Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-11808 State: PUBLISHED Published: 2018-06-06T03:00:00 Last Updated: 2024-08-05T08:17:09.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect Access Control in CustomFieldsFeedServlet in Zoho ManageEngine Applications Manager Version 13 before build 13740 allows an attacker to delete any file and read certain files on the server in the context of the user (which by default is "NT AUTHORITY / SYSTEM") by sending a specially crafted request to the server. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2018-11808.html - https://github.com/kactro
gine.com/products/applications_manager/security-updates/security-updates-cve-2018-11808.html - https://github.com/kactrosN/publicdisclosures - https://www.manageengine.com/products/applications_manager/issues.html - http://www.securityfocus.com/bid/104467
CVE ID: CVE-2018-11813 State: PUBLISHED Published: 2018-06-06T03:00:00 Last Updated: 2024-08-05T08:17:09.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: libjpeg 9c has a large loop because read_pixel in rdtarga.c mishandles EOF. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ChijinZ/security_advisories/tree/master/libjpeg-v9c - https://github.com/ChijinZ/security_advisories/blob/master/libjpeg-v9c/mail.pdf - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00015.html - https://access.redhat.com/errata/RHSA-2019:2052 - https://bugs.gentoo.org/727908
urity-announce/2019-05/msg00015.html - https://access.redhat.com/errata/RHSA-2019:2052 - https://bugs.gentoo.org/727908 - http://www.ijg.org/files/jpegsrc.v9d.tar.gz
CVE ID: CVE-2018-11816 State: PUBLISHED Published: 2024-11-26T13:56:24.297Z Last Updated: 2024-11-26T15:57:56.731Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Crafted Binder Request Causes Heap UAF in MediaServer Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html
CVE ID: CVE-2018-11818 State: PUBLISHED Published: 2018-09-18T18:00:00 Last Updated: 2024-08-05T08:17:09.314Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Use After Free in Display Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, LUT configuration is passed down to driver from userspace via ioctl. Simultaneous update from userspace while kernel drivers are updating LUT registers can lead to race condition. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin
iner: References: - https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=7d1e40be0f7da526f1109005383aa55f5646fc13 - https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=999bfde119d881a09218eb045d41fb83e67f0d10
CVE ID: CVE-2018-11819 State: PUBLISHED Published: 2019-06-14T17:02:09 Last Updated: 2024-08-05T08:17:09.258Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile Problem Types: Use After Free in WLAN Description: Use after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 675, SD 730, SD 820A, SD 835, SD 855, SDA660, SDX20, SDX24 Additional Analyst Notes: - CVE Program Container: References: - https://www.codeau
SD 835, SD 855, SDA660, SDX20, SDX24 Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2019/05/06/may-2019-code-aurora-security-bulletin
CVE ID: CVE-2018-11820 State: PUBLISHED Published: 2019-02-25T23:00:00 Last Updated: 2024-08-05T08:17:09.236Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking Problem Types: Cryptographic Issues in Ecosystem Description: Use of non-time constant memcmp function creates side channel that leaks information and leads to cryptographic issues in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivi
aphic issues in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in versions IPQ8074, MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MDM9655, MSM8996AU, QCA8081, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 800, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130. Additional Analyst
SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securityfocus.com/bid/106845
CVE ID: CVE-2018-11821 State: PUBLISHED Published: 2018-10-26T13:00:00 Last Updated: 2024-08-05T08:17:09.225Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Integer Overflow or Wraparound in WLAN Description: Possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile, Snapdragon Wear in version IPQ8074, MDM9206, MDM9607, MDM9650, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 835, SD 845, SD 850, SDA660, SDM630, SDM632, SDM636, SDM660, SDM710, Snapdragon_High_Med_2016 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.secur
s: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securityfocus.com/bid/107681
CVE ID: CVE-2018-11822 State: PUBLISHED Published: 2018-10-26T13:00:00 Last Updated: 2024-08-05T08:17:09.282Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Integer Overflow or Wraparound in WLAN Description: A possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securityfocus.com/bid/107681
CVE ID: CVE-2018-11823 State: PUBLISHED Published: 2018-11-27T18:00:00 Last Updated: 2024-08-05T08:17:09.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, freeing device memory in driver probe failure will result in double free issue in power module. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/kernel/msm-4.9/commit/?id=4519cc36b1a396dc55c9b43ab6e8736ae4a6f4cf - https://www.codeaurora.org/security-bulletin/2018/11/05/november-2018-code-aurora-forum-security-bulletin
CVE ID: CVE-2018-11824 State: PUBLISHED Published: 2018-10-26T13:00:00 Last Updated: 2024-08-05T08:17:09.245Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Stack-based Buffer Overflow in TrustZone Description: A stack-based buffer overflow can occur in a firmware routine in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, SD 845, SD 850, SDA660 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2018-11825 State: REJECTED Published: 2019-08-30T15:35:08 Last Updated: 2019-08-30T15:35:08 Description: No description available.
