deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-16792
Published: 2018-12-05
Description: SolarWinds SFTP/SCP server through 2018-09-10 is vulnerable to XXE via a world readable and writable configuration file that allows an attacker to exfiltrate data.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-611
References: https://seclists.org/fulldisclosure/2018/Dec/0; https://seclists.org/fulldisclosure/2018/Dec/0
CVE: CVE-2018-18312
Published: 2018-12-05
Description: Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/106179; http://www.securitytracker.com/id/1042181; https://access.redhat.com/errata/RHSA-2019:0001
CVE: CVE-2018-19608
Published: 2018-12-05
Description: Arm Mbed TLS before 2.14.1, before 2.7.8, and before 2.1.17 allows a local unprivileged attacker to recover the plaintext of RSA decryption, which is used in RSA-without-(EC)DH(E) cipher suites.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-269
References: http://cat.eyalro.net/; https://tls.mbed.org/tech-updates/releases/mbedtls-2.14.1-2.7.8-and-2.1.17-released; https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2018-03
CVE: CVE-2018-19650
Published: 2018-12-05
Description: Local attackers can trigger a stack-based buffer overflow on vulnerable installations of Antiy-AVL ATool security management v1.0.0.22. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of IOCTL 0x80002000 by the IRPFile.sys Antiy-AVL ATool kernel driver. The bug is caused by failure to properly validate the length of the user-supplied data, which results in a kernel stack buffer overflow. An attacker can leverage this vulnerability to execute arbitrary code in the context of the kernel, which could lead to privilege escalation and a failed exploit could lead to denial of service.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://packetstormsecurity.com/files/150549/ATool-1.0.0.22-Stack-Buffer-Overflow.html; http://packetstormsecurity.com/files/150549/ATool-1.0.0.22-Stack-Buffer-Overflow.html
CVE: CVE-2018-19753
Published: 2018-12-05
Description: Tarantella Enterprise before 3.11 allows Directory Traversal.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/150541/Tarantella-Enterprise-Directory-Traversal.html; http://seclists.org/fulldisclosure/2018/Nov/66; http://packetstormsecurity.com/files/150541/Tarantella-Enterprise-Directory-Traversal.html
CVE: CVE-2018-19754
Published: 2018-12-05
Description: Tarantella Enterprise before 3.11 allows bypassing Access Control.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: http://packetstormsecurity.com/files/150542/Tarantella-Enterprise-Security-Bypass.html; http://seclists.org/fulldisclosure/2018/Nov/67; http://packetstormsecurity.com/files/150542/Tarantella-Enterprise-Security-Bypass.html
CVE: CVE-2018-19881
Published: 2018-12-06
Description: In Artifex MuPDF 1.14.0, svg/svg-run.c allows remote attackers to cause a denial of service (recursive calls followed by a fitz/xml.c fz_xml_att crash from excessive stack consumption) via a crafted svg file, as demonstrated by mupdf-gl.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://bugs.ghostscript.com/show_bug.cgi?id=700442; https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=c8f7e48ff74720a5e984ae19d978a5ab4d5dde5b; https://github.com/TeamSeri0us/pocs/tree/master/mupdf/20181203
CVE: CVE-2018-19882
Published: 2018-12-06
Description: In Artifex MuPDF 1.14.0, the svg_run_image function in svg/svg-run.c allows remote attackers to cause a denial of service (href_att NULL pointer dereference and application crash) via a crafted svg file, as demonstrated by mupdf-gl.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://www.ghostscript.com/cgi-bin/findgit.cgi?a7f7d91cdff8d303c11d458fa8b802776f73c8cc; https://bugs.ghostscript.com/show_bug.cgi?id=700342; https://github.com/TeamSeri0us/pocs/tree/master/mupdf/20181203
CVE: CVE-2018-19886
Published: 2018-12-06
Description: An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The vulnerability causes a segmentation fault and application crash, which leads to denial of service in the book 8 case.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://github.com/knik0/faac/issues/23; https://security.gentoo.org/glsa/202208-16; https://github.com/knik0/faac/issues/23
CVE: CVE-2018-19887
Published: 2018-12-06
Description: An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The vulnerability causes a segmentation fault and application crash, which leads to denial of service in the book 4 case.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://github.com/knik0/faac/issues/21; https://github.com/knik0/faac/issues/21
CVE: CVE-2018-19888
Published: 2018-12-06
Description: An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The vulnerability causes a segmentation fault and application crash, which leads to denial of service in the HCB_ESC case.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://github.com/knik0/faac/issues/25; https://github.com/knik0/faac/issues/25
CVE: CVE-2018-19889
Published: 2018-12-06
Description: An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The vulnerability causes a segmentation fault and application crash, which leads to denial of service in the book 6 case.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://github.com/knik0/faac/issues/22; https://github.com/knik0/faac/issues/22
CVE: CVE-2018-19890
Published: 2018-12-06
Description: An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The vulnerability causes a segmentation fault and application crash, which leads to denial of service in the book 2 case.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://github.com/knik0/faac/issues/20; https://github.com/knik0/faac/issues/20
CVE: CVE-2018-19891
Published: 2018-12-06
