Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
all during a log print. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2017-10-01 - http://www.securityfocus.com/bid/101160
CVE ID: CVE-2017-9688 State: REJECTED Published: 2019-10-25T15:26:18 Last Updated: 2019-10-25T15:26:18 Description: No description available.
CVE ID: CVE-2017-9689 State: PUBLISHED Published: 2018-01-10T22:00:00Z Last Updated: 2024-09-16T22:24:50.600Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Copy without Checking Size of Input in Display Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a specially-crafted HDMI CEC message can be used to cause stack memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-01-01
CVE ID: CVE-2017-9690 State: PUBLISHED Published: 2017-11-16T22:00:00Z Last Updated: 2024-09-17T02:06:24.394Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Integer Overflow to Buffer Overflow in Core Description: In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a qbt1000 ioctl handler, an incorrect buffer size check has an integer overflow vulnerability potentially leading to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101774 - https://source.android.com/security/bulletin/2017-11-01
CVE ID: CVE-2017-9691 State: PUBLISHED Published: 2018-03-30T21:00:00Z Last Updated: 2024-09-17T00:06:53.873Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Time-of-check Time-of-use (TOCTOU) Race Condition in Core Description: There is a race condition in Android for MSM, Firefox OS for MSM, and QRD Android that allows to access to already free'd memory in the debug message output functionality contained within the mobicore driver. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100213 - https://www.codeaurora.org/security-bulletin/2017/11/28/november-2017-security-bulletin
CVE ID: CVE-2017-9692 State: PUBLISHED Published: 2018-03-30T21:00:00Z Last Updated: 2024-09-16T16:28:18.609Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: NULL Pointer Dereference in Display Description: When an atomic commit is issued on a writeback panel with a NULL output_layer parameter in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-06-03, a NULL pointer dereference may potentially occur. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=ef8e3cd4588b5ae71b73a3aca751d59e882e6748 - https://www.codeaurora.org/security-bulletin/2018/02/16/fe
msm-4.4/commit/?id=ef8e3cd4588b5ae71b73a3aca751d59e882e6748 - https://www.codeaurora.org/security-bulletin/2018/02/16/february-2018-code-aurora-security-bulletin - http://www.securityfocus.com/bid/100210 - https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=061556e74a08f89f04b3da30119029ca3fd87ad8
CVE ID: CVE-2017-9693 State: PUBLISHED Published: 2018-03-30T21:00:00Z Last Updated: 2024-09-17T00:56:04.935Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Copy without Checking Size of Input in WLAN Description: The length of attribute value for STA_EXT_CAPABILITY in __wlan_hdd_change_station in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-06-06 being less than the actual lenth of StaParams.extn_capability results in a read for extra bytes when a memcpy is done from params->ext_capab to StaParams.extn_capability using the sizeof(StaParams.extn_capability). Additional Analyst Notes: - CVE Program Container: Refere
s.extn_capability using the sizeof(StaParams.extn_capability). Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2017/10/20/october-2017-v1 - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=05a5abb21e4d97001f77d344444a3ec2f9c275f9 - http://www.securityfocus.com/bid/100210
CVE ID: CVE-2017-9694 State: PUBLISHED Published: 2018-03-30T21:00:00Z Last Updated: 2024-09-16T19:00:00.338Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Improper Input Validation in WLAN Description: While parsing Netlink attributes in QCA_WLAN_VENDOR_ATTR_EXTSCAN_BSSID_HOTLIST_PARAMS_LOST_AP_SAMPLE_SIZE in qcacld 2.0 before 2017-05-16, a buffer overread could occur. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2017/10/20/october-2017-v1 - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=1e47d44de7bab5500d27f17ae5c4ebebc7d2b4e
odeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=1e47d44de7bab5500d27f17ae5c4ebebc7d2b4ef - http://www.securityfocus.com/bid/100210
CVE ID: CVE-2017-9696 State: PUBLISHED Published: 2017-11-16T22:00:00Z Last Updated: 2024-09-16T19:47:18.481Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Over-read in Camera Description: In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, buffer over-read is possible in camera driver function msm_isp_stop_stats_stream. Variable stream_cfg_cmd->num_streams is from userspace, and it is not checked against "MSM_ISP_STATS_MAX". Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2017-11-01
CVE ID: CVE-2017-9697 State: PUBLISHED Published: 2017-10-10T20:00:00Z Last Updated: 2024-09-16T23:51:04.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a race condition can allow access to already freed memory while reading command registration table entries in diag_dbgfs_read_table. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2017-10-01 - http://www.securityfocus.com/bid/101160
CVE ID: CVE-2017-9698 State: PUBLISHED Published: 2017-12-05T17:00:00Z Last Updated: 2024-09-16T17:54:45.087Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Integer Overflow to Buffer Overflow in Graphics Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improperly specified offset/size values for a submission command could cause a math operation to overflow and could result in an access to arbitrary memory. The combined pointer will overflow and possibly pass further checks intended to avoid accessing unintended memory. Additional Analyst Notes: - CVE Program Contain
sibly pass further checks intended to avoid accessing unintended memory. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2017-12-01
