Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-13836 State: PUBLISHED Published: 2018-07-12T15:00:00 Last Updated: 2024-08-05T09:14:47.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: An integer overflow vulnerability exists in the function multiTransfer of Rocket Coin (XRC), an Ethereum token smart contract. An attacker could use it to set any user's balance. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VenusADLab/EtherTokens/tree/master/Rocket%20Coin%28XRC%29 - https://github.com/VenusADLab/EtherTokens/blob/master/SHARKTECH/SHARKTECH.md
CVE ID: CVE-2018-13843 State: PUBLISHED Published: 2018-07-10T18:00:00 Last Updated: 2024-08-05T09:14:47.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in HTSlib 1.8. It is a memory leak in bgzf_getline in bgzf.c. NOTE: the software maintainer's position is that the "failure to free memory" can be fixed in applications that use the HTSlib library (such as test/test_bgzf.c in the original report) and is not a library issue Additional Analyst Notes: - CVE Program Container: References: - https://github.com/samtools/htslib/issues/731#issue-339662537
CVE ID: CVE-2018-13844 State: PUBLISHED Published: 2018-07-10T18:00:00 Last Updated: 2024-08-05T09:14:47.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in HTSlib 1.8. It is a memory leak in fai_read in faidx.c. NOTE: This has been disputed with the assertion that this vulnerability exists in the test harness and HTSlib users would be aware of the need to destruct this object returned by fai_load() in their own code Additional Analyst Notes: - CVE Program Container: References: - https://github.com/samtools/htslib/issues/731#issuecomment-403675330
CVE ID: CVE-2018-13845 State: PUBLISHED Published: 2018-07-10T18:00:00 Last Updated: 2024-08-05T09:14:47.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in HTSlib 1.8. It is a buffer over-read in sam_parse1 in sam.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/samtools/htslib/issues/731#issuecomment-403681105
CVE ID: CVE-2018-13846 State: PUBLISHED Published: 2018-07-10T18:00:00 Last Updated: 2024-08-05T09:14:47.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in Bento4 1.5.1-624. AP4_Mpeg2TsVideoSampleStream::WriteSample in Core/Ap4Mpeg2Ts.cpp has a heap-based buffer over-read after a call from Mp42Ts.cpp, a related issue to CVE-2018-14532. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/282
CVE ID: CVE-2018-13847 State: PUBLISHED Published: 2018-07-10T18:00:00 Last Updated: 2024-08-05T09:14:47.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in Bento4 1.5.1-624. It is a SEGV in AP4_StcoAtom::AdjustChunkOffsets in Core/Ap4StcoAtom.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/283
CVE ID: CVE-2018-13848 State: PUBLISHED Published: 2018-07-10T18:00:00 Last Updated: 2024-08-05T09:14:47.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in Bento4 1.5.1-624. It is a SEGV in AP4_StszAtom::GetSampleSize in Core/Ap4StszAtom.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/285
CVE ID: CVE-2018-13849 State: PUBLISHED Published: 2018-07-10T18:00:00 Last Updated: 2024-08-05T09:14:47.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: edit_requests.php in yTakkar Instagram-clone through 2018-04-23 has XSS via an onmouseover payload because of an inadequate XSS protection mechanism based on preg_replace. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45003/ - https://cxsecurity.com/issue/WLB-2018070095
CVE ID: CVE-2018-13850 State: PUBLISHED Published: 2018-07-10T18:00:00 Last Updated: 2024-08-05T09:14:47.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Firebase Cloud Messaging (FCM) + Advance Admin Panel" component supporting Firebase Push Notification on iOS (through 2017-10-26) allows SQL injection via the /advance_push/public/login username parameter. Additional Analyst Notes: - CVE Program Container: References: - https://cxsecurity.com/issue/WLB-2018070096
CVE ID: CVE-2018-13858 State: PUBLISHED Published: 2018-07-17T14:00:00 Last Updated: 2024-08-05T09:14:47.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional allows unauthorized remote attackers to reboot or execute other functions via the "/xml/system/control.xml" URL, using the GET request "?action=reboot" for example. Additional Analyst Notes: - CVE Program Container: References: - https://vulncode.com/advisory/CVE-2018-13858
CVE ID: CVE-2018-13859 State: PUBLISHED Published: 2018-07-17T14:00:00 Last Updated: 2024-08-05T09:14:47.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional before V9.34 build 13381 - 12.07.18, allow unauthorized remote attackers to reset the authentication via the "/xml/system/setAttribute.xml" URL, using the GET request "?id=0&attr=protectAccess&newValue=0" (a successful attack will allow attackers to login without authorization). Additional Analyst Notes: - CVE Program Container: References: - http://update.trivum.com/update/v9-changes.html - https://vulncode.com/advisory/CVE-2018-13859 - https://w
