Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-11251 State: PUBLISHED Published: 2018-05-18T19:00:00 Last Updated: 2024-08-05T08:01:52.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.7-23 Q16 x86_64 2018-01-24, there is a heap-based buffer over-read in ReadSUNImage in coders/sun.c, which allows attackers to cause a denial of service (application crash in SetGrayscaleImage in MagickCore/quantize.c) via a crafted SUN image file. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/05/msg00012.html - https://lists.debian.org/debian-lts-announce/2018/06/msg00004.html - https://usn.ubuntu.com/3681-1/ - https://github.com/ImageMagi
sts.debian.org/debian-lts-announce/2018/06/msg00004.html - https://usn.ubuntu.com/3681-1/ - https://github.com/ImageMagick/ImageMagick/issues/956 - https://www.debian.org/security/2018/dsa-4245
CVE ID: CVE-2018-11254 State: PUBLISHED Published: 2018-05-18T19:00:00Z Last Updated: 2024-09-17T02:16:43.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PoDoFo 0.9.5. There is an Excessive Recursion in the PdfPagesTree::GetPageNode() function of PdfPagesTree.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a crafted pdf file, a related issue to CVE-2017-8054. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1576174
CVE ID: CVE-2018-11255 State: PUBLISHED Published: 2018-05-18T19:00:00Z Last Updated: 2024-09-16T16:37:39.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PoDoFo 0.9.5. The function PdfPage::GetPageNumber() in PdfPage.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1575502
CVE ID: CVE-2018-11256 State: PUBLISHED Published: 2018-05-18T19:00:00Z Last Updated: 2024-09-16T19:56:31.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PoDoFo 0.9.5. The function PdfDocument::Append() in PdfDocument.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1575851
CVE ID: CVE-2018-11257 State: PUBLISHED Published: 2018-07-06T17:00:00Z Last Updated: 2024-09-16T19:10:44.429Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Permissions, Privileges, and Access Controls in TA Description: Permissions, Privileges, and Access Controls in TA in Snapdragon Mobile has an options that allows RPMB erase for secure devices in versions SD 210/SD 212/SD 205, SD 845, SD 850. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2018-11258 State: PUBLISHED Published: 2018-07-06T17:00:00Z Last Updated: 2024-09-16T23:02:07.265Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Use After Free in Multimedia Description: In ADSP RPC in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, a Use After Free condition can occur in versions MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDX20. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securitytrack
Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securitytracker.com/id/1041432
CVE ID: CVE-2018-11259 State: PUBLISHED Published: 2018-07-06T17:00:00Z Last Updated: 2024-09-17T00:57:03.674Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Improper Access Control of NAND-based EFS Description: Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From fastboot on a NAND-based device, the EFS partition can be erased. Apps processor then has non-secure world full read/write access to the partition until the modem boots and configures the EFS partition addresses in its MPU partition. Additional Analyst Notes: - CVE Program Container: References: - https://w
EFS partition addresses in its MPU partition. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2018-11260 State: PUBLISHED Published: 2018-11-27T18:00:00 Last Updated: 2024-08-05T08:01:52.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing a fast Initial link setup (FILS) connection request, integer overflow may lead to a buffer overflow when the key length is zero. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/08/06/august-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=9fd239116d9cb19a
etin - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=9fd239116d9cb19a18b3892b8a1f428636ca1453 - http://www.securitytracker.com/id/1041432
CVE ID: CVE-2018-11261 State: PUBLISHED Published: 2018-11-27T18:00:00 Last Updated: 2024-08-05T08:01:52.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, there is a possible Use-after-free issue in Media Codec process. Any application using codec service will be affected. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/08/06/august-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/platform/hardware/qcom/media/commit/?id=0e910e74e56f2a46f65dbc7694b160cd6e7f379a - https://source.code
urora.org/quic/la/platform/hardware/qcom/media/commit/?id=0e910e74e56f2a46f65dbc7694b160cd6e7f379a - https://source.codeaurora.org/quic/la/platform/hardware/qcom/media/commit/?id=d41a7a4c7d43fa67f2e4a487b8a1fb0aac38226d
CVE ID: CVE-2018-11262 State: PUBLISHED Published: 2018-09-04T16:00:00 Last Updated: 2024-08-05T08:01:52.861Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Incorrect Calculation of Buffer Size in Boot Description: In Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel while trying to find out total number of partition via a non zero check, there could be possibility where the 'TotalPart' could cross 'GptHeader->MaxPtCnt' and which could result in OOB write in patching GPT. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2
ing GPT. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/08/06/august-2018-code-aurora-security-bulletin - http://www.securityfocus.com/bid/106949 - https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=29ab5eb75bc9ed01466ab1a98e932e59fe27ad42
