Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-5836 State: PUBLISHED Published: 2016-06-29T14:00:00 Last Updated: 2024-08-06T01:15:10.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: The oEmbed protocol implementation in WordPress before 4.5.3 allows remote attackers to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8523 - https://wordpress.org/news/2016/06/wordpress-4-5-3/ - https://codex.wordpress.org/Version_4.5.3 - http://www.securitytracker.com/id/1036163 - http://www.securityfocus.com/bid/91363 - https://lists.debian.org/debian-lts-announce/2018/07/msg00046.html
CVE ID: CVE-2016-5837 State: PUBLISHED Published: 2016-06-29T14:00:00 Last Updated: 2024-08-06T01:15:10.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress before 4.5.3 allows remote attackers to bypass intended access restrictions and remove a category attribute from a post via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/news/2016/06/wordpress-4-5-3/ - https://codex.wordpress.org/Version_4.5.3 - http://www.securitytracker.com/id/1036163 - https://wpvulndb.com/vulnerabilities/8520 - http://www.securityfocus.com/bid/91365 - http://www.debian.org/security/2016/dsa-3639
CVE ID: CVE-2016-5838 State: PUBLISHED Published: 2016-06-29T14:00:00 Last Updated: 2024-08-06T01:15:10.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress before 4.5.3 allows remote attackers to bypass intended password-change restrictions by leveraging knowledge of a cookie. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/news/2016/06/wordpress-4-5-3/ - https://wpvulndb.com/vulnerabilities/8524 - https://codex.wordpress.org/Version_4.5.3 - http://www.securitytracker.com/id/1036163 - http://www.securityfocus.com/bid/91367 - http://www.debian.org/security/2016/dsa-3639
CVE ID: CVE-2016-5839 State: PUBLISHED Published: 2016-06-29T14:00:00 Last Updated: 2024-08-06T01:15:09.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress before 4.5.3 allows remote attackers to bypass the sanitize_file_name protection mechanism via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/news/2016/06/wordpress-4-5-3/ - https://codex.wordpress.org/Version_4.5.3 - http://www.securitytracker.com/id/1036163 - http://www.securityfocus.com/bid/91364 - http://www.debian.org/security/2016/dsa-3639
CVE ID: CVE-2016-5840 State: PUBLISHED Published: 2016-06-30T16:00:00 Last Updated: 2024-08-06T01:15:09.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: hotfix_upload.cgi in Trend Micro Deep Discovery Inspector (DDI) 3.7, 3.8 SP1 (3.81), and 3.8 SP2 (3.82) allows remote administrators to execute arbitrary code via shell metacharacters in the filename parameter of the Content-Disposition header. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-16-373 - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000103.html - http://jvn.jp/en/jp/JVN55428526/index.html - https://www.exploit-db.com/exploits/40180/ - http://esuppo
16-000103.html - http://jvn.jp/en/jp/JVN55428526/index.html - https://www.exploit-db.com/exploits/40180/ - http://esupport.trendmicro.com/solution/en-US/1114281.aspx
CVE ID: CVE-2016-5841 State: PUBLISHED Published: 2016-12-13T15:00:00 Last Updated: 2024-08-06T01:15:08.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in MagickCore/profile.c in ImageMagick before 7.0.2-1 allows remote attackers to cause a denial of service (segmentation fault) or possibly execute arbitrary code via vectors involving the offset variable. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/commits/7.0.2-1 - http://www.securityfocus.com/bid/91394 - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - http://www.openwall.com/lists/oss-security/2016/06/25/3 - htt
