Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
d memory access. in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9379, QCA9886, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 820, SD 820A, SD 835, SDX20, SDX24, Snapdragon_High_Med_2016 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins#_CVE-2018-11936
CVE ID: CVE-2018-11937 State: PUBLISHED Published: 2019-05-24T16:35:54 Last Updated: 2024-08-05T08:24:03.308Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile Problem Types: Buffer Over-read Issue in WLAN Description: Lack of input validation before copying can lead to a buffer over read in WLAN function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845
S605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24, SM7150 Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2019/04/01/april-2019-code-aurora-security-bulletin
CVE ID: CVE-2018-11938 State: PUBLISHED Published: 2019-02-25T23:00:00 Last Updated: 2024-08-05T08:24:03.518Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking Problem Types: Buffer Copy Without Checking Size of Input in Trusted Application Environment Description: Improper input validation for argument received from HLOS can lead to buffer overflows and unexpected behavior in Snapdragon Auto, Snapdragon Compute, Snapdrago
eceived from HLOS can lead to buffer overflows and unexpected behavior in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in versions IPQ8074, MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCA8081, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM439
2, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securityfocus.com/bid/106845
CVE ID: CVE-2018-11939 State: PUBLISHED Published: 2019-06-14T17:02:09 Last Updated: 2024-08-05T08:24:03.567Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile Problem Types: Use After Free in WLAN Description: Use after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, QCA6574AU, SD 210/SD 212/SD 205, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SDX20 Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin
820, SDX20 Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2019/05/06/may-2019-code-aurora-security-bulletin
CVE ID: CVE-2018-11940 State: PUBLISHED Published: 2019-05-24T16:36:15 Last Updated: 2024-08-05T08:24:03.470Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile Problem Types: Buffer Copy Without Checking Size of Input in WLAN Description: Lack of check in length before using memcpy in WLAN function can lead to OOB access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS605, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, S
U, QCS605, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24, SXR1130 Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2019/04/01/april-2019-code-aurora-security-bulletin
CVE ID: CVE-2018-11941 State: REJECTED Published: 2019-08-30T15:37:25 Last Updated: 2019-08-30T15:37:25 Description: No description available.
CVE ID: CVE-2018-11942 State: PUBLISHED Published: 2019-06-14T17:02:09 Last Updated: 2024-08-05T08:24:03.411Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking Problem Types: Information Exposure in WLAN Description: Failure to initialize the reserved memory which is sent to the firmware might lead to exposure of 1 byte of uninitialized kernel SKB memory to FW in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, IPQ8074
Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, IPQ8074, MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24 Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2019/05/06/may-2019-code-aurora-security-bulletin
CVE ID: CVE-2018-11943 State: PUBLISHED Published: 2018-11-27T18:00:00 Last Updated: 2024-08-05T08:24:03.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing fastboot flash command, memory leak or unexpected behavior may occur due to processing of unintialized data buffers. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=45734409dd45e6b117f7f9f7e11047f67a7accc1 - https://www.codeaurora.org/security-bulletin/2018/11/05/november-2018-code-aurora-forum-security-bulletin
CVE ID: CVE-2018-11944 State: REJECTED Published: 2021-11-23T19:58:58 Last Updated: 2021-11-23T19:58:58 Description: No description available.
CVE ID: CVE-2018-11945 State: PUBLISHED Published: 2019-02-25T23:00:00 Last Updated: 2024-08-05T08:24:03.497Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables Problem Types: Buffer Copy Without Checking Size of Input in MMCP Description: Improper input validation in wireless service messaging module for data received from broadcast messages can lead to heap overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industr
agon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in versions MDM9150, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130. Additional Analyst Notes: - CVE Program Container: Refere
439, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securityfocus.com/bid/106845
CVE ID: CVE-2018-11946 State: PUBLISHED Published: 2018-11-27T18:00:00 Last Updated: 2024-08-05T08:24:02.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, the UPnP daemon should not be running out of box because it enables port forwarding without authentication. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/qsdk/oss/system/feeds/routing/commit/?id=3f625190fb469cb56de619eae6b5ca8db2463d5b - https://www.codeaurora.org/security-bulletin/2018/11/05/november-2018-code-aurora-forum-security-bulletin
CVE ID: CVE-2018-11947 State: PUBLISHED Published: 2019-06-14T17:02:09 Last Updated: 2024-08-05T08:24:03.511Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking Problem Types: Information Exposure in WLAN Description: The txrx stats req might be double freed in the pdev detach when the host driver is unloading in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and
onsumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ8064, MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCA9558, QCA9880, QCA9886, QCA9980, QCS405, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24 Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2019/05/06/may-2019-code-aurora-security-bulletin
CVE ID: CVE-2018-11948 State: PUBLISHED Published: 2019-02-25T23:00:00 Last Updated: 2024-08-05T08:24:03.548Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music Problem Types: Improper Validation of Array Index in Content Protection Description: Exceeding the limit of usage entries are not tracked and the information will be lost causing the content to lose continuity in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdr
apdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in versions MSM8996AU, QCS605, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securityfocus.com/bid/106845
CVE ID: CVE-2018-11949 State: PUBLISHED Published: 2019-05-24T16:44:16 Last Updated: 2024-08-05T08:24:03.371Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile Problem Types: Use of Uninitialized Variable in WLAN Description: Failure to initialize the extra buffer can lead to an out of buffer access in WLAN function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850
S605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24 Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2019/04/01/april-2019-code-aurora-security-bulletin
CVE ID: CVE-2018-11950 State: PUBLISHED Published: 2018-10-26T13:00:00 Last Updated: 2024-08-05T08:24:03.379Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Improper Input Validation in Core Description: Unapproved TrustZone applications can be loaded and executed in Snapdragon Mobile in version SD 845, SD 850 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2018-11951 State: PUBLISHED Published: 2018-10-26T13:00:00 Last Updated: 2024-08-05T08:24:03.544Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Improper Access Control in Core Description: Improper access control in core module lead XBL_LOADER performs the ZI region clear for QTEE instead of XBL_SEC in Snapdragon Mobile in version SD 845, SD 850. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2018-11952 State: PUBLISHED Published: 2024-11-26T08:55:24.910Z Last Updated: 2024-11-26T14:09:22.979Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-287 Description: An image with a version lower than the fuse version may potentially be booted lead to improper authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html
CVE ID: CVE-2018-11953 State: PUBLISHED Published: 2019-05-24T16:44:16 Last Updated: 2024-08-05T08:24:03.417Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables Problem Types: Buffer Over-read Issue in WLAN Description: While processing ssid IE length from remote AP, possible out-of-bounds access may occur due to crafted ssid IE length in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Sna
ty, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 650/52, SD 820, SD 820A, SDM439, SDX20 Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2019/04/01/april-2019-code-aurora-security-bulletin
CVE ID: CVE-2018-11954 State: REJECTED Published: 2021-12-20T22:43:18 Last Updated: 2021-12-20T22:43:18 Description: No description available.