CVE ID: CVE-2017-9700 State: PUBLISHED Published: 2017-12-05T17:00:00Z Last Updated: 2024-09-17T04:25:07.012Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Use of Out-of-range Pointer Offset in Audio Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, buffer overwrite is possible in fw_name_store if image name is 64 characters. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2017-12-01
CVE ID: CVE-2017-9701 State: PUBLISHED Published: 2017-11-16T22:00:00Z Last Updated: 2024-09-17T04:04:58.355Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Use of Uninitialized Variable in Boot Description: In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing OEM unlock/unlock-go fastboot commands data leak may occur, resulting from writing uninitialized stack structure to non-volatile memory. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2017-11-01
CVE ID: CVE-2017-9702 State: PUBLISHED Published: 2017-11-16T22:00:00Z Last Updated: 2024-09-17T03:23:56.201Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Untrusted Pointer Dereference in Camera Description: In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a user-space pointer is directly accessed in a camera driver. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2017-11-01
CVE ID: CVE-2017-9703 State: PUBLISHED Published: 2017-12-05T17:00:00Z Last Updated: 2024-09-16T19:35:07.300Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Use After Free in Camera Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a race condition in a Camera driver can lead to a Use After Free condition. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2017-12-01
CVE ID: CVE-2017-9704 State: PUBLISHED Published: 2018-12-20T15:00:00 Last Updated: 2024-08-05T17:18:01.760Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Use After Free in Camera Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, There is no synchronization between msm_vb2 buffer operations which can lead to use after free. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/12/03/december-2018-code-aurora-security-bulletin
CVE ID: CVE-2017-9705 State: PUBLISHED Published: 2018-01-10T22:00:00Z Last Updated: 2024-09-16T16:13:51.865Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Double Free in Core Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, concurrent rx notifications and read() operations in the G-Link PKT driver can result in a double free condition due to missing locking resulting in list_del() and list_add() overlapping and corrupting the next and previous pointers. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pix
nters. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-01-01
CVE ID: CVE-2017-9706 State: PUBLISHED Published: 2017-10-10T20:00:00Z Last Updated: 2024-09-17T03:48:04.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, an array out-of-bounds access can potentially occur in a display driver. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2017-10-01 - http://www.securityfocus.com/bid/101160
CVE ID: CVE-2017-9708 State: PUBLISHED Published: 2017-12-05T17:00:00Z Last Updated: 2024-09-16T16:48:07.649Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Use After Free in Camera Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the camera driver, the function "msm_ois_power_down" is called without a mutex and a race condition can occur in variable "*reg_ptr" of sub function "msm_camera_config_single_vreg". Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2017-12-01
CVE ID: CVE-2017-9709 State: PUBLISHED Published: 2017-12-05T17:00:00Z Last Updated: 2024-09-17T04:20:27.118Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Improper Access Control in Telephony Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a privilege escalation vulnerability exists in telephony. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2017-12-01
CVE ID: CVE-2017-9710 State: PUBLISHED Published: 2017-12-05T17:00:00Z Last Updated: 2024-09-16T18:38:45.218Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Copy without Checking Size of Input in Data Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, IOCTL interface to send QMI NOTIFY REQ messages can be called from multiple contexts which can result in buffer overflow of msg cache. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2017-12-01
CVE ID: CVE-2017-9711 State: PUBLISHED Published: 2024-11-22T09:09:10.630Z Last Updated: 2024-11-22T11:40:06.357Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-264 Description: Certain unprivileged processes are able to perform IOCTL calls. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html
CVE ID: CVE-2017-9712 State: PUBLISHED Published: 2018-01-10T22:00:00Z Last Updated: 2024-09-16T17:08:47.795Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Information Exposure in WLAN Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, if userspace provides a too-large IE length in wlan_hdd_cfg80211_set_ie, a buffer over-read occurs. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-01-01
CVE ID: CVE-2017-9714 State: PUBLISHED Published: 2017-10-10T20:00:00Z Last Updated: 2024-09-17T01:26:46.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, an out of bound memory access may happen in limCheckRxRSNIeMatch in case incorrect RSNIE is received from the client in assoc request. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-10-01 - http://www.securityfocus.com/bid/101117
CVE ID: CVE-2017-9715 State: PUBLISHED Published: 2017-10-10T20:00:00Z Last Updated: 2024-09-16T23:46:57.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing a vendor command, a buffer over-read can occur. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2017-10-01 - http://www.securityfocus.com/bid/101160