technetwork/topics/security/bulletinjul2016-3090568.html - http://www.openwall.com/lists/oss-security/2016/06/25/3 - https://github.com/ImageMagick/ImageMagick/commit/d8ab7f046587f2e9f734b687ba7e6e10147c294b - http://www.openwall.com/lists/oss-security/2016/06/23/1
CVE ID: CVE-2016-5842 State: PUBLISHED Published: 2016-12-13T15:00:00 Last Updated: 2024-08-06T01:15:10.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: MagickCore/property.c in ImageMagick before 7.0.2-1 allows remote attackers to obtain sensitive memory information via vectors involving the q variable, which triggers an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/commits/7.0.2-1 - http://www.securityfocus.com/bid/91394 - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - https://security.gentoo.org/glsa/201611-21 - http://www.openwall.com/lists/oss-security/2016/
etinjul2016-3090568.html - https://security.gentoo.org/glsa/201611-21 - http://www.openwall.com/lists/oss-security/2016/06/25/3 - https://github.com/ImageMagick/ImageMagick/commit/d8ab7f046587f2e9f734b687ba7e6e10147c294b - http://www.openwall.com/lists/oss-security/2016/06/23/1
CVE ID: CVE-2016-5843 State: PUBLISHED Published: 2016-09-17T01:00:00 Last Updated: 2024-08-06T01:15:10.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before 4.0.5, and 5.x before 5.0.5 in Open Ticket Request System (OTRS) allow remote attackers to execute arbitrary SQL commands via crafted search parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.otrs.com/security-advisory-2016-01-security-update-otrs-faq-package/ - http://www.securityfocus.com/bid/93019 - https://github.com/OTRS/FAQ/commit/b805703e7b7725d1f3040bb626a4c4dd845ee9e3 - https://github.com/OTRS/F
.com/bid/93019 - https://github.com/OTRS/FAQ/commit/b805703e7b7725d1f3040bb626a4c4dd845ee9e3 - https://github.com/OTRS/FAQ/commit/8c9d63bd0297adda760330805c31afc130861557 - https://github.com/OTRS/FAQ/commit/3700f75c67f6ed1d39bc213445c6d12a458e1af9
CVE ID: CVE-2016-5844 State: PUBLISHED Published: 2016-09-21T14:00:00 Last Updated: 2024-08-06T01:15:10.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a crafted ISO file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libarchive/libarchive/commit/3ad08e01b4d253c66ae56414886089684155af22 - https://github.com/libarchive/libarchive/issues/717 - http://rhn.redhat.com/errata/RHSA-2016-1844.html - https://blog.fuzzing-project.org/48-Out-of-bounds-read-and-signed-integer-overflow-in-libarchive.html - http://w
.html - https://blog.fuzzing-project.org/48-Out-of-bounds-read-and-signed-integer-overflow-in-libarchive.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://www.securityfocus.com/bid/91808 - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - http://www.openwall.com/lists/oss-security/2016/06/24/4 - http://www.openwall.com/lists/oss-security/2016/06/23/6 - http://rhn.redhat.com/errata/RHSA-2016-1850.html - https://bugzilla.redhat.com/show_bug.cgi?id=1350280 - https://security.gentoo.org/glsa/201701-03 - http://www.debian.org/security/2016/dsa-3657 - http://www.securitytracker.com/id/1036173
CVE ID: CVE-2016-5845 State: PUBLISHED Published: 2016-08-12T16:00:00 Last Updated: 2024-08-06T01:15:09.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP SAPCAR does not check the return value of file operations when extracting files, which allows remote attackers to cause a denial of service (program crash) via an invalid file name in an archive file, aka SAP Security Note 2312905. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/40230/ - http://seclists.org/fulldisclosure/2016/Aug/46 - http://www.securityfocus.com/bid/92406 - https://www.onapsis.com/blog/denial-service-attacks-sap-security-notes-august-2016 - http://www.