CVE ID: CVE-2018-11263 State: PUBLISHED Published: 2018-09-06T14:00:00 Last Updated: 2024-08-05T08:01:52.844Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Improper Validation of Array Index in WLAN Description: In all Android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel, radio_id is received from the FW and is used to access the buffer to copy the radio stats received for each radio from FW. If the radio_id received from the FW is greater than or equal to maximum, an OOB write will occur. On supported Google Pixel and Nexus devices, this has been addressed in security patch level 2018-08-05. A
e will occur. On supported Google Pixel and Nexus devices, this has been addressed in security patch level 2018-08-05. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/08/06/august-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=476ad571ec5b42c42bb1ce9468f18c7e996646ed - https://source.android.com/security/bulletin/pixel/2018-08-01
CVE ID: CVE-2018-11264 State: PUBLISHED Published: 2018-11-28T15:00:00 Last Updated: 2024-08-05T08:01:52.843Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer Copy Without Checking Size of Input in Biometrics Description: Possible buffer overflow in Ontario fingerprint code due to lack of input validation for the parameters coming into TZ from HLOS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDA660. Additional Analyst Notes: - CVE Program Container: References
D 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDA660. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securityfocus.com/bid/105838
CVE ID: CVE-2018-11265 State: PUBLISHED Published: 2018-09-18T18:00:00 Last Updated: 2024-08-05T08:01:52.876Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Copy Without Checking Size of Input in Core Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, possible buffer overflow while incrementing the log_buf of type uint64_t in memcpy function, since the log_buf pointer can access the memory beyond the size to store the data after pointer increment. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/09/04
Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=b211b051d7ca226d96b70defe10ac318f768b5b2 - https://source.android.com/security/bulletin/pixel/2018-09-01#qualcomm-components
CVE ID: CVE-2018-11266 State: PUBLISHED Published: 2018-11-27T18:00:00 Last Updated: 2024-08-05T08:01:52.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper input validation can lead to an improper access to already freed up dci client entries while closing dci client. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/08/06/august-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=8e5749b17c2024af317f06e08aae455af9b79bd0 - https://source.codeaurora.org
deaurora.org/quic/la/kernel/msm-3.18/commit/?id=8e5749b17c2024af317f06e08aae455af9b79bd0 - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=21dd238ad58362877e341d905bea1c7cf273f19a
CVE ID: CVE-2018-11267 State: PUBLISHED Published: 2018-09-20T13:00:00 Last Updated: 2024-08-05T08:01:52.834Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Improper Validation of Array Index in Core Description: In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9615, MDM9640, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDX20, Snapdragon_High_Med_2016, when sending an malformed XML data to deviceprogrammer
SDM630, SDM632, SDM636, SDM660, SDX20, Snapdragon_High_Med_2016, when sending an malformed XML data to deviceprogrammer/firehose it may do an out of bounds buffer write allowing a region of memory to be filled with 0x20. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securityfocus.com/bid/106128
CVE ID: CVE-2018-11268 State: PUBLISHED Published: 2018-09-20T13:00:00 Last Updated: 2024-08-05T08:01:52.864Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Improper Validation of Array Index in Storage Description: In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710, SDX20, Snapdragon_High_Med_2016, a potential buffer overflow exists when parsing TFTP options
2, SDM636, SDM660, SDM710, SDX20, Snapdragon_High_Med_2016, a potential buffer overflow exists when parsing TFTP options. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securityfocus.com/bid/106845
CVE ID: CVE-2018-11269 State: PUBLISHED Published: 2018-09-20T13:00:00 Last Updated: 2024-08-05T08:01:52.896Z Vendors: Qualcomm, Inc. Products: SSnapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Improper Validation of Array Index in Storage Description: In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710, SDX20, Snapdragon_High_Med_2016, a potential buffer overflow exists when parsing TFTP option
32, SDM636, SDM660, SDM710, SDX20, Snapdragon_High_Med_2016, a potential buffer overflow exists when parsing TFTP options. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securityfocus.com/bid/105838
CVE ID: CVE-2018-11270 State: PUBLISHED Published: 2018-09-18T18:00:00 Last Updated: 2024-08-05T08:01:52.815Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Double Free in Wired Connectivity Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, memory allocated with devm_kzalloc is automatically released by the kernel if the probe function fails with an error code. This may result in data corruption. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin - https://so
