deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-3971
Published: 2018-04-04
Description: Cryptanalysis vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to view confidential information via insecure use of RC4 encryption cyphers.
CVSS Score: 8.2 (HIGH)
CWE: CWE-326
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10192; https://kc.mcafee.com/corporate/index?page=content&id=SB10192
CVE: CVE-2018-6917
Published: 2018-04-04
Description: In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, insufficient validation of user-provided font parameters can result in an integer overflow, leading to the use of arbitrary kernel memory as glyph data. Unprivileged users may be able to access privileged kernel data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/103668; http://www.securitytracker.com/id/1040629; https://security.FreeBSD.org/advisories/FreeBSD-SA-18:04.vt.asc
CVE: CVE-2018-6918
Published: 2018-04-04
Description: In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, the length field of the ipsec option header does not count the size of the option header itself, causing an infinite loop when the length is zero. This issue can allow a remote attacker who is able to send an arbitrary packet to cause the machine to crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: http://seclists.org/fulldisclosure/2019/Jun/6; http://www.securityfocus.com/bid/103666; http://www.securitytracker.com/id/1040628
CVE: CVE-2018-6919
Published: 2018-04-04
Description: In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, due to insufficient initialization of memory copied to userland, small amounts of kernel memory may be disclosed to userland processes. Unprivileged users may be able to access small amounts privileged kernel data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/103760; https://security.FreeBSD.org/advisories/FreeBSD-EN-18:04.mem.asc; http://www.securityfocus.com/bid/103760
CVE: CVE-2018-8813
Published: 2018-04-04
Description: Open redirect vulnerability in the login[redirect] parameter login functionality in WolfCMS 0.8.3.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a malformed URL.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-601
References: https://docs.google.com/document/d/1rdl1yWDJkPuuOFb2sF07_c3twl5uMkH9a-OO2OmYMus/edit?usp=sharing; https://github.com/wolfcms/wolfcms/issues/670; https://www.exploit-db.com/exploits/44421/
CVE: CVE-2018-8814
Published: 2018-04-04
Description: Cross-site request forgery (CSRF) vulnerability in WolfCMS 0.8.3.1 allows remote attackers to hijack the authentication of users for requests that modify plugin/[pluginname]/settings by crafting a malicious request.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://docs.google.com/document/d/19X9j9lMVrH7VPhyMEdqidqgW4VBhXaFibuBDyiPxJjc/edit?usp=sharing; https://github.com/wolfcms/wolfcms/issues/671; https://www.exploit-db.com/exploits/44418/
CVE: CVE-2018-9205
Published: 2018-04-04
Description: Vulnerability in avatar_uploader v7.x-1.0-beta8 , The code in view.php doesn't verify users or sanitize the file path.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.vapidlabs.com/advisory.php?v=202; https://www.drupal.org/project/avatar_uploader; https://www.drupal.org/project/avatar_uploader/issues/2957966
CVE: CVE-2018-9248
Published: 2018-04-04
Description: FiberHome VDSL2 Modem HG 150-UB devices allow authentication bypass via a "Cookie: Name=0admin" header.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://gist.github.com/pak0s/cd7ac9c2ee659138816f92693d2df602; https://www.exploit-db.com/exploits/44413/; https://gist.github.com/pak0s/cd7ac9c2ee659138816f92693d2df602
CVE: CVE-2018-9249
Published: 2018-04-04
Description: FiberHome VDSL2 Modem HG 150-UB devices allow authentication bypass by ignoring the parent.location='login.html' JavaScript code in the response to an unauthenticated request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://gist.github.com/pak0s/cd7ac9c2ee659138816f92693d2df602; https://gist.github.com/pak0s/cd7ac9c2ee659138816f92693d2df602
CVE: CVE-2017-13267
Published: 2018-04-04
Description: In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible stack corruption due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69479009.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://source.android.com/security/bulletin/2018-04-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2017-13274
Published: 2018-04-04
Description: In the getHost() function of UriTest.java, there is the possibility of incorrect web origin determination. This could lead to incorrect security decisions with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71360761.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-346
References: https://source.android.com/security/bulletin/2018-04-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2017-13275
Published: 2018-04-04
Description: In getVSCoverage of CmapCoverage.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-70808908.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2018-04-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2017-13276
Published: 2018-04-04
Description: In CProgramConfig_ReadHeightExt of tpdec_asc.cpp, there is a possible stack buffer overflow due to a missing bounds check. This could lead to a remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70637599.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://source.android.com/security/bulletin/2018-04-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2017-13277
