Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-9649 State: PUBLISHED Published: 2017-09-20T16:00:00 Last Updated: 2024-08-05T17:18:00.357Z Vendors: n/a Products: Mirion Technologies Telemetry Enabled Devices Problem Types: CWE-321 Description: A Use of Hard-Coded Cryptographic Key issue was discovered in Mirion Technologies DMC 3000 Transmitter Module, iPam Transmitter f/DMC 2000, RDS-31 iTX and variants (including RSD31-AM Package), DRM-1/2 and variants (including Solar PWR Package), DRM and RDS Based Boundary Monitors, External Transmitters, Telepole II, and MESH Repeater (Telemetry Enabled Devices). An unchangeable, factory-set key is included in the 900 MHz transmitter firmware. Additional Analyst Notes: - CVE Progra
An unchangeable, factory-set key is included in the 900 MHz transmitter firmware. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100001 - https://ics-cert.us-cert.gov/advisories/ICSA-17-208-02
CVE ID: CVE-2017-9650 State: PUBLISHED Published: 2017-08-25T19:00:00 Last Updated: 2024-08-05T17:18:00.314Z Vendors: n/a Products: Automated Logic Corporation WebCTRL, i-VU, SiteScan Problem Types: CWE-434 Description: An Unrestricted Upload of File with Dangerous Type issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior; ALC WebCTRL, SiteScan Web 6.1 and prior; ALC WebCTRL, i-Vu 6.0 and prior; ALC WebCTRL, i-Vu, SiteScan Web 5.5 and prior; and ALC WebCTRL, i-Vu, SiteScan Web 5.2 and prior. An authenticated attacker may be able to upload a malicious file allowing the execution of arbitrary code. Additional Analyst Notes: - CVE Program Conta
able to upload a malicious file allowing the execution of arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100452 - https://www.exploit-db.com/exploits/42544/ - https://ics-cert.us-cert.gov/advisories/ICSA-17-234-01
CVE ID: CVE-2017-9653 State: PUBLISHED Published: 2017-08-14T16:00:00 Last Updated: 2024-08-05T17:18:00.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Improper Authorization issue was discovered in OSIsoft PI Integrator for Business Analytics before 2016 R2, PI Integrator for Microsoft Azure before 2016 R2 SP1, and PI Integrator for SAP HANA before 2017. An attacker is able to gain privileged access to the system while unauthorized. Additional Analyst Notes: - CVE Program Container: References: - https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00324 - http://www.securityfocus.com/bid/100212 - https://ics-cert.us-cert.gov/advisories/ICSA-17-220-01
CVE ID: CVE-2017-9654 State: PUBLISHED Published: 2018-04-24T15:00:00Z Last Updated: 2024-09-17T03:43:28.188Z Vendors: Philips Products: DoseWise Portal Problem Types: CWE-312 Description: The Philips DoseWise Portal web-based application versions 1.1.7.333 and 2.1.1.3069 stores login credentials in clear text within backend system files. CVSS v3 base score: 6.5, CVSS vector string: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100471 - https://ics-cert.us-cert.gov/advisories/ICSMA-17-229-01 - http://www.philips.com/productsecurity
CVE ID: CVE-2017-9655 State: PUBLISHED Published: 2017-08-14T16:00:00 Last Updated: 2024-08-05T17:18:00.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Scripting issue was discovered in OSIsoft PI Integrator for Business Analytics before 2016 R2, PI Integrator for Microsoft Azure before 2016 R2 SP1, and PI Integrator for SAP HANA before 2017. An attacker may be able to upload a malicious script that attempts to redirect users to a malicious web site. Additional Analyst Notes: - CVE Program Container: References: - https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00324 - http://www.securityfocus.com/bid/100212 - https://ics-cert.us-cert.gov/advisories/ICSA
/Troubleshooting/Alerts/AL00324 - http://www.securityfocus.com/bid/100212 - https://ics-cert.us-cert.gov/advisories/ICSA-17-220-01
CVE ID: CVE-2017-9656 State: PUBLISHED Published: 2018-04-24T15:00:00Z Last Updated: 2024-09-17T00:06:52.060Z Vendors: Philips Products: DoseWise Portal Problem Types: CWE-798 Description: The backend database of the Philips DoseWise Portal application versions 1.1.7.333 and 2.1.1.3069 uses hard-coded credentials for a database account with privileges that can affect confidentiality, integrity, and availability of the database. For an attacker to exploit this vulnerability, elevated privileges are first required for an attacker to access the web application backend system files that contain the hard-coded credentials. Successful exploitation may allow a remote attacker to gain access to the
iles that contain the hard-coded credentials. Successful exploitation may allow a remote attacker to gain access to the database of the DWP application, which contains PHI. CVSS v3 base score: 9.1, CVSS vector string: AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100471 - https://ics-cert.us-cert.gov/advisories/ICSMA-17-229-01 - http://www.philips.com/productsecurity
