deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-12227
Published: 2024-12-05
Description: A vulnerability, which was classified as problematic, was found in MSI Dragon Center up to 2.0.146.0. This affects the function MmUnMapIoSpace in the library NTIOLib_X64.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. Upgrading to version 2.0.148.0 is able to address this issue. It is recommended to upgrade the affected component.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-404, CWE-476
References: https://shareforall.notion.site/MSI-Dragon-Center-NTIOLib_X64-0xC3506104-MmMapIoSpace-DOS-15160437bb1e801daf58d4aea052970e; https://vuldb.com/?ctiid.286959; https://vuldb.com/?id.286959
CVE: CVE-2024-12228
Published: 2024-12-05
Description: A vulnerability classified as critical has been found in PHPGurukul Complaint Management System 1.0. Affected is an unknown function of the file /admin/user-search.php. The manipulation of the argument search leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/PunyHunter/CVE/issues/2; https://phpgurukul.com/; https://vuldb.com/?ctiid.286974
CVE: CVE-2024-40763
Published: 2024-12-05
Description: Heap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy. This allows remote authenticated attackers to cause Heap-based buffer overflow and potentially lead to code execution.
CVSS Score: 7.5 (HIGH)
CWE: CWE-122
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0018
CVE: CVE-2024-45318
Published: 2024-12-05
Description: A vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers to cause Stack-based buffer overflow and potentially lead to code execution.
CVSS Score: 8.1 (HIGH)
CWE: CWE-121
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0018
CVE: CVE-2024-45319
Published: 2024-12-05
Description: A vulnerability in the SonicWall SMA100 SSLVPN 

firmware 10.2.1.13-72sv and earlier versions allows a remote authenticated attacker can circumvent the certificate requirement during authentication.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-798
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0018
CVE: CVE-2024-52271
Published: 2024-12-05
Description: User Interface (UI) Misrepresentation of Critical Information vulnerability in Documenso allows Content Spoofing.Displayed version does not show the layer flattened version, once download, If printed (e.g. via Google Chrome -> Examine the print preview): Will render the vulnerability only, not all layers are flattened.