Description: An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The vulnerability causes a segmentation fault and application crash, which leads to denial of service in the book 10 case.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://github.com/knik0/faac/issues/24; https://github.com/knik0/faac/issues/24
CVE: CVE-2018-19892
Published: 2018-12-06
Description: DomainMOD through 4.11.01 has XSS via the admin/dw/add-server.php DisplayName, HostName, or UserName field.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/domainmod/domainmod/issues/85; https://github.com/domainmod/domainmod/issues/85
CVE: CVE-2018-19893
Published: 2018-12-06
Description: SearchController.php in PbootCMS 1.2.1 has SQL injection via the index.php/Search/index.html query string.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/Pbootcms/Pbootcms/issues/3; https://github.com/Pbootcms/Pbootcms/issues/3
CVE: CVE-2018-19894
Published: 2018-12-06
Description: ThinkCMF X2.2.2 has SQL Injection via the functions check() and delete() in CommentadminController.class.php and is exploitable with the manager privilege via the ids[] parameter in a commentadmin action.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/thinkcmf/cmfx/issues/26; https://github.com/thinkcmf/cmfx/issues/26
CVE: CVE-2018-19895
Published: 2018-12-06
Description: ThinkCMF X2.2.2 has SQL Injection via the function edit_post() in NavController.class.php and is exploitable with the manager privilege via the parentid parameter in a nav action.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/thinkcmf/cmfx/issues/26; https://github.com/thinkcmf/cmfx/issues/26
CVE: CVE-2018-19896
Published: 2018-12-06
Description: ThinkCMF X2.2.2 has SQL Injection via the function delete() in SlideController.class.php and is exploitable with the manager privilege via the ids[] parameter in a slide action.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/thinkcmf/cmfx/issues/26; https://github.com/thinkcmf/cmfx/issues/26
CVE: CVE-2018-19897
Published: 2018-12-06
Description: ThinkCMF X2.2.2 has SQL Injection via the function _listorders() in AdminbaseController.class.php and is exploitable with the manager privilege via the listorders[key][1] parameter in a Link listorders action.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/thinkcmf/cmfx/issues/26; https://github.com/thinkcmf/cmfx/issues/26
CVE: CVE-2018-19898
Published: 2018-12-06
Description: ThinkCMF X2.2.2 has SQL Injection via the method edit_post in ArticleController.class.php and is exploitable by normal authenticated users via the post[id][1] parameter in an article edit_post action.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/thinkcmf/cmfx/issues/26; https://github.com/thinkcmf/cmfx/issues/26
CVE: CVE-2018-19907
Published: 2018-12-06
Description: A Server-Side Template Injection issue was discovered in Crafter CMS 3.0.18. Attackers with developer privileges may execute OS commands by Creating/Editing a template file (.ftl filetype) that triggers a call to freemarker.template.utility.Execute in the FreeMarker library during rendering of a web page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://github.com/craftercms/craftercms/issues/2677; https://medium.com/%40buxuqua/rce-vulnerability-in-crafter-cms-server-side-template-injection-19d8708ce242; https://github.com/craftercms/craftercms/issues/2677
CVE: CVE-2018-15332
Published: 2018-12-06
Description: The svpn component of the F5 BIG-IP APM client prior to version 7.1.7.2 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of files owned by root on the local client host in a race condition.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: http://www.securityfocus.com/bid/106135; https://support.f5.com/csp/article/K12130880; http://www.securityfocus.com/bid/106135
CVE: CVE-2018-10145
Published: 2018-12-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-10146
Published: 2018-12-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-10147
Published: 2018-12-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-10148
Published: 2018-12-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-10149
Published: 2018-12-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-10150
Published: 2018-12-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-10151
Published: 2018-12-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-10152
Published: 2018-12-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-10153
Published: 2018-12-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-10154
Published: 2018-12-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-10155
Published: 2018-12-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-10156
Published: 2018-12-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-10157
Published: 2018-12-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-10158
Published: 2018-12-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-10159
Published: 2018-12-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-10160
Published: 2018-12-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-10161
Published: 2018-12-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-10162
Published: 2018-12-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-10163
Published: 2018-12-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-1504
Published: 2018-12-06
Description: IBM i2 Enterprise Insight Analysis 2.1.7 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 141340.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-20
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/141340; https://www.ibm.com/support/docview.wss?uid=ibm10738699; https://exchange.xforce.ibmcloud.com/vulnerabilities/141340
CVE: CVE-2018-1505
Published: 2018-12-06