CVE ID: CVE-2018-11826 State: PUBLISHED Published: 2018-09-18T18:00:00 Last Updated: 2024-08-05T08:17:09.283Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Integer Overflow to Buffer Overflow in WLAN Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check on integer overflow while calculating memory can lead to Buffer overflow in WLAN ext scan handler. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/platform
curity-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=650afe0c0ec2f566c9546b3b8e400b36fcf44aed - http://www.securityfocus.com/bid/107770
CVE ID: CVE-2018-11827 State: PUBLISHED Published: 2018-09-18T18:00:00 Last Updated: 2024-08-05T08:17:09.299Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Improper Validation of Array Index in WLAN Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper validation of array index in WMA roam synchronization handler can lead to OOB write. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensou
/09/04/september-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=4c74687be66c19be0b9bd83d78d033dff5d1a9ae - http://www.securityfocus.com/bid/107770
CVE ID: CVE-2018-11828 State: PUBLISHED Published: 2018-10-26T13:00:00 Last Updated: 2024-08-05T08:17:09.295Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Uncontrolled Resource Consumption in WLAN Description: When FW tries to get random mac address generated from new SW RNG and ADC values read are constant then DUT get struck in loop while trying to get random ADC samples in Snapdragon Mobile in version SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securityfocus.com/bid/107681
CVE ID: CVE-2018-11829 State: REJECTED Published: 2021-11-23T19:58:45 Last Updated: 2021-11-23T19:58:45 Description: No description available.
CVE ID: CVE-2018-11830 State: PUBLISHED Published: 2019-04-04T15:09:49 Last Updated: 2024-08-05T08:17:09.288Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile Problem Types: Improper Input Validation vulnerability in QCPE Description: Improper input validation in QCPE create function may lead to integer overflow in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, SD 410/12, SD 820A Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-securit
D 820A Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2018-11831 State: REJECTED Published: 2021-11-23T19:58:46 Last Updated: 2021-11-23T19:58:46 Description: No description available.
CVE ID: CVE-2018-11832 State: PUBLISHED Published: 2018-09-18T18:00:00 Last Updated: 2024-08-05T08:17:09.257Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Copy Without Checking Size of Input in PMIC Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of input size validation before copying to buffer in PMIC function can lead to heap overflow. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/kernel/msm-3.18
bulletin/2018/09/04/september-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=492fdce2626efc01004bea4aed4ea89b7c5cb5b3
CVE ID: CVE-2018-11833 State: REJECTED Published: 2021-11-23T19:58:47 Last Updated: 2021-11-23T19:58:47 Description: No description available.
CVE ID: CVE-2018-11834 State: REJECTED Published: 2021-11-23T19:58:47 Last Updated: 2021-11-23T19:58:47 Description: No description available.
CVE ID: CVE-2018-11835 State: REJECTED Published: 2021-11-23T19:58:48 Last Updated: 2021-11-23T19:58:48 Description: No description available.
CVE ID: CVE-2018-11836 State: PUBLISHED Published: 2018-09-18T18:00:00 Last Updated: 2024-08-05T08:17:09.322Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Uncontrolled Resource Consumption in WLAN Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper length check can lead to out-of-bounds access in WLAN function. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin - https://source.android.com/security/bulletin/2018-09-01#qualcomm-components - https://so
code-aurora-security-bulletin - https://source.android.com/security/bulletin/2018-09-01#qualcomm-components - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=9d703c0815b2b260592bc8b91d907aeef7962eb7
CVE ID: CVE-2018-11837 State: REJECTED Published: 2021-12-20T22:43:18 Last Updated: 2021-12-20T22:43:18 Description: No description available.
CVE ID: CVE-2018-11838 State: PUBLISHED Published: 2020-03-05T08:56:02 Last Updated: 2024-08-05T08:17:09.314Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music Problem Types: Double Free issue in WLAN Description: Possible double free issue in WLAN due to lack of checking memory free condition. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8053, MDM9640, SDA660, SDM636, SDM660, SDX20 Addition
Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8053, MDM9640, SDA660, SDM636, SDM660, SDX20 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/march-2020-bulletin
CVE ID: CVE-2018-11839 State: REJECTED Published: 2021-11-23T19:58:49 Last Updated: 2021-11-23T19:58:49 Description: No description available.