References: - http://update.trivum.com/update/v9-changes.html - https://vulncode.com/advisory/CVE-2018-13859 - https://www.exploit-db.com/exploits/45088/
CVE ID: CVE-2018-13860 State: PUBLISHED Published: 2018-07-17T14:00:00 Last Updated: 2024-08-05T09:14:47.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional before V9.34 build 13381 - 12.07.18 allows unauthorized remote attackers to obtain sensitive information via the "/xml/menu/getObjectEditor.xml" URL, using a "?oid=systemSetup&id=_0" or "?oid=systemUsers&id=_0" GET request. Additional Analyst Notes: - CVE Program Container: References: - https://vulncode.com/advisory/CVE-2018-13860 - http://update.trivum.com/update/v9-changes.html
CVE ID: CVE-2018-13861 State: PUBLISHED Published: 2018-07-17T14:00:00 Last Updated: 2024-08-05T09:14:47.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Touchpad / Trivum WebTouch Setup V9 V2.53 build 13163 of Apr 6 2018 09:10:14 (FW 303) allows unauthorized remote attackers to reboot or execute other functions via the "/xml/system/control.xml" URL, using the GET request "?action=reboot" for example. Additional Analyst Notes: - CVE Program Container: References: - https://vulncode.com/advisory/CVE-2018-13861
CVE ID: CVE-2018-13862 State: PUBLISHED Published: 2018-07-17T14:00:00 Last Updated: 2024-08-05T09:14:47.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Touchpad / Trivum WebTouch Setup V9 V2.53 build 13163 of Apr 6 2018 09:10:14 (FW 303) allow unauthorized remote attackers to reset the authentication via the "/xml/system/setAttribute.xml" URL, using the GET request "?id=0&attr=protectAccess&newValue=0" (a successful attack will allow attackers to login without authorization). Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45063/ - http://update.trivum.com/update/tp9-changes.html - https://vulncode.com/advisory/CVE-2018-13
it-db.com/exploits/45063/ - http://update.trivum.com/update/tp9-changes.html - https://vulncode.com/advisory/CVE-2018-13862
CVE ID: CVE-2018-13863 State: PUBLISHED Published: 2018-07-10T20:00:00Z Last Updated: 2024-09-16T23:21:48.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MongoDB bson JavaScript module (also known as js-bson) versions 0.5.0 to 1.0.x before 1.0.5 is vulnerable to a Regular Expression Denial of Service (ReDoS) in lib/bson/decimal128.js. The flaw is triggered when the Decimal128.fromString() function is called to parse a long untrusted string. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mongodb/js-bson/commit/bd61c45157c53a1698ff23770160cf4783e9ea4a - https://snyk.io/vuln/npm:bson:20180225
CVE ID: CVE-2018-13864 State: PUBLISHED Published: 2018-07-17T12:00:00 Last Updated: 2024-08-05T09:14:47.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: A directory traversal vulnerability has been found in the Assets controller in Play Framework 2.6.12 through 2.6.15 (fixed in 2.6.16) when running on Windows. It allows a remote attacker to download arbitrary files from the target server via specially crafted HTTP requests. Additional Analyst Notes: - CVE Program Container: References: - https://www.playframework.com/security/vulnerability/CVE-2018-13864-PathTraversal
CVE ID: CVE-2018-13865 State: PUBLISHED Published: 2018-07-10T20:00:00Z Last Updated: 2024-09-17T00:51:02.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in idreamsoft iCMS 7.0.9. XSS exists via the callback parameter in a public/api.php uploadpic request, bypassing the iWAF protection mechanism. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/idreamsoft/iCMS/issues/27
CVE ID: CVE-2018-13866 State: PUBLISHED Published: 2018-07-10T21:00:00Z Last Updated: 2024-09-16T17:34:11.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the HDF HDF5 1.8.20 library. There is a stack-based buffer over-read in the function H5F_addr_decode_len in H5Fint.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/tree/master/hdf5
CVE ID: CVE-2018-13867 State: PUBLISHED Published: 2018-07-10T21:00:00Z Last Updated: 2024-09-16T19:56:03.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the function H5F__accum_read in H5Faccum.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/tree/master/hdf5
CVE ID: CVE-2018-13868 State: PUBLISHED Published: 2018-07-10T21:00:00Z Last Updated: 2024-09-17T03:02:10.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_fill_old_decode in H5Ofill.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/tree/master/hdf5
