Additional Analyst Notes: - CVE Program Container: References: - https://www.orpak.com - https://ics-cert.us-cert.gov/advisories/ICSA-19-122-01 - http://www.securityfocus.com/bid/108167
CVE ID: CVE-2017-14852 State: PUBLISHED Published: 2019-06-03T18:57:36 Last Updated: 2024-08-05T19:42:22.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: An insecure communication was found between a user and the Orpak SiteOmat management console for all known versions, due to an invalid SSL certificate. The attack allows for an eavesdropper to capture the communication and decrypt the data. Additional Analyst Notes: - CVE Program Container: References: - http://www.orpak.com - https://ics-cert.us-cert.gov/advisories/ICSA-19-122-01 - http://www.securityfocus.com/bid/108167
CVE ID: CVE-2017-14853 State: PUBLISHED Published: 2019-06-03T19:00:05 Last Updated: 2024-08-05T19:42:22.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Orpak SiteOmat OrCU component is vulnerable to code injection, for all versions prior to 2017-09-25, due to a search query that uses a direct shell command. By tampering with the request, an attacker is able to run shell commands and receive valid output from the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.orpak.com - https://ics-cert.us-cert.gov/advisories/ICSA-19-122-01 - http://www.securityfocus.com/bid/108167
CVE ID: CVE-2017-14854 State: PUBLISHED Published: 2019-06-03T19:01:34 Last Updated: 2024-08-05T19:42:21.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack buffer overflow exists in one of the Orpak SiteOmat CGI components, allowing for remote code execution. The vulnerability affects all versions prior to 2017-09-25. Additional Analyst Notes: - CVE Program Container: References: - http://www.orpak.com - https://ics-cert.us-cert.gov/advisories/ICSA-19-122-01 - http://www.securityfocus.com/bid/108167
CVE ID: CVE-2017-14855 State: PUBLISHED Published: 2017-12-30T17:00:00 Last Updated: 2024-08-05T19:42:21.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Lion HMI panels allow remote attackers to cause a denial of service (software exception) via an HTTP POST request to a long URI that does not exist, as demonstrated by version HMI 2.41 PLC 2.42. Additional Analyst Notes: - CVE Program Container: References: - http://misteralfa-hack.blogspot.cl/2017/12/red-lion-guru-mode-cve-2017-14855.html
CVE ID: CVE-2017-14857 State: PUBLISHED Published: 2017-09-28T07:00:00 Last Updated: 2024-08-05T19:42:22.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Exiv2 0.26, there is an invalid free in the Image class in image.cpp that leads to a Segmentation fault. A crafted input will lead to a denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1495043
CVE ID: CVE-2017-14858 State: PUBLISHED Published: 2017-09-28T07:00:00 Last Updated: 2024-08-05T19:42:21.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a heap-based buffer overflow in the Exiv2::l2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1494782
CVE ID: CVE-2017-14859 State: PUBLISHED Published: 2017-09-28T00:00:00 Last Updated: 2024-08-05T19:42:21.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Invalid memory address dereference was discovered in Exiv2::StringValueBase::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3852-1/ - https://bugzilla.redhat.com/show_bug.cgi?id=1494780 - https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html
CVE ID: CVE-2017-14860 State: PUBLISHED Published: 2017-09-28T07:00:00 Last Updated: 2024-08-05T19:42:22.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a heap-based buffer over-read in the Exiv2::Jp2Image::readMetadata function of jp2image.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1494776
CVE ID: CVE-2017-14861 State: PUBLISHED Published: 2017-09-28T07:00:00 Last Updated: 2024-08-05T19:42:22.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a stack consumption vulnerability in the Exiv2::Internal::stringFormat function of image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1494787
CVE ID: CVE-2017-14862 State: PUBLISHED Published: 2017-09-28T00:00:00 Last Updated: 2024-08-05T19:42:21.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Invalid memory address dereference was discovered in Exiv2::DataValue::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1494786 - https://usn.ubuntu.com/3852-1/ - https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html
CVE ID: CVE-2017-14863 State: PUBLISHED Published: 2017-09-28T07:00:00 Last Updated: 2024-08-05T19:42:22.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL pointer dereference was discovered in Exiv2::Image::printIFDStructure in image.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1494443
CVE ID: CVE-2017-14864 State: PUBLISHED Published: 2017-09-28T00:00:00 Last Updated: 2024-08-05T19:42:22.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Invalid memory address dereference was discovered in Exiv2::getULong in types.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3852-1/ - https://bugzilla.redhat.com/show_bug.cgi?id=1494467 - https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html
CVE ID: CVE-2017-14865 State: PUBLISHED Published: 2017-09-28T07:00:00 Last Updated: 2024-08-05T19:42:21.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a heap-based buffer overflow in the Exiv2::us2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1494778
CVE ID: CVE-2017-14866 State: PUBLISHED Published: 2017-09-28T07:00:00 Last Updated: 2024-08-05T19:42:22.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a heap-based buffer overflow in the Exiv2::s2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1494781