This issue affects Documenso: through 1.8.0, >1.8.0 and Documenso SaaS (Hosted) as of 2024-12-05.
CWE: CWE-451
References: https://github.com/documenso/documenso; https://github.com/documenso/documenso/issues/1512; https://www.documenso.com/
CVE: CVE-2024-53702
Published: 2024-12-05
Description: Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the SonicWall SMA100 SSLVPN backup code generator that, in certain cases, can be predicted by an attacker, potentially exposing the generated secret.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-338
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0018
CVE: CVE-2024-53703
Published: 2024-12-05
Description: A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions mod_httprp library loaded by the Apache web server allows remote attackers to cause Stack-based buffer overflow and potentially lead to code execution.
CVSS Score: 8.1 (HIGH)
CWE: CWE-121
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0018
CVE: CVE-2024-54679
Published: 2024-12-05
Description: CyberPanel (aka Cyber Panel) before 6778ad1 does not require the FilemanagerAdmin capability for restartMySQL actions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://cyberpanel.net/; https://github.com/hotplugin0x01/CVE-2024-54679; https://github.com/usmannasir/cyberpanel/commit/6778ad1eaae41f72365da8fd021f9a60369600dc
CVE: CVE-2024-11941
Published: 2024-12-05
Description: A vulnerability in Drupal Core allows Excessive Allocation.This issue affects Drupal Core: from 10.2.0 before 10.2.2, from 10.1.0 before 10.1.8.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835, CWE-835
References: https://www.drupal.org/sa-core-2024-001
CVE: CVE-2024-11942
Published: 2024-12-05
Description: A vulnerability in Drupal Core allows File Manipulation.This issue affects Drupal Core: from 10.0.0 before 10.2.10.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-390
References: https://www.drupal.org/sa-core-2024-002
CVE: CVE-2024-12229
Published: 2024-12-05
Description: A vulnerability classified as critical was found in PHPGurukul Complaint Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/complaint-search.php. The manipulation of the argument search leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/qiyes233/CVE/issues/1; https://phpgurukul.com/; https://vuldb.com/?ctiid.286975
CVE: CVE-2024-12230
Published: 2024-12-05
Description: A vulnerability, which was classified as critical, has been found in PHPGurukul Complaint Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/subcategory.php. The manipulation of the argument category leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/wqywfvc/CVE/issues/2; https://phpgurukul.com/; https://vuldb.com/?ctiid.286976
CVE: CVE-2024-10716
Published: 2024-12-05
Description: Pega Platform versions 8.1 to Infinity 24.2.0 are affected by an XSS issue with search.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://support.pega.com/support-doc/pega-security-advisory-e24-vulnerability-remediation-note
CVE: CVE-2024-12231
Published: 2024-12-05
Description: A vulnerability, which was classified as critical, was found in CodeZips Project Management System 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/SkGoing/CVE-repo_00/issues/3; https://vuldb.com/?ctiid.286977; https://vuldb.com/?id.286977
CVE: CVE-2024-12232
Published: 2024-12-05
Description: A vulnerability has been found in code-projects Simple CRUD Functionality 1.0 and classified as problematic. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument newtitle/newdescr leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://code-projects.org/; https://github.com/LamentXU123/cve/blob/main/xss3.md; https://vuldb.com/?ctiid.286978
CVE: CVE-2024-12247
Published: 2024-12-05
Description: Mattermost versions 9.7.x <= 9.7.5, 9.8.x <= 9.8.2 and 9.9.x <= 9.9.2 fail to properly propagate permission scheme updates across cluster nodes which allows a user to keep old permissions, even if the permission scheme has been updated.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-863
References: https://mattermost.com/security-updates
CVE: CVE-2024-53470
Published: 2024-12-05
Description: Multiple stored cross-site scripting (XSS) vulnerabilities in the component /configuracao/gateway_pagamento.php of WeGIA v3.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the id or name parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/nilsonmori/WeGIA; https://github.com/nmmorette/vulnerability-research/blob/main/CVE-2024-53470/README.md; https://www.wegia.org
CVE: CVE-2024-53471
Published: 2024-12-05
Description: Multiple stored cross-site scripting (XSS) vulnerabilities in the component /configuracao/meio_pagamento.php of WeGIA v3.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the id or name parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/nilsonmori/WeGIA; https://github.com/nmmorette/vulnerability-research/blob/main/CVE-2024-53471/README.md; https://github.com/nmmorette/vulnerability-research/blob/main/CVE-2024-53471/README.md
CVE: CVE-2024-53472
Published: 2024-12-05
Description: WeGIA v3.2.0 was discovered to contain a Cross-Site Request Forgery (CSRF).
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/nilsonLazarin/WeGIA/; https://github.com/nmmorette/vulnerability-research/tree/main/CVE-2024-53472; https://www.wegia.org
CVE: CVE-2024-53856