CVE ID: CVE-2017-9657 State: PUBLISHED Published: 2018-04-30T15:00:00Z Last Updated: 2024-09-16T16:13:21.087Z Vendors: Philips Products: IntelliVue MX40 Patient Worn Monitor Problem Types: CWE-460 Description: Under specific 802.11 network conditions, a partial re-association of the Philips IntelliVue MX40 Version B.06.18 WLAN monitor to the central monitoring station is possible. In this state, the central monitoring station can indicate the MX40 is not connected or associated to the central monitor, and thus should be operating in local monitoring mode (local audio-on, screen-on), but the MX40 WLAN itself can instead still be operating in telemetry mode (local audio-off, screen-off). If a
reen-on), but the MX40 WLAN itself can instead still be operating in telemetry mode (local audio-off, screen-off). If a patient experiences an alarm event and clinical staff expects the MX40 to provide local alarming when it is not available from the local device, a delay of treatment can occur. CVSS v3 base score: 6.5, CVSS vector string: AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. Philips has released software update, Version B.06.18, to fix the improper cleanup on thrown exception vulnerability, and implement mitigations to reduce the risk associated with the improper handling of exceptional conditions vulnerability. The software update implements messaging and alarming on the MX40 and at the ce
of exceptional conditions vulnerability. The software update implements messaging and alarming on the MX40 and at the central monitoring station, when the MX40 disconnects from the access point. Additional Analyst Notes: - CVE Program Container: References: - https://www.usa.philips.com/healthcare/about/customer-support/product-security - http://www.securityfocus.com/bid/100813 - https://ics-cert.us-cert.gov/advisories/ICSMA-17-255-01
CVE ID: CVE-2017-9658 State: PUBLISHED Published: 2018-04-30T15:00:00Z Last Updated: 2024-09-16T17:15:12.054Z Vendors: Philips Products: IntelliVue MX40 Patient Worn Monitor Problem Types: CWE-755 Description: Certain 802.11 network management messages have been determined to invoke wireless access point blacklisting security defenses when not required, which can necessitate intervention by hospital staff to reset the device and reestablish a network connection to the Wi-Fi access point. During this state, the Philips IntelliVue MX40 Version B.06.18 can either connect to an alternative access point within signal range for association to a central monitoring station, or it can remain in local
alternative access point within signal range for association to a central monitoring station, or it can remain in local monitoring mode until the device is reset by hospital staff. CVSS v3 base score: 6.5, CVSS vector string: AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. Philips has released software update, Version B.06.18, to fix the improper cleanup on thrown exception vulnerability, and implement mitigations to reduce the risk associated with the improper handling of exceptional conditions vulnerability. The software update implements messaging and alarming on the MX40 and at the central monitoring station, when the MX40 disconnects from the access point. Additional Analyst Notes: - CVE Program
he central monitoring station, when the MX40 disconnects from the access point. Additional Analyst Notes: - CVE Program Container: References: - https://www.usa.philips.com/healthcare/about/customer-support/product-security - http://www.securityfocus.com/bid/100813 - https://ics-cert.us-cert.gov/advisories/ICSMA-17-255-01
CVE ID: CVE-2017-9659 State: PUBLISHED Published: 2017-08-14T16:00:00 Last Updated: 2024-08-05T17:18:01.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stack-Based Buffer Overflow issue was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. The stack-based buffer overflow vulnerability has been identified, which may cause a crash or allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-222-04 - http://www.zerodayinitiative.com/advisories/ZDI-17-644/ - http://www.zerodayinitiative.com/advisories/ZDI-17-643/ - http://www.securityfocus.com/bid/100265
CVE ID: CVE-2017-9660 State: PUBLISHED Published: 2017-08-14T16:00:00 Last Updated: 2024-08-05T17:18:01.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Heap-Based Buffer Overflow was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. A heap-based buffer overflow vulnerability has been identified, which may cause a crash or allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-222-04 - http://www.securityfocus.com/bid/100265 - http://www.zerodayinitiative.com/advisories/ZDI-17-645/
CVE ID: CVE-2017-9661 State: PUBLISHED Published: 2017-08-14T16:00:00 Last Updated: 2024-08-05T17:18:00.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Uncontrolled Search Path Element issue was discovered in SIMPlight SCADA Software version 4.3.0.27 and prior. The uncontrolled search path element vulnerability has been identified, which may allow an attacker to place a malicious DLL file within the search path resulting in execution of arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-222-01 - http://www.securityfocus.com/bid/100263
CVE ID: CVE-2017-9662 State: PUBLISHED Published: 2017-08-14T16:00:00 Last Updated: 2024-08-05T17:18:00.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Improper Privilege Management issue was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. Monitouch V-SFT is installed in a directory with weak access controls by default, which could allow an authenticated attacker with local access to escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-222-04 - http://www.zerodayinitiative.com/advisories/ZDI-17-646/ - http://www.securityfocus.com/bid/100268