ces: - https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin - https://source.android.com/security/bulletin/2018-09-01#qualcomm-components - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=d475e1aba3f8be3b135199014549ff9d5c315e1d
CVE ID: CVE-2018-11271 State: PUBLISHED Published: 2019-05-24T16:32:05 Last Updated: 2024-08-05T08:01:52.822Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables Problem Types: Improper Authentication in Remote Lock and Wipe Description: Improper authentication can happen on Remote command handling due to inappropriate handling of events in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MSM89
, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SM7150, Snapdragon_High_Med_2016, SXR1130 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins#_CVE-2018-11271
CVE ID: CVE-2018-11273 State: PUBLISHED Published: 2018-09-18T18:00:00 Last Updated: 2024-08-05T08:01:52.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, 'voice_svc_dev' is allocated as a device-managed resource. If error 'cdev_alloc_err' occurs, 'device_destroy' will free all associated resources, including 'voice_svc_dev' leading to a double free. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/kernel/msm-3.18/com
etin/2018/09/04/september-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=789d4d21c3f1818dcbf74da4a051598e8f53676c - https://source.codeaurora.org/quic/la/kernel/msm-4.9/commit/?id=f34f6271362484c1f87f4176e72a3bfb80ee7711 - https://source.android.com/security/bulletin/pixel/2018-09-01#qualcomm-components
CVE ID: CVE-2018-11274 State: PUBLISHED Published: 2018-09-18T18:00:00 Last Updated: 2024-08-05T08:01:52.881Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Copy Without Checking Size of Input in Audio Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, buffer overflow may occur when payload size is extremely large. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=d738e60471cca6aa7a0b06a
-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=d738e60471cca6aa7a0b06a6f5cfb89ad66d1766
CVE ID: CVE-2018-11275 State: PUBLISHED Published: 2018-09-18T18:00:00 Last Updated: 2024-08-05T08:01:52.905Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Information Exposure in Boot Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, when flashing image using FastbootLib if size is not divisible by block size, information leak occurs. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=bf0261ab128f28763258c620bc95ca379a286b59 - https://www.codeaurora.org/security-bulletin/2018/09/04/septemb
k2/commit/?id=bf0261ab128f28763258c620bc95ca379a286b59 - https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin - http://www.securityfocus.com/bid/106949
CVE ID: CVE-2018-11276 State: PUBLISHED Published: 2018-09-18T18:00:00 Last Updated: 2024-08-05T08:01:52.872Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Double Free Issue in Kernel Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, double free of memory allocation is possible in Kernel when it explicitly tries to free that memory on driver probe failure, since memory allocated is automatically freed on probe. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulle
ntainer: References: - https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin - https://source.android.com/security/bulletin/pixel/2018-09-01#qualcomm-components - https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=83a44ca6057bf9c1e36515cded28edc32a4a1501
CVE ID: CVE-2018-11277 State: PUBLISHED Published: 2018-09-20T13:00:00 Last Updated: 2024-08-05T08:01:52.986Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Permission Issues in Telephony Description: In Snapdragon (Automobile, Mobile, Wear) in version MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SDA660, the com.qualcomm.embms is a vendor package deployed in the system image which has an inadequate permission level and allows any application installed from Play Store to request this permission at install-time. The system application i
nd allows any application installed from Play Store to request this permission at install-time. The system application interfaces with the Radio Interface Layer leading to potential access control issue. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2018-11278 State: PUBLISHED Published: 2018-09-18T18:00:00 Last Updated: 2024-08-05T08:01:52.883Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Over-read in Video Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Venus HW searches for start code when decoding input bit stream buffers. If start code is not found in entire buffer, there is over-fetch beyond allocation length. This leads to page fault. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/platform/hardware/qcom/media/commit/?id=6c7dbdb2f067
gram Container: References: - https://source.codeaurora.org/quic/la/platform/hardware/qcom/media/commit/?id=6c7dbdb2f067bf844beef2c41d9d67cacc3adfa6 - https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin
CVE ID: CVE-2018-11279 State: PUBLISHED Published: 2019-01-18T22:00:00 Last Updated: 2024-08-05T08:01:52.816Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer Copy Without Checking Size of Input in Modem Description: Lack of check of input size can make device memory get corrupted because of buffer overflow in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 636, SD 650/52, SD 712 / SD
0/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 810, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDM439, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securityfocus.com/bid/106128