Published: 2024-12-05
Description: rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14.1, rPGP allows an attacker to trigger rpgp crashes by providing crafted data. This vulnerability is fixed in 0.14.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-130, CWE-148, CWE-617
References: https://github.com/rpgp/rpgp/security/advisories/GHSA-9rmp-2568-59rv
CVE: CVE-2024-53857
Published: 2024-12-05
Description: rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14.1, rPGP allows attackers to trigger resource exhaustion vulnerabilities in rpgp by providing crafted messages. This affects general message parsing and decryption with symmetric keys.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/rpgp/rpgp/security/advisories/GHSA-4grw-m28r-q285
CVE: CVE-2024-54001
Published: 2024-12-05
Description: Kanboard is project management software that focuses on the Kanban methodology. HTML can be injected and stored into the application settings section. The fields application_language, application_date_format,application_timezone and application_time_format allow arbirary user input which is reflected. The vulnerability can become xss if the user input is javascript code that bypass CSP. This vulnerability is fixed in 1.2.41.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-80, CWE-79
References: https://github.com/kanboard/kanboard/security/advisories/GHSA-4vvp-jf72-chrj
CVE: CVE-2024-54129
Published: 2024-12-05
Description: The NASA’s Interplanetary Overlay Network (ION) is an implementation of Delay/Disruption Tolerant Networking (DTN). A vulnerability exists in the version ION-DTN BPv7 implementation version 4.1.3 when receiving a bundle with an improper reference to the imc scheme with valid Service-Specific Part (SSP) in their Previous Node Block. The vulnerability can cause ION to become unresponsive. This vulnerability is fixed in 4.1.3s.
CWE: CWE-665
References: https://github.com/nasa-jpl/ION-DTN/security/advisories/GHSA-393w-w6jh-pq3j
CVE: CVE-2024-54130
Published: 2024-12-05
Description: The NASA’s Interplanetary Overlay Network (ION) is an implementation of Delay/Disruption Tolerant Networking (DTN). A segmentation fault occurs with ION-DTN BPv7 software version 4.1.3 when a bundle with a Destination Endpoint ID (EID) set to dtn:none is received. This causes the node to become unresponsive to incoming bundles, leading to a Denial of Service (DoS) condition. This vulnerability is fixed in 4.1.3s.
CWE: CWE-476
References: https://github.com/nasa-jpl/ION-DTN/security/advisories/GHSA-7pj7-hfwv-q3v6
CVE: CVE-2024-12233
Published: 2024-12-05
Description: A vulnerability was found in code-projects Online Notice Board up to 1.0 and classified as critical. This issue affects some unknown processing of the file /registration.php of the component Profile Picture Handler. The manipulation of the argument img leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-284, CWE-434, CWE-434
References: https://code-projects.org/; https://github.com/LamentXU123/cve/blob/main/RCE1.md; https://vuldb.com/?ctiid.286979
CVE: CVE-2024-12234
Published: 2024-12-05
Description: A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/edit-customer-detailed.php. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://1000projects.org/; https://github.com/Hacker0xone/CVE/issues/17; https://vuldb.com/?ctiid.286980
CVE: CVE-2024-53490
Published: 2024-12-05
Description: Favorites-web 1.3.0 favorites-web has a directory traversal vulnerability in SecurityFilter.java.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/DYX217/directory-traversal
CVE: CVE-2024-53846
Published: 2024-12-05
Description: OTP is a set of Erlang libraries, which consists of the Erlang runtime system, a number of ready-to-use components mainly written in Erlang, and a set of design principles for Erlang programs. A regression was introduced into the ssl application of OTP starting at OTP-25.3.2.8, OTP-26.2, and OTP-27.0, resulting in a server or client verifying the peer when incorrect extended key usage is presented (i.e., a server will verify a client if they have server auth ext key usage and vice versa).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-295
References: https://github.com/erlang/otp/security/advisories/GHSA-qw6r-qh9v-638v
CVE: CVE-2024-54128
Published: 2024-12-05
Description: Directus is a real-time API and App dashboard for managing SQL database content. The Comment feature has implemented a filter to prevent users from adding restricted characters, such as HTML tags. However, this filter operates on the client-side, which can be bypassed, making the application vulnerable to HTML Injection. This vulerability is fixed in 10.13.4 and 11.2.0.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-80
References: https://github.com/directus/directus/security/advisories/GHSA-r6wx-627v-gh2f
CVE: CVE-2024-11155
Published: 2024-12-05
Description: A “use after free”  code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to use a resource that was already used. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit this vulnerability, a legitimate user must execute the malicious code crafted by the threat actor.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1713.html
CVE: CVE-2024-11156
Published: 2024-12-05
Description: An “out of bounds write”  code execution vulnerability exists in the