CVE ID: CVE-2018-13869 State: PUBLISHED Published: 2018-07-10T21:00:00Z Last Updated: 2024-09-17T00:41:53.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the HDF HDF5 1.8.20 library. There is a memcpy parameter overlap in the function H5O_link_decode in H5Olink.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/tree/master/hdf5
CVE ID: CVE-2018-13870 State: PUBLISHED Published: 2018-07-10T21:00:00Z Last Updated: 2024-09-16T23:06:14.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_link_decode in H5Olink.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/tree/master/hdf5
CVE ID: CVE-2018-13871 State: PUBLISHED Published: 2018-07-10T21:00:00Z Last Updated: 2024-09-16T18:23:49.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer overflow in the function H5FL_blk_malloc in H5FL.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/tree/master/hdf5
CVE ID: CVE-2018-13872 State: PUBLISHED Published: 2018-07-10T21:00:00Z Last Updated: 2024-09-17T02:22:03.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer overflow in the function H5G_ent_decode in H5Gent.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/tree/master/hdf5
CVE ID: CVE-2018-13873 State: PUBLISHED Published: 2018-07-10T21:00:00Z Last Updated: 2024-09-16T22:14:50.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the HDF HDF5 1.8.20 library. There is a buffer over-read in H5O_chunk_deserialize in H5Ocache.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/tree/master/hdf5
CVE ID: CVE-2018-13874 State: PUBLISHED Published: 2018-07-10T21:00:00Z Last Updated: 2024-09-16T18:48:29.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the HDF HDF5 1.8.20 library. There is a stack-based buffer overflow in the function H5FD_sec2_read in H5FDsec2.c, related to HDmemset. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/tree/master/hdf5
CVE ID: CVE-2018-13875 State: PUBLISHED Published: 2018-07-10T21:00:00Z Last Updated: 2024-09-17T04:15:12.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the HDF HDF5 1.8.20 library. There is an out-of-bounds read in the function H5VM_memcpyvv in H5VM.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/tree/master/hdf5
CVE ID: CVE-2018-13876 State: PUBLISHED Published: 2018-07-10T21:00:00Z Last Updated: 2024-09-17T01:45:34.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the HDF HDF5 1.8.20 library. There is a stack-based buffer overflow in the function H5FD_sec2_read in H5FDsec2.c, related to HDread. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/tree/master/hdf5
CVE ID: CVE-2018-13877 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-05T09:14:47.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: The doPayouts() function of the smart contract implementation for MegaCryptoPolis, an Ethereum game, has a Denial of Service vulnerability. If a smart contract that has a fallback function always causing exceptions buys a land, users cannot buy lands near that contract's land, because those purchase attempts will not be completed unless the doPayouts() function successfully sends Ether to certain neighbors. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/coinmonks/denial-of-service-dos-atta
Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/coinmonks/denial-of-service-dos-attack-on-megacryptopolis-an-ethereum-game-cve-2018-13877-cdd7f7ef8b08
CVE ID: CVE-2018-13878 State: PUBLISHED Published: 2018-07-11T01:00:00Z Last Updated: 2024-09-17T01:20:43.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in packages/rocketchat-mentions/Mentions.js in Rocket.Chat before 0.65. The real name of a username is displayed unescaped when the user is mentioned (using the @ symbol) in a channel or private chat. Consequently, it is possible to exfiltrate the secret token of every user and also admins in the channel. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/RocketChat/Rocket.Chat/pull/10793
CVE ID: CVE-2018-13879 State: PUBLISHED Published: 2018-07-11T01:00:00Z Last Updated: 2024-09-17T03:33:02.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected XSS issue was discovered in the registration form in Rocket.Chat before 0.66. When one creates an account, the next step will ask for a username. This field will not save HTML control characters but an error will be displayed that shows the attempted username unescaped via packages/rocketchat-ui-login/client/username/username.js in packages/rocketchat-ui-login/client/username/username.html. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/RocketChat/Rocket.Chat/issues/10795
CVE ID: CVE-2018-13880 State: REJECTED Published: 2021-11-23T19:59:08 Last Updated: 2021-11-23T19:59:08 Description: No description available.