tyfocus.com/bid/92406 - https://www.onapsis.com/blog/denial-service-attacks-sap-security-notes-august-2016 - http://www.securityfocus.com/archive/1/539180/100/0/threaded - http://packetstormsecurity.com/files/138284/SAP-CAR-Archive-Tool-Denial-Of-Service-Security-Bypass.html - https://www.coresecurity.com/advisories/sap-car-multiple-vulnerabilities
CVE ID: CVE-2016-5847 State: PUBLISHED Published: 2016-08-12T16:00:00 Last Updated: 2024-08-06T01:15:09.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP SAPCAR allows local users to change the permissions of arbitrary files and consequently gain privileges via a hard link attack on files extracted from an archive, possibly related to SAP Security Note 2327384. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/40230/ - http://seclists.org/fulldisclosure/2016/Aug/46 - http://www.securityfocus.com/bid/92406 - http://www.securityfocus.com/archive/1/539180/100/0/threaded - http://packetstormsecurity.com/files/138284/SAP-CAR-Arc
- http://www.securityfocus.com/archive/1/539180/100/0/threaded - http://packetstormsecurity.com/files/138284/SAP-CAR-Archive-Tool-Denial-Of-Service-Security-Bypass.html - https://www.coresecurity.com/advisories/sap-car-multiple-vulnerabilities
CVE ID: CVE-2016-5848 State: PUBLISHED Published: 2016-07-04T16:00:00 Last Updated: 2024-08-06T01:15:10.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens SICAM PAS before 8.07 does not properly restrict password data in the database, which makes it easier for local users to calculate passwords by leveraging unspecified database privileges. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-182-02 - http://www.securityfocus.com/bid/91525 - http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-444217.pdf
CVE ID: CVE-2016-5849 State: PUBLISHED Published: 2016-07-04T16:00:00 Last Updated: 2024-08-06T01:15:09.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens SICAM PAS through 8.07 allows local users to obtain sensitive configuration information by leveraging database stoppage. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-182-02 - http://www.securityfocus.com/bid/91525 - http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-444217.pdf
CVE ID: CVE-2016-5850 State: PUBLISHED Published: 2016-07-12T19:00:00 Last Updated: 2024-08-06T01:15:08.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the volume backup service module in Huawei Public Cloud Solution before 1.0.5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160629-01-publiccloud-en - http://www.securityfocus.com/bid/91513
CVE ID: CVE-2016-5851 State: PUBLISHED Published: 2016-12-21T00:00:00 Last Updated: 2024-08-06T01:15:10.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: python-docx before 0.8.6 allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/06/28/7 - http://www.openwall.com/lists/oss-security/2016/06/28/8 - https://github.com/python-openxml/python-docx/blob/v0.8.6/HISTORY.rst - http://www.securityfocus.com/bid/91485 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FFMOH7ZPOPQ
id/91485 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FFMOH7ZPOPQWNJGUZOS5LXX4MGNRXXT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XU2WSYRNB7CLBBFCGSX34XHACTA2SWDZ/ - https://github.com/python-openxml/python-docx/commit/61b40b161b64173ab8e362aec1fd197948431beb
CVE ID: CVE-2016-5852 State: PUBLISHED Published: 2016-11-08T20:37:00 Last Updated: 2024-08-06T01:15:10.785Z Vendors: n/a Products: Quadro, NVS, GeForce (all versions) Problem Types: Escalation of Privileges Description: For the NVIDIA Quadro, NVS, and GeForce products, GFE GameStream and NVTray Plugin unquoted service path vulnerabilities are examples of the unquoted service path vulnerability in Windows. A successful exploit of a vulnerable service installation can enable malicious code to execute on the system at the system/user privilege level. The CVE-2016-5852 ID is for the NVTray Plugin unquoted service path. Additional Analyst Notes: - CVE Program Container: References: - http://nvid
or the NVTray Plugin unquoted service path. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4213 - https://support.lenovo.com/us/en/product_security/ps500070 - http://www.securityfocus.com/bid/93251