Description: IBM i2 Enterprise Insight Analysis 2.1.7 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 141413.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/141413; https://www.ibm.com/support/docview.wss?uid=ibm10738699; https://exchange.xforce.ibmcloud.com/vulnerabilities/141413
CVE: CVE-2018-1525
Published: 2018-12-06
Description: IBM i2 Enterprise Insight Analysis 2.1.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 142117.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-319
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/142117; https://www.ibm.com/support/docview.wss?uid=ibm10738699; https://exchange.xforce.ibmcloud.com/vulnerabilities/142117
CVE: CVE-2018-1871
Published: 2018-12-06
Description: IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.0.0, 3.0.2, and 3.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 151329.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10743123; http://www.securityfocus.com/bid/106149; https://exchange.xforce.ibmcloud.com/vulnerabilities/151329
CVE: CVE-2018-1935
Published: 2018-12-06
Description: IBM Connections 5.0, 5.5, and 6.0 could allow an authenticated user to obtain sensitive information from invalid request error messages. IBM X-Force ID: 153315.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/106134; https://exchange.xforce.ibmcloud.com/vulnerabilities/153315; https://www.ibm.com/support/docview.wss?uid=ibm10742575
CVE: CVE-2018-9538
Published: 2018-12-06
Description: In V4L2SliceVideoDecodeAccelerator::Dequeue of v4l2_slice_video_decode_accelerator.cc, there is a possible out of bounds read of a function pointer due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-8.1 Android-9. Android ID: A-112181526.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/106137; https://source.android.com/security/bulletin/2018-12-01; http://www.securityfocus.com/bid/106137
CVE: CVE-2018-9547
Published: 2018-12-06
Description: In unflatten of GraphicBuffer.cpp, there is a possible bad fd close due to improper input validation. This could lead to local escalation of privilege in the system server with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-8.1 Android-9. Android ID: A-114223584.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/106067; https://source.android.com/security/bulletin/2018-12-01; http://www.securityfocus.com/bid/106067
CVE: CVE-2018-9548
Published: 2018-12-06
Description: In multiple functions of ContentProvider.java, there is a possible permission bypass due to a missing URI validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-112555574.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: http://www.securityfocus.com/bid/106067; https://source.android.com/security/bulletin/2018-12-01; http://www.securityfocus.com/bid/106067
CVE: CVE-2018-9549
Published: 2018-12-06
Description: In lppTransposer of lpp_tran.cpp there is a possible out of bounds write due to missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-112160868.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/106137; https://source.android.com/security/bulletin/2018-12-01; http://www.securityfocus.com/bid/106137
CVE: CVE-2018-9550
Published: 2018-12-06
Description: In CAacDecoder_Init of aacdecoder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-112660981.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/106137; https://source.android.com/security/bulletin/2018-12-01; http://www.securityfocus.com/bid/106137
CVE: CVE-2018-9551
Published: 2018-12-06
Description: In CAacDecoder_Init of aacdecoder.cpp, there is a possible out-of-bound write due to a missing bounds check. This could lead to remote code execution in the media server with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-112891548.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/106137; https://source.android.com/security/bulletin/2018-12-01; http://www.securityfocus.com/bid/106137
CVE: CVE-2018-9552
Published: 2018-12-06
Description: In ihevcd_sao_shift_ctb of ihevcd_sao.c there is a possible out of bounds write due to missing bounds check. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-113260892.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: http://www.securityfocus.com/bid/106137; https://source.android.com/security/bulletin/2018-12-01; http://www.securityfocus.com/bid/106137
CVE: CVE-2018-9553
Published: 2018-12-06
Description: In MasteringMetadata::Parse of mkvparser.cc there is a possible double free due to an insecure default value. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-116615297.
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: http://www.securityfocus.com/bid/106137; https://source.android.com/security/bulletin/2018-12-01; http://www.securityfocus.com/bid/106137
CVE: CVE-2018-9554
Published: 2018-12-06
Description: In dumpExtractors of IMediaExtractor.cp, there is a possible disclosure of recently accessed media files due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1. Android ID: A-114770654.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/106137; https://source.android.com/security/bulletin/2018-12-01; http://www.securityfocus.com/bid/106137
CVE: CVE-2018-9555
Published: 2018-12-06
Description: In l2c_lcc_proc_pdu of l2c_fcr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-112321180.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/106147; https://source.android.com/security/bulletin/2018-12-01; http://www.securityfocus.com/bid/106147
CVE: CVE-2018-9556
Published: 2018-12-06
Description: In ParsePayloadHeader of payload_metadata.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-113118184.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190, CWE-787
References: http://www.securityfocus.com/bid/106147; https://source.android.com/security/bulletin/2018-12-01; http://www.securityfocus.com/bid/106147