CVE ID: CVE-2017-14867 State: PUBLISHED Published: 2017-09-28T14:00:00 Last Updated: 2024-08-05T19:42:21.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Git before 2.10.5, 2.11.x before 2.11.4, 2.12.x before 2.12.5, 2.13.x before 2.13.6, and 2.14.x before 2.14.2 uses unsafe Perl scripts to support subcommands such as cvsserver, which allows attackers to execute arbitrary OS commands via shell metacharacters in a module name. The vulnerable code is reachable via git-shell even without CVS support. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/09/26/9 - https://bugs.debian.org/876854 - https://lists.debian.org/d
- http://www.openwall.com/lists/oss-security/2017/09/26/9 - https://bugs.debian.org/876854 - https://lists.debian.org/debian-security-announce/2017/msg00246.html - https://public-inbox.org/git/xmqqy3p29ekj.fsf%40gitster.mtv.corp.google.com/T/#u - http://www.securitytracker.com/id/1039431 - http://www.securityfocus.com/bid/101060 - https://www.debian.org/security/2017/dsa-3984
CVE ID: CVE-2017-14868 State: PUBLISHED Published: 2017-11-30T18:00:00 Last Updated: 2024-08-05T19:42:21.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Restlet Framework before 2.3.11, when using SimpleXMLProvider, allows remote attackers to access arbitrary files via an XXE attack in a REST API HTTP request. This affects use of the Jax-rs extension. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/restlet/restlet-framework-java/wiki/XEE-security-enhancements - https://lgtm.com/blog/restlet_CVE-2017-14868 - https://github.com/restlet/restlet-framework-java/issues/1286
CVE ID: CVE-2017-14869 State: PUBLISHED Published: 2018-01-10T22:00:00Z Last Updated: 2024-09-17T01:46:56.416Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Information Exposure in Boot Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while performing update of FOTA partition, uninitialized data can be pushed to storage. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-01-01
CVE ID: CVE-2017-14870 State: PUBLISHED Published: 2018-01-10T22:00:00Z Last Updated: 2024-09-17T00:56:52.724Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Information Exposure in Boot Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while updating the recovery message for eMMC devices, 1088 bytes of stack memory can potentially be leaked. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-01-01
CVE ID: CVE-2017-14872 State: PUBLISHED Published: 2018-07-06T17:00:00Z Last Updated: 2024-09-16T22:55:55.749Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Possible buffer overread while flashing meta image Description: While flashing a meta image, a buffer over-read can potentially occur when the number of images are out of the maximum range of 32 in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components - http
rogram Container: References: - https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components - https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=1daa83baa41d1e6291e89f69e6487695b6890c01
CVE ID: CVE-2017-14873 State: PUBLISHED Published: 2018-01-10T22:00:00Z Last Updated: 2024-09-16T17:38:09.782Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Improper Input Validation in Display Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the pp_pgc_get_config() graphics driver function, a kernel memory overwrite can potentially occur. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-01-01
CVE ID: CVE-2017-14874 State: REJECTED Published: 2021-11-23T19:58:42 Last Updated: 2021-11-23T19:58:42 Description: No description available.
CVE ID: CVE-2017-14875 State: PUBLISHED Published: 2018-03-30T21:00:00Z Last Updated: 2024-09-16T22:03:42.334Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Improper Validation of Array Index in Camera Description: In the handler for the ioctl command VIDIOC_MSM_ISP_DUAL_HW_LPM_MODE in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-05-23, a heap overread vulnerability exists. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=755261330733bb2440907a8407ed691c99451ddc - https://source.android.com/security/bulletin/pixel/2018-02-01
CVE ID: CVE-2017-14876 State: PUBLISHED Published: 2018-03-30T21:00:00Z Last Updated: 2024-09-16T22:03:06.557Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Improper Validation of Array Index in Camera Description: In msm_ispif_config_stereo() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-06-21, the parameter params->entries[i].vfe_intf comes from userspace without any bounds check which could potentially result in a kernel out-of-bounds write. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=f26dbd9d9491333766ba383044064b1304127ac0 - http
nces: - https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=f26dbd9d9491333766ba383044064b1304127ac0 - https://source.android.com/security/bulletin/pixel/2018-02-01
CVE ID: CVE-2017-14877 State: PUBLISHED Published: 2018-03-30T21:00:00Z Last Updated: 2024-09-16T19:09:13.445Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Use After Free in Data Description: While the IPA driver in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-08-31 is processing IOCTL commands there is no mutex lock of allocated memory. If one thread sends an ioctl cmd IPA_IOC_QUERY_RT_TBL_INDEX while another sends an ioctl cmd IPA_IOC_DEL_RT_RULE, a use-after-free condition may occur. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=ca395
yst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=ca395c15c49cf6463a39d197b6a9331d183d94cb - https://source.android.com/security/bulletin/pixel/2018-02-01