CVE ID: CVE-2017-9663 State: PUBLISHED Published: 2018-01-09T21:00:00 Last Updated: 2024-08-05T17:18:00.404Z Vendors: n/a Products: General Motors and Shanghai OnStar (SOS) iOS Client Problem Types: CWE-312 Description: An Cleartext Storage of Sensitive Information issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1. Successful exploitation of this vulnerability may allow a remote attacker to access an encryption key that is stored in cleartext in memory. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-234-04 - http://www.securityfocus.com/bid/102481
CVE ID: CVE-2017-9664 State: PUBLISHED Published: 2018-05-24T20:00:00Z Last Updated: 2024-09-16T23:51:37.486Z Vendors: ICS-CERT Products: ABB SREA-01 and SREA-50 Problem Types: CWE-23 Description: In ABB SREA-01 revisions A, B, C: application versions up to 3.31.5, and SREA-50 revision A: application versions up to 3.32.8, an attacker may access internal files of ABB SREA-01 and SREA-50 legacy remote monitoring tools without any authorization over the network using a HTTP request which refers to files using ../../ relative paths. Once the internal password file is retrieved, the password hash can be identified using a brute force attack. There is also an exploit allowing running of commands
, the password hash can be identified using a brute force attack. There is also an exploit allowing running of commands after authorization. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100260 - https://ics-cert.us-cert.gov/advisories/ICSA-17-222-05
CVE ID: CVE-2017-9668 State: PUBLISHED Published: 2017-06-18T21:00:00 Last Updated: 2024-08-05T17:18:00.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: In admin\addgroup.php in CMS Made Simple 2.1.6, when adding a user group, there is no XSS filtering, resulting in storage-type XSS generation, via the description parameter in an addgroup action. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/XiaoZhis/ProjectSend/issues/2
CVE ID: CVE-2017-9669 State: PUBLISHED Published: 2017-07-17T21:00:00 Last Updated: 2024-08-05T17:18:01.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution by crafting a malicious APKINDEX.tar.gz file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/06/25/2 - http://www.securityfocus.com/bid/99340 - https://www.twistlock.com/2017/06/25/alpine-linux-vulnerability-discovery-code-execution-pt-1-2/
CVE ID: CVE-2017-9670 State: PUBLISHED Published: 2017-06-15T13:00:00Z Last Updated: 2024-09-16T16:13:11.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: An uninitialized stack variable vulnerability in load_tic_series() in set.c in gnuplot 5.2.rc1 allows an attacker to cause Denial of Service (Segmentation fault and Memory Corruption) or possibly have unspecified other impact when a victim opens a specially crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/gnuplot/bugs/1933/
CVE ID: CVE-2017-9671 State: PUBLISHED Published: 2017-07-17T21:00:00 Last Updated: 2024-08-05T17:18:00.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution, by crafting a malicious APKINDEX.tar.gz file with a bad pax header block. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/06/25/2 - http://www.securityfocus.com/bid/99340 - https://www.twistlock.com/2017/06/25/alpine-linux-vulnerability-discovery-code-execution-pt-1-2/
CVE ID: CVE-2017-9673 State: PUBLISHED Published: 2017-06-15T18:00:00Z Last Updated: 2024-09-17T00:16:23.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SimpleCE 2.3.0, a CSRF vulnerability can be exploited to add an administrator account (via the index.php/user/new URI) or change its settings (via the index.php/user/1 URI), including its password. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/142944/SimpleCE-2.3.0-Cross-Site-Request-Forgery-Cross-Site-Scripting.html
CVE ID: CVE-2017-9674 State: PUBLISHED Published: 2017-06-15T18:00:00Z Last Updated: 2024-09-16T22:21:06.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SimpleCE 2.3.0, an authenticated XSS vulnerability was found on index.php/content/text/1?return_url=[XSS] exploitable as a regular or admin user. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/142944/SimpleCE-2.3.0-Cross-Site-Request-Forgery-Cross-Site-Scripting.html
CVE ID: CVE-2017-9675 State: PUBLISHED Published: 2017-06-15T19:00:00 Last Updated: 2024-08-05T17:18:00.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: On D-Link DIR-605L devices, firmware before 2.08UIBetaB01.bin allows an unauthenticated GET request to trigger a reboot. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99084 - https://www.exploit-db.com/exploits/43147/ - ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-605L/REVB/DIR-605L_REVB_RELEASE_NOTES_v2.08UIBETAB01_EN.pdf
CVE ID: CVE-2017-9676 State: PUBLISHED Published: 2017-09-21T15:00:00 Last Updated: 2024-08-05T17:18:01.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, potential use after free scenarios and race conditions can occur when accessing global static variables without using a lock. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-09-01 - http://www.securityfocus.com/bid/100658