CVE ID: CVE-2016-5853 State: PUBLISHED Published: 2017-08-16T15:00:00Z Last Updated: 2024-09-16T18:38:18.773Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Detection of Error Condition Without Action in Audio Description: In an audio driver in all Qualcomm products with Android releases from CAF using the Linux kernel, when a sanity check encounters a length value not in the correct range, an error message is printed, but code execution continues in the same way as for a correct length value. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-05-01 - http://www.securityfocus.com/bid/98178 - https://www.c
nces: - https://source.android.com/security/bulletin/2017-05-01 - http://www.securityfocus.com/bid/98178 - https://www.codeaurora.org/detection-error-condition-without-proper-action-msmds2dapparamvisualizercontrolget-cve-2016-5853 - https://source.codeaurora.org/quic/la//kernel/msm-4.4/commit/?id=a8f3b894de319718aecfc2ce9c691514696805be
CVE ID: CVE-2016-5854 State: PUBLISHED Published: 2017-08-16T15:00:00Z Last Updated: 2024-09-17T01:16:20.139Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Information Exposure in Secure Processor Description: In a driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, kernel heap memory can be exposed to userspace. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98219 - https://source.android.com/security/bulletin/2017-05-01 - https://source.codeaurora.org/quic/la//kernel/msm-4.4/commit/?id=28d23d4d7999f683b27b6e0c489635265b67a4c9
CVE ID: CVE-2016-5855 State: PUBLISHED Published: 2017-08-16T15:00:00Z Last Updated: 2024-09-16T18:29:34.591Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Buffer Over-read in Secure Processor Description: In a driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a user-supplied buffer is casted to a structure without checking if the source buffer is large enough. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la//kernel/msm-4.4/commit/?id=a5edb54e93ba85719091fe2bc426d75fa7059834 - http://www.securityfocus.com/bid/98220 - https://source.android.com/security/bulletin/2017-05-01
CVE ID: CVE-2016-5856 State: PUBLISHED Published: 2017-04-12T22:00:00 Last Updated: 2024-08-06T01:15:10.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: Drivers/soc/qcom/spcom.c in the Qualcomm SPCom driver in the Android kernel 2017-03-05 allows local users to gain privileges, a different vulnerability than CVE-2016-5857. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-03-01 - http://www.securitytracker.com/id/1037968 - https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=0c0622914ba53cdcb6e79e85f64bfdf7762c0368
CVE ID: CVE-2016-5857 State: PUBLISHED Published: 2017-03-20T16:00:00 Last Updated: 2024-08-06T01:15:10.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Qualcomm SPCom driver in Android before 7.0 allows local users to execute arbitrary code within the context of the kernel via a crafted application, aka Android internal bug 34386529 and Qualcomm internal bug CR#1094140. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-03-01 - http://www.securitytracker.com/id/1037968
CVE ID: CVE-2016-5858 State: PUBLISHED Published: 2017-08-16T15:00:00Z Last Updated: 2024-09-17T01:01:48.857Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Improper Validation of Array Index in Audio Description: In an ioctl handler in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a user supplies a value too large, then an out-of-bounds read occurs. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=afc5bea71bc8f251dad1104568383019f4923af6 - https://source.android.com/security/bulletin/2017-05-01 - http://www.securityfocus.com/bid/98215 - https://sourc
23af6 - https://source.android.com/security/bulletin/2017-05-01 - http://www.securityfocus.com/bid/98215 - https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=3154eb1d263b9c3eab2c9fa8ebe498390bf5d711
CVE ID: CVE-2016-5859 State: PUBLISHED Published: 2017-08-16T15:00:00Z Last Updated: 2024-09-17T01:40:50.943Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Integer Overflow to Buffer Overflow in Audio Description: In a sound driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a function is called with a very large length, an integer overflow could occur followed by a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-05-01 - https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=97fdb441a9fb330a76245e473bc1a2155c809ebe - http://www.secu
s://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=97fdb441a9fb330a76245e473bc1a2155c809ebe - http://www.securityfocus.com/bid/98175