CVE ID: CVE-2017-14878 State: PUBLISHED Published: 2018-03-15T21:00:00 Last Updated: 2024-08-05T19:42:22.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a length variable which is used to copy data has a size of only 8 bits and can be exceeded resulting in a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-03-01 - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=27f1c544d6737bcb3dc4bb114badcd47ce946a8b - http://www.securityfocus.com/bi
or/qcom-opensource/wlan/qcacld-3.0/commit/?id=27f1c544d6737bcb3dc4bb114badcd47ce946a8b - http://www.securityfocus.com/bid/103254
CVE ID: CVE-2017-14879 State: PUBLISHED Published: 2018-01-10T22:00:00Z Last Updated: 2024-09-16T22:08:40.967Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Use of Out-of-range Pointer Offset in IPA Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, by calling an IPA ioctl and searching for routing/filer/hdr rule handle from ipa_idr pointer using ipa_idr_find() function, the wrong structure pointer can be returned resulting in a slab out of bound access in the IPA driver. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/secur
ess in the IPA driver. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-01-01
CVE ID: CVE-2017-14880 State: PUBLISHED Published: 2018-04-03T17:00:00Z Last Updated: 2024-09-16T16:54:00.287Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Time-of-check Time-of-use (TOCTOU) Race Condition in Data Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, while IPA WAN-driver is processing multiple requests from modem/user-space module, the global variable "num_q6_rule" does not have a mutex lock and thus can be accessed and modified by multiple threads. Additional Analyst Notes: - CVE Program Container: Ref
x lock and thus can be accessed and modified by multiple threads. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-04-01
CVE ID: CVE-2017-14881 State: PUBLISHED Published: 2018-03-30T21:00:00Z Last Updated: 2024-09-16T22:19:39.100Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Use After Free in Data Description: While calling the IPA IOCTL handler for IPA_IOC_ADD_HDR_PROC_CTX in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-13, a use-after-free condition may potentially occur. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-02-01 - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=81ea9c34f575422a78015535c619500c34b8a69c
CVE ID: CVE-2017-14882 State: PUBLISHED Published: 2018-03-15T21:00:00 Last Updated: 2024-08-05T19:42:21.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing VENDOR specific action frame in the function lim_process_action_vendor_specific(), a comparison is performed with the incoming action frame body without validating if the action frame body received is of valid length, potentially leading to an out-of-bounds access. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-03-01 - https://sourc
st Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-03-01 - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=cd10091f03f6255a47d7146eea5738f1f4ceea35 - http://www.securityfocus.com/bid/103254
CVE ID: CVE-2017-14883 State: PUBLISHED Published: 2018-03-30T21:00:00Z Last Updated: 2024-09-16T16:18:52.540Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Integer Overflow to Buffer Overflow in WLAN Description: In the function wma_unified_power_debug_stats_event_handler() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-18, if the value param_buf->num_debug_register received from the FW command buffer is close to max of uint32, then the computation performed using this variable to calculate stats_registers_len may overflow to a smaller value leading to less than required memory allocated for power_stats_results and
egisters_len may overflow to a smaller value leading to less than required memory allocated for power_stats_results and potentially a buffer overflow while copying the FW buffer to local buffer. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=3de34af4e2ca91e1a2260deb380b81620a631c85 - https://source.android.com/security/bulletin/pixel/2018-02-01
CVE ID: CVE-2017-14884 State: PUBLISHED Published: 2018-02-23T23:00:00Z Last Updated: 2024-09-16T18:24:33.204Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Copy without Checking Size of Input in WLAN Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, due to lack of bounds checking on the variable "data_len" from the function WLANQCMBR_McProcessMsg, a buffer overflow may potentially occur in WLANFTM_McProcessMsg. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-02-01 - http://www.securityfocus.com/bid/102974
CVE ID: CVE-2017-14885 State: PUBLISHED Published: 2018-03-15T21:00:00 Last Updated: 2024-08-05T19:42:21.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, wma_unified_link_peer_stats_event_handler function has a variable num_rates which represents the sum of all the peer_stats->num_rates. The current behavior in this function is to validate only the num_rates of the first peer stats (peer_stats->num_rates) against WMA_SVC_MSG_MAX_SIZE, but not the sum of all the peer's num_rates (num_rates) which may lead to a buffer overflow when the firmware buffer is copied in to t
m of all the peer's num_rates (num_rates) which may lead to a buffer overflow when the firmware buffer is copied in to the allocated buffer (peer_stats) as the size for the memory allocation - link_stats_results_size is based on num_rates. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-03-01 - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=44e992e169dbd601f95e845961cb2181b167a553 - http://www.securityfocus.com/bid/103254