CVE ID: CVE-2017-9677 State: PUBLISHED Published: 2017-09-21T15:00:00 Last Updated: 2024-08-05T17:18:01.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, in function msm_compr_ioctl_shared, variable "ddp->params_length" could be accessed and modified by multiple threads, while it is not protected with locks. If one thread is running, while another thread is setting data, race conditions will happen. If "ddp->params_length" is set to a big number, a buffer overflow will occur. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-09-01 - ht
ional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-09-01 - http://www.securityfocus.com/bid/100658
CVE ID: CVE-2017-9678 State: PUBLISHED Published: 2017-08-18T19:00:00Z Last Updated: 2024-09-16T18:56:22.248Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Buffer Copy without Checking Size of Input in Display Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, in a video driver, memory corruption can potentially occur due to lack of bounds checking in a memcpy(). Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securityfocus.com/bid/100213
CVE ID: CVE-2017-9679 State: PUBLISHED Published: 2017-08-18T19:00:00Z Last Updated: 2024-09-16T18:23:24.252Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Improper Input Validation in Kernel Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, if a userspace string is not NULL-terminated, kernel memory contents can leak to system logs. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securityfocus.com/bid/100210
CVE ID: CVE-2017-9680 State: PUBLISHED Published: 2017-08-18T19:00:00Z Last Updated: 2024-09-17T02:06:56.838Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Use of Uninitialized Variable in Kernel Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, if a pointer argument coming from userspace is invalid, a driver may use an uninitialized structure to log an error message. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securityfocus.com/bid/100210
CVE ID: CVE-2017-9681 State: PUBLISHED Published: 2018-03-30T15:00:00Z Last Updated: 2024-09-17T00:11:47.108Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Untrusted Pointer Dereference in FM Description: In Android before 2017-08-05 on Qualcomm MSM, Firefox OS for MSM, QRD Android, and all Android releases from CAF using the Linux kernel, if kernel memory address is passed from userspace through iris_vidioc_s_ext_ctrls ioctl, it will print kernel address data. A user could set it to an arbitrary kernel address, hence information disclosure (for kernel) could occur. Additional Analyst Notes: - CVE Program Container: References: - https://so
rmation disclosure (for kernel) could occur. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-08-01 - http://www.securityfocus.com/bid/100210
CVE ID: CVE-2017-9682 State: PUBLISHED Published: 2017-08-18T19:00:00Z Last Updated: 2024-09-16T19:01:33.973Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Use After Free in Graphics Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in two KGSL driver functions can lead to a Use After Free condition. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securityfocus.com/bid/100213
CVE ID: CVE-2017-9683 State: PUBLISHED Published: 2017-10-10T20:00:00Z Last Updated: 2024-09-16T20:06:51.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while flashing a meta image, an integer overflow can occur, if user-defined image offset and size values are too large. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-10-01 - http://www.securityfocus.com/bid/101117
CVE ID: CVE-2017-9684 State: PUBLISHED Published: 2017-08-18T19:00:00Z Last Updated: 2024-09-16T18:29:29.646Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Use After Free in USB Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a USB driver can lead to a Use After Free condition. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securityfocus.com/bid/100213
CVE ID: CVE-2017-9685 State: PUBLISHED Published: 2017-08-18T19:00:00Z Last Updated: 2024-09-17T01:46:46.158Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Use After Free in WLAN Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a WLAN driver can lead to a Use After Free condition. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securityfocus.com/bid/100477
CVE ID: CVE-2017-9686 State: PUBLISHED Published: 2017-10-10T20:00:00Z Last Updated: 2024-09-17T01:26:58.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, there is a possible double free/use after free in the SPS driver when debugfs logging is used. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2017-10-01 - http://www.securityfocus.com/bid/101160
CVE ID: CVE-2017-9687 State: PUBLISHED Published: 2017-10-10T20:00:00Z Last Updated: 2024-09-16T23:56:12.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, two concurrent threads/processes can write the value of "0" to the debugfs file that controls ipa ipc log which will lead to the double-free in ipc_log_context_destroy(). Another issue is the Use-After-Free which can happen due to the race condition when the ipc log is deallocated via the debugfs call during a log print. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/secu