CVE ID: CVE-2016-5860 State: PUBLISHED Published: 2017-08-16T15:00:00Z Last Updated: 2024-09-16T22:02:01.554Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Integer Overflow to Buffer Overflow in Audio Description: In an audio driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a function is called with a very large length, an integer overflow could occur followed by a heap buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la//kernel/msm-4.4/commit/?id=9f91ae0d7203714fc39ae78e1f1c4fd71ed40498 - http://www.securityfocus.com/bid/98169 - https://source.android.com/
mmit/?id=9f91ae0d7203714fc39ae78e1f1c4fd71ed40498 - http://www.securityfocus.com/bid/98169 - https://source.android.com/security/bulletin/2017-05-01
CVE ID: CVE-2016-5861 State: PUBLISHED Published: 2017-08-16T15:00:00Z Last Updated: 2024-09-17T02:52:01.817Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Buffer Copy without Checking Size of Input in Display Description: In a display driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a variable controlled by userspace is used to calculate offsets and sizes for copy operations, which could result in heap overflow. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securitytracker.com/id/1038623 - https://source.codeaurora.org/quic/la//kernel/msm-
ity/bulletin/2017-06-01 - http://www.securitytracker.com/id/1038623 - https://source.codeaurora.org/quic/la//kernel/msm-4.4/commit/?id=cf3c97b8b6165f13810e530068fbf94b07f1f77d
CVE ID: CVE-2016-5862 State: PUBLISHED Published: 2017-08-16T15:00:00Z Last Updated: 2024-09-16T23:36:34.694Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Untrusted Pointer Dereference in Audio Description: When a control related to codec is issued from userspace in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, the type casting is done to the container structure instead of the codec's individual structure, resulting in a device restart after kernel crash occurs. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98194 - https://source.codeaurora.org/quic/la//kernel/msm-4.4/commit/?id=41
ferences: - http://www.securityfocus.com/bid/98194 - https://source.codeaurora.org/quic/la//kernel/msm-4.4/commit/?id=4199451e83729a3add781eeafaee32994ff65b04 - https://source.android.com/security/bulletin/2017-05-01
CVE ID: CVE-2016-5863 State: PUBLISHED Published: 2017-08-16T15:00:00Z Last Updated: 2024-09-16T19:40:20.392Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Improper Validation of Array Index in USB Description: In an ioctl handler in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, several sanity checks are missing which can lead to out-of-bounds accesses. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=daf0acd54a6a80de227baef9a06285e4aa5f8c93 - https://source.android.com/security/bulletin/2017-07-01 - http://www.securityfocus.com/bid/99465
CVE ID: CVE-2016-5864 State: PUBLISHED Published: 2017-08-16T15:00:00Z Last Updated: 2024-09-17T01:16:55.066Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Integer Overflow to Buffer Overflow in Audio Description: In an audio driver function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, some parameters are from userspace, and if they are set to a large value, integer overflow is possible followed by buffer overflow. In another function, a missing check for a lower bound may result in an out of bounds memory access. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06
s. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=cbc21ceb69cb7bca0643423a7ca982abce3ce50a - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2016-5867 State: PUBLISHED Published: 2017-08-16T15:00:00Z Last Updated: 2024-09-16T23:00:44.193Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Buffer Copy without Checking Size of Input in Audio Description: In a sound driver in Android for MSM, Firefox OS for MSM, QRD Android, some variables are from userspace and values can be chosen that could result in stack overflow. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=065360da7147003aed8f59782b7652d565f56be5 - https://source.android.com/security/bulletin/2017-05-01 - http://www.securityfocus.com/bid/98170
CVE ID: CVE-2016-5868 State: PUBLISHED Published: 2017-09-25T21:00:00 Last Updated: 2024-08-06T01:15:10.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/net/ethernet/msm/rndis_ipa.c in the Qualcomm networking driver in Android allows remote attackers to execute arbitrary code via a crafted application compromising a privileged process. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-05-01 - https://source.codeaurora.org/quic/la//kernel/msm-4.4/commit/?id=fbb765a3f813f5cc85ddab21487fd65f24bf6a8c - http://www.securityfocus.com/bid/98197