CVE ID: CVE-2017-9716 State: PUBLISHED Published: 2017-12-05T19:00:00Z Last Updated: 2024-09-16T20:26:29.728Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Improper Access Control in TrustZone Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the qbt1000 driver implements an alternative channel for usermode applications to talk to QSEE applications. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-12-01 - http://www.securityfocus.com/bid/102073
CVE ID: CVE-2017-9717 State: PUBLISHED Published: 2017-10-10T20:00:00Z Last Updated: 2024-09-16T22:40:04.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while parsing Netlink attributes, a buffer overread can occur. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2017-10-01 - http://www.securityfocus.com/bid/101160
CVE ID: CVE-2017-9718 State: PUBLISHED Published: 2017-12-05T17:00:00Z Last Updated: 2024-09-16T20:22:45.476Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Time-of-check Time-of-use (TOCTOU) Race Condition in Multimedia Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a race condition in a multimedia driver can potentially lead to a buffer overwrite. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2017-12-01
CVE ID: CVE-2017-9719 State: PUBLISHED Published: 2017-11-16T22:00:00Z Last Updated: 2024-09-16T20:47:20.205Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Copy without Checking Size of Input in Display Description: In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the kernel driver MDSS, a buffer overflow can occur in HDMI CEC parsing if frame size is out of range. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2017-11-01
CVE ID: CVE-2017-9720 State: PUBLISHED Published: 2017-09-21T15:00:00 Last Updated: 2024-08-05T17:18:01.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, due to an off-by-one error in a camera driver, an out-of-bounds read/write can occur. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-09-01 - http://www.securityfocus.com/bid/100658
CVE ID: CVE-2017-9721 State: PUBLISHED Published: 2017-11-16T22:00:00Z Last Updated: 2024-09-17T04:24:16.521Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Copy without Checking Size of Input in Display Description: In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the boot loader, a buffer overflow can occur while parsing the splash image. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2017-11-01
CVE ID: CVE-2017-9722 State: PUBLISHED Published: 2017-12-05T17:00:00Z Last Updated: 2024-09-17T03:12:50.222Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Copy without Checking Size of Input in Display Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when updating custom EDID (hdmi_tx_sysfs_wta_edid), if edid_size, which is controlled by userspace, is too large, a buffer overflow occurs. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2017-12-01
CVE ID: CVE-2017-9723 State: PUBLISHED Published: 2018-03-30T21:00:00Z Last Updated: 2024-09-16T17:34:14.619Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Stack-based Buffer Overflow in Touch Description: The touchscreen driver synaptics_dsx in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-06-05, the size of a stack-allocated buffer can be set to a value which exceeds the size of the stack. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-02-01 - https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=e83ebd2098009b0d336ffab11e00f739902bd5d9
CVE ID: CVE-2017-9724 State: PUBLISHED Published: 2017-09-21T15:00:00 Last Updated: 2024-08-05T17:18:02.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, user-level permissions can be used to gain access to kernel memory, specifically the ION cache maintenance code is writing to a user supplied address. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-09-01 - http://www.securityfocus.com/bid/100658
CVE ID: CVE-2017-9725 State: PUBLISHED Published: 2017-09-21T15:00:00 Last Updated: 2024-08-05T17:18:01.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data type of size, allocation size gets truncated which makes allocation succeed when it should fail. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-09-01 - https://access.redhat.com/errata/RHSA-2018:1062 - https://access.redhat.com/errata/RHSA-2018:0676 - https://access.redhat.com/errata/RHSA-2018:1170 - https://access.redhat.com/errata/RHSA-201
.com/errata/RHSA-2018:0676 - https://access.redhat.com/errata/RHSA-2018:1170 - https://access.redhat.com/errata/RHSA-2018:1130 - http://www.securityfocus.com/bid/100658
CVE ID: CVE-2017-9726 State: PUBLISHED Published: 2017-07-26T19:00:00 Last Updated: 2024-08-05T17:18:01.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ins_MDRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.ghostscript.com/show_bug.cgi?id=698055 - https://security.gentoo.org/glsa/201811-12 - http://www.debian.org/security/2017/dsa-3986 - http://www.securityfocus.com/bid/99992 - http://git.ghostscript.com/?p=gh
http://www.debian.org/security/2017/dsa-3986 - http://www.securityfocus.com/bid/99992 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=7755e67116e8973ee0e3b22d653df026a84fa01b
CVE ID: CVE-2017-9727 State: PUBLISHED Published: 2017-07-26T19:00:00 Last Updated: 2024-08-05T17:18:01.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gx_ttfReader__Read function in base/gxttfb.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201811-12 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=937ccd17ac65935633b2ebc06cb7089b91e17e6b - http://www.debian.org/security/2017/dsa-3986 - http://www.securi
a=commit%3Bh=937ccd17ac65935633b2ebc06cb7089b91e17e6b - http://www.debian.org/security/2017/dsa-3986 - http://www.securityfocus.com/bid/99999 - http://bugs.ghostscript.com/show_bug.cgi?id=698056
CVE ID: CVE-2017-9728 State: PUBLISHED Published: 2017-06-16T15:00:00Z Last Updated: 2024-09-17T03:23:47.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: In uClibc 0.9.33.2, there is an out-of-bounds read in the get_subexp function in misc/regex/regexec.c when processing a crafted regular expression. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2017/06/16/4