Rockwell Automation Arena®

 that could allow a threat actor to write beyond the boundaries of allocated memory in a DOE file. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit this vulnerability, a legitimate user must execute the malicious code crafted by the threat actor.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1713.html
CVE: CVE-2024-11158
Published: 2024-12-05
Description: An “uninitialized variable” code execution vulnerability exists in the 

Rockwell Automation Arena®

 that could allow a threat actor to craft a DOE file and force the software to access a variable before it being initialized. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit this vulnerability, a legitimate user must execute the malicious code crafted by the threat actor.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-665, CWE-665
References: https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1713.html
CVE: CVE-2024-12130
Published: 2024-12-05
Description: An “out of bounds read” code execution vulnerability exists in the Rockwell Automation Arena®

 that could allow a threat actor to craft a DOE file and force the software to read beyond the boundaries of an allocated memory. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit this vulnerability, a legitimate user must execute the malicious code crafted by the threat actor.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1713.html
CVE: CVE-2024-12235
Published: 2024-12-05
Description: A vulnerability was found in Shenzhen Dashi Tongzhou Information Technology AgileBPM up to 1.0.0. It has been declared as critical. Affected by this vulnerability is the function doFilter of the file \agile-bpm-basic-master\ab-auth\ab-auth-spring-security-oauth2\src\main\java\com\dstz\auth\filter\AuthorizationTokenCheckFilter.java. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-266, CWE-284
References: https://github.com/sweatxi/rce/blob/main/AgileBPM_vertical_overreach.md; https://vuldb.com/?ctiid.286981; https://vuldb.com/?id.286981
CVE: CVE-2023-48010
Published: 2024-12-05
Description: STMicroelectronics SPC58 is vulnerable to Missing Protection Mechanism for Alternate Hardware Interface. Code running as Supervisor on the SPC58 PowerPC microcontrollers may disable the System Memory Protection Unit and gain unabridged read/write access to protected assets.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522
References: https://plaxidityx.com/blog/blog-post/is-your-memory-protecteduncovering-hidden-vulnerabilities-in-automotive-mpu-mechanisms/; https://www.st.com/resource/en/reference_manual/rm0452-spc58-h-line--32-bit-power-architecture-automotive-mcu-triple-z4-cores-200-mhz-10-mbytes-flash-hsm-asild-stmicroelectronics.pdf
CVE: CVE-2023-50913
Published: 2024-12-05
Description: Oxide control plane software before 5 allows SSRF.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-918
References: https://docs.oxide.computer/security/advisories/20231215-1; https://oxide.computer
CVE: CVE-2024-10933
Published: 2024-12-05
Description: In OpenBSD 7.5 before errata 009 and OpenBSD 7.4 before errata 022, exclude any '/' in readdir name validation to avoid unexpected directory traversal on untrusted file systems.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: https://ftp.openbsd.org/pub/OpenBSD/patches/7.4/common/022_readdir.patch.sig; https://ftp.openbsd.org/pub/OpenBSD/patches/7.5/common/009_readdir.patch.sig
CVE: CVE-2024-11148
Published: 2024-12-05
Description: In OpenBSD 7.4 before errata 006 and OpenBSD 7.3 before errata 020, httpd(8) is vulnerable to a NULL dereference when handling a malformed fastcgi request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/020_httpd.patch.sig; https://ftp.openbsd.org/pub/OpenBSD/patches/7.4/common/006_httpd.patch.sig
CVE: CVE-2024-41579
Published: 2024-12-05
Description: DTStack Taier 1.4.0 allows remote attackers to specify the jobName parameter in the console listNames function to cause a SQL injection vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://gist.github.com/nerowander/380707503cfb078cbd6bed9fc9b12ad9; https://github.com/DTStack/Taier/issues/1184
CVE: CVE-2024-53442
Published: 2024-12-05
Description: whapa v1.59 is vulnerable to Command Injection via a crafted filename to the HTML reports component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-79
References: https://1d8.github.io/cves/cve_2024_53442/; https://github.com/B16f00t/whapa
CVE: CVE-2024-53589
Published: 2024-12-05
Description: GNU objdump 2.43 is vulnerable to Buffer Overflow in the BFD (Binary File Descriptor) library's handling of tekhex format files.
CVSS Score: 8.4 (HIGH)
CWE: CWE-120
References: https://bushido-sec.com/index.php/2024/12/05/binutils-objdump-tekhex-buffer-overflow/; https://www.gnu.org/software/binutils/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2024-53523
Published: 2024-12-05
Description: JSFinder commit d70ab9bc5221e016c08cffaf0d9ac79646c90645 is vulnerable to Directory Traversal in the find_by_file function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/Threezh1/JSFinder; https://github.com/Threezh1/JSFinder/issues/33
CVE: CVE-2017-13308
Published: 2024-12-05
Description: In tscpu_write_GPIO_out and mtkts_Abts_write of mtk_ts_Abts.c, there is a possible buffer overflow in an sscanf due to improper input validation. This could lead to a local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://source.android.com/security/bulletin/pixel/2018-06-01
CVE: CVE-2021-0937
Published: 2024-12-05
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2024-12064
Published: 2024-12-05
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2024-53457
Published: 2024-12-05
Description: A stored cross-site scripting (XSS) vulnerability in the Device Settings section of LibreNMS v24.9.0 to v24.10.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Display Name parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/tCu0n9/Stored-XSS-LibreNMS-Display-Name.git; https://github.com/tCu0n9/Stored-XSS-LibreNMS-Display-Name.git
CVE: CVE-2024-54140
Published: 2024-12-05
Description: sigstore-java is a sigstore java client for interacting with sigstore infrastructure. sigstore-java has insufficient verification for a situation where a bundle provides a invalid signature for a checkpoint. This bug impacts clients using any variation of KeylessVerifier.verify(). Currently checkpoints are only used to ensure the root hash of an inclusion proof was provided by the log in question. Failing to validate that means a bundle may provide an inclusion proof that doesn't actually correspond to the log in question. This may eventually lead a monitor/witness being unable to detect when a compromised logs are providing different views of themselves to different clients. There are other mechanisms right now that mitigate this, such as the signed entry timestamp. Sigstore-java currently requires a valid signed entry timestamp. By correctly verifying the signed entry timestamp we can make certain assertions about the log signing the log entry (like the log was aware of the artifact signing event and signed it). Therefore the impact on clients that are not monitors/witnesses is very low. This vulnerability is fixed in 1.2.0.
CWE: CWE-20
References: https://github.com/sigstore/sigstore-conformance/pull/139; https://github.com/sigstore/sigstore-java/commit/23fb4885e6704a5df4977f7acf253a745349edf9; https://github.com/sigstore/sigstore-java/security/advisories/GHSA-jp26-88mw-89qr
CVE: CVE-2018-9386
Published: 2024-12-05
Description: In reboot_block_command of htc reboot_block driver, there is a possible
    stack buffer overflow due to a missing bounds check. This could lead to
    local escalation of privilege with System execution privileges needed. User
    interaction is not needed for exploitation.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-120
References: https://source.android.com/security/bulletin/pixel/2018-06-01
CVE: CVE-2018-9388
Published: 2024-12-05
Description: In store_upgrade and store_cmd of drivers/input/touchscreen/stm/ftm4_pdc.c, there are out of bound writes due to missing bounds checks or integer underflows. These could lead to escalation of privilege.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-191, CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2018-06-01