CVE ID: CVE-2018-13881 State: REJECTED Published: 2021-11-23T19:59:09 Last Updated: 2021-11-23T19:59:09 Description: No description available.
CVE ID: CVE-2018-13882 State: REJECTED Published: 2021-11-23T19:59:10 Last Updated: 2021-11-23T19:59:10 Description: No description available.
CVE ID: CVE-2018-13883 State: REJECTED Published: 2021-11-23T19:59:10 Last Updated: 2021-11-23T19:59:10 Description: No description available.
CVE ID: CVE-2018-13884 State: REJECTED Published: 2019-08-16T13:41:27 Last Updated: 2019-08-16T13:41:27 Description: No description available.
CVE ID: CVE-2018-13885 State: PUBLISHED Published: 2019-05-24T16:44:16 Last Updated: 2024-08-05T09:14:47.256Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables Problem Types: Information Exposure Issue in MMCP module Description: Possible memory overread may be lead to access of sensitive data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9650, MDM9655, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 /
DM9625, MDM9635M, MDM9650, MDM9655, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 835, SD 845 / SD 850, SDA660, SDM439, SDM630, SDM660, SDX20, SM7150, SXR1130 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins#_CVE-2018-13885
CVE ID: CVE-2018-13886 State: PUBLISHED Published: 2019-05-24T16:44:16 Last Updated: 2024-08-05T09:14:47.418Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables Problem Types: Integer Overflow to Buffer Overflow Issue in GNSS Module Description: Unchecked OTA field in GNSS XTRA3 lead to integer overflow and then buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobil
Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDM439, SDM630, SDM660, SDX20, SM7150, Snapdragon_High_Med_2016, SXR1130 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/produ
ed_2016, SXR1130 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins#_CVE-2018-13886
CVE ID: CVE-2018-13887 State: PUBLISHED Published: 2019-05-24T16:44:16 Last Updated: 2024-08-05T09:14:47.342Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables Problem Types: Integer Overflow or Wraparound Issue in GNSS module Description: Untrusted header fields in GNSS XTRA3 function can lead to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, MSM8909W, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD
, MDM9607, MDM9635M, MDM9650, MDM9655, MSM8909W, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 835, SD 845 / SD 850, SDA660, SDM439, SDM630, SDM660, SDX20, SM7150, SXR1130 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins#_CVE-2018-13887
CVE ID: CVE-2018-13888 State: PUBLISHED Published: 2019-02-11T15:00:00 Last Updated: 2024-08-05T09:14:47.275Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables Problem Types: Buffer Copy Without Checking Size of Input in RIL Description: There is potential for memory corruption in the RIL daemon due to de reference of memory outside the allocated array length in RIL in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in versions MDM9206, MDM9607, MDM9635M, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 4
sions MDM9206, MDM9607, MDM9635M, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM439, SDM630, SDM660, ZZ_QCS605. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106475 - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2018-13889 State: PUBLISHED Published: 2019-02-11T15:00:00 Last Updated: 2024-08-05T09:14:47.247Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Use After Free in GPS Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Heap memory was accessed after it was freed Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2019/01/07/january-2019-code-aurora-security-bulletin - http://www.securityfocus.com/bid/106496
CVE ID: CVE-2018-13890 State: REJECTED Published: 2021-11-23T19:59:11 Last Updated: 2021-11-23T19:59:11 Description: No description available.
CVE ID: CVE-2018-13891 State: REJECTED Published: 2021-11-23T19:59:12 Last Updated: 2021-11-23T19:59:12 Description: No description available.
CVE ID: CVE-2018-13892 State: REJECTED Published: 2021-11-23T19:59:13 Last Updated: 2021-11-23T19:59:13 Description: No description available.
CVE ID: CVE-2018-13893 State: PUBLISHED Published: 2019-02-11T15:00:00 Last Updated: 2024-08-05T09:14:47.363Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Untrusted Pointer Dereference in DIAG Services Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Out of bound mask range access caused by using possible old value of msg mask table count while copying masks to userspace. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2019/01/07/january-2019-code-aurora-security-bulletin