CVE ID: CVE-2018-11840 State: PUBLISHED Published: 2018-09-18T18:00:00 Last Updated: 2024-08-05T08:17:09.226Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Double Free in WLAN Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing the WLAN driver command ioctl a temporary buffer used to construct the reply message may be freed twice. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/platform/vendor/qcom-op
/2018/09/04/september-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=a3d53bb977b907a5d11d22cad3f8ebf3f1d2b1ed - http://www.securityfocus.com/bid/107770
CVE ID: CVE-2018-11841 State: REJECTED Published: 2021-11-23T19:58:49 Last Updated: 2021-11-23T19:58:49 Description: No description available.
CVE ID: CVE-2018-11842 State: PUBLISHED Published: 2018-09-18T18:00:00 Last Updated: 2024-08-05T08:17:09.230Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Use of Uninitialized Variable in WLAN Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, during wlan association, driver allocates memory. In case the mem allocation fails driver does a mem free though the memory was not allocated. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin - https://source.android
://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin - https://source.android.com/security/bulletin/2018-09-01#qualcomm-components - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=5eea70b9d5852e468467c1565927dbe0c76d8674
CVE ID: CVE-2018-11843 State: PUBLISHED Published: 2018-09-18T18:00:00 Last Updated: 2024-08-05T08:17:09.287Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Use After Free in WLAN Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack fo check on return value in WMA response handler can lead to potential use after free. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/co
code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=ddc0e519f59fda7a8e17355ad6c3b00b8808542e
CVE ID: CVE-2018-11844 State: REJECTED Published: 2021-11-23T19:58:50 Last Updated: 2021-11-23T19:58:50 Description: No description available.
CVE ID: CVE-2018-11845 State: PUBLISHED Published: 2019-02-25T23:00:00 Last Updated: 2024-08-05T08:17:09.288Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music Problem Types: Information Exposure in Ecosystem Description: Usage of non-time-constant comparison functions can lead to information leakage through side channel analysis in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
ity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in versions MDM9150, MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securityfocus.com/bid/106845
CVE ID: CVE-2018-11846 State: PUBLISHED Published: 2018-10-26T13:00:00 Last Updated: 2024-08-05T08:17:09.282Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Information Exposure in Storage Description: The use of a non-time-constant memory comparison operation can lead to timing/side channel attacks in Snapdragon Mobile in version SD 210/SD 212/SD 205, SD 845, SD 850 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2018-11847 State: PUBLISHED Published: 2019-02-11T15:00:00 Last Updated: 2024-08-05T08:17:09.315Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking Problem Types: Improper Input Validation in Content Protection Description: Malicious TA can tag QSEE kernel memory and map to EL0, there by corrupting the physical memory as well it can be used to corrupt the QSEE kernel and compromise the whole TEE in Snapdragon A
pting the physical memory as well it can be used to corrupt the QSEE kernel and compromise the whole TEE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables and Snapdragon Wired Infrastructure and Networking in versions IPQ8074, MDM9206, MDM9607, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCA8081, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 650/52, SD 820, SD 820A, SD 835, SD 8CX, SDM439 and Snapdragon_High_Med_2016 Addition
615/16/SD 415, SD 625, SD 632, SD 650/52, SD 820, SD 820A, SD 835, SD 8CX, SDM439 and Snapdragon_High_Med_2016 Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106475 - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2018-11848 State: REJECTED Published: 2021-11-23T19:58:51 Last Updated: 2021-11-23T19:58:51 Description: No description available.
CVE ID: CVE-2018-11849 State: PUBLISHED Published: 2018-10-26T13:00:00 Last Updated: 2024-08-05T08:17:09.301Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer Copy Without Checking Size of Input in WLAN Description: Lack of check on out of range of bssid parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version IPQ8074, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8996AU, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, QCA9886, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600
584, QCA6584AU, QCA9377, QCA9378, QCA9379, QCA9886, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM630, SDM632, SDM636, SDM660, SDM710, SDX20, Snapdragon_High_Med_2016 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securityfocus.com/bid/107681
CVE ID: CVE-2018-11850 State: PUBLISHED Published: 2018-10-26T13:00:00 Last Updated: 2024-08-05T08:17:09.232Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer Copy Without Checking Size of Input in WLAN Description: Lack of check on remaining length parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9379, SD 210/SD 212/SD 205, SD 425, SD 625, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDX20 Additional Analyst Notes: - CVE Prog