CVE ID: CVE-2018-11955 State: PUBLISHED Published: 2019-06-14T17:02:09 Last Updated: 2024-08-05T08:24:03.587Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables Problem Types: Buffer Over-read in WLAN Description: Lack of check on length of reason-code fetched from payload may lead driver access the memory not allocated to the frame and results in out of bound read in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile,
onsumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 665, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM439, SDM660, SDX20, SDX24 Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2019/05/06/may-2019-cod
alyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2019/05/06/may-2019-code-aurora-security-bulletin
CVE ID: CVE-2018-11956 State: PUBLISHED Published: 2018-11-27T18:00:00 Last Updated: 2024-08-05T08:24:03.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper mounting lead to device node and executable to be run from /dsp/ which presents a potential security issue. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/le/meta-qti-bsp/commit/?id=ecd2fb4ab9e2a6851add554af03cebe337345c44 - https://www.codeaurora.org/security-bulletin/2018/11/05/november-2018-code-aurora-forum-security-bulletin
CVE ID: CVE-2018-11957 State: REJECTED Published: 2021-11-23T19:58:58 Last Updated: 2021-11-23T19:58:58 Description: No description available.
CVE ID: CVE-2018-11958 State: PUBLISHED Published: 2019-04-04T15:09:49 Last Updated: 2024-08-05T08:24:03.478Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music Problem Types: Improper Access Control vulnerability in Content Protection Description: Insufficient protection of keys in keypad can lead HLOS to gain access to confidential keypad input data in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9206, MDM9607, MDM9650, MDM9655, Qua
r IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9206, MDM9607, MDM9650, MDM9655, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2018-11959 State: REJECTED Published: 2019-08-30T15:45:23 Last Updated: 2019-08-30T15:45:23 Description: No description available.
CVE ID: CVE-2018-11960 State: PUBLISHED Published: 2018-12-20T15:00:00 Last Updated: 2024-08-05T08:24:03.372Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Use After Free in HWEngines Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, A use after free condition can occur in the SPS driver which can lead to error in kernel. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106136 - https://www.codeaurora.org/security-bulletin/2018/12/03/december-2018-code-aurora-security-bulletin
CVE ID: CVE-2018-11961 State: PUBLISHED Published: 2018-12-20T15:00:00 Last Updated: 2024-08-05T08:24:03.370Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Copy Without Checking Size of Input in GPS. Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Possibility of accessing out of bound vector index When updating some GNSS configurations. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106136 - https://www.codeaurora.org/security-bulletin/2018/12/03/december-2018-code-aurora-security-bulletin
CVE ID: CVE-2018-11962 State: PUBLISHED Published: 2019-02-11T15:00:00 Last Updated: 2024-08-05T08:24:03.602Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Use After Free in Audio Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Use-after-free issue in heap while loading audio effects config in audio effects factory. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2019/01/07/january-2019-code-aurora-security-bulletin - http://www.securityfocus.com/bid/106496
CVE ID: CVE-2018-11963 State: PUBLISHED Published: 2018-12-20T15:00:00 Last Updated: 2024-08-05T08:24:03.463Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Over-read in Camera Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Buffer overread may occur due to non-null terminated strings while processing vsprintf in camera jpeg driver. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106136 - https://www.codeaurora.org/security-bulletin/2018/12/03/december-2018-code-aurora-security-bulletin
CVE ID: CVE-2018-11964 State: PUBLISHED Published: 2018-12-20T15:00:00 Last Updated: 2024-08-05T08:24:03.615Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Permissions, Privileges and Access Controls in Yocto Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Exposing the hashed content in /etc/passwd may lead to security issue. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/12/03/december-2018-code-aurora-security-bulletin
CVE ID: CVE-2018-11965 State: PUBLISHED Published: 2018-12-20T15:00:00 Last Updated: 2024-08-05T08:24:03.521Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Improper Access Controls in Yocto Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Anyone can execute proptrigger.sh which will lead to change in properties. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/12/03/december-2018-code-aurora-security-bulletin