Published: 2018-04-04
Description: In ihevcd_fmt_conv of ihevcd_fmt_conv.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-72165027.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2018-04-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2017-13278
Published: 2018-04-04
Description: In MediaPlayerService::Client::notify of MediaPlayerService.cpp, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70546581.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://source.android.com/security/bulletin/2018-04-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2017-13279
Published: 2018-04-04
Description: In M3UParser::parse of M3UParser.cpp, there is a memory resource exhaustion due to a large loop of pushing items into a vector. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68399439.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-834
References: https://source.android.com/security/bulletin/2018-04-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2017-13280
Published: 2018-04-04
Description: In the FrameSequence_gif::FrameSequence_gif function of libframesequence, there is a out of bounds read due to a missing bounds check. This could lead to a remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71361451.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2018-04-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2017-13281
Published: 2018-04-04
Description: In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible stack buffer overflow due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-71603262.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://source.android.com/security/bulletin/2018-04-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2017-13282
Published: 2018-04-04
Description: In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible stack buffer overflow due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71603315.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://source.android.com/security/bulletin/2018-04-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2017-13283
Published: 2018-04-04
Description: In avrc_ctrl_pars_vendor_rsp of bluetooth avrcp_ctrl, there is a possible out of bounds write on the stack due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71603410.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.securityfocus.com/bid/105482; https://source.android.com/security/bulletin/2018-04-01; http://www.securityfocus.com/bid/105482
CVE: CVE-2017-13284
Published: 2018-04-04
Description: In config_set_string of config.cc, it is possible to pair a second BT keyboard without user approval due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70808273.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://source.android.com/security/bulletin/2018-04-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2017-13285
Published: 2018-04-04
Description: In SvoxSsmlParser and startElement of svox_ssml_parser.cpp, there is a possible out of bounds write due to an uninitialized buffer. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69177126.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2018-04-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2017-13286
Published: 2018-04-04
Description: In writeToParcel and readFromParcel of OutputConfiguration.java, there is a permission bypass due to mismatched serialization. This could lead to a local escalation of privilege where the user can start an activity with system privileges, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-69683251.
CVSS Score: 7.8 (HIGH)
CWE: CWE-502
References: https://source.android.com/security/bulletin/2018-04-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2017-13287
Published: 2018-04-04
Description: In createFromParcel of VerifyCredentialResponse.java, there is a possible invalid parcel read due to improper input validation. This could lead to local escalation of privilege if mPayload in writeToParcel were null, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71714464.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://source.android.com/security/bulletin/2018-04-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2017-13288
Published: 2018-04-04
Description: In writeToParcel and readFromParcel of PeriodicAdvertisingReport.java, there is a permission bypass due to a 64/32bit int mismatch. This could lead to a local escalation of privilege where the user can start an activity with system privileges, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-69634768.
CVSS Score: 7.8 (HIGH)
CWE: CWE-682
References: https://source.android.com/security/bulletin/2018-04-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2017-13289
Published: 2018-04-04
Description: In writeToParcel and createFromParcel of RttManager.java, there is a permission bypass due to a write size mismatch. This could lead to a local escalation of privileges where the user can start an activity with system privileges, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70398564.
CVSS Score: 7.8 (HIGH)
CWE: CWE-131
References: https://source.android.com/security/bulletin/2018-04-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2017-13290
Published: 2018-04-04
Description: In sdp_server_handle_client_req of sdp_server.cc, there is an out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69384124.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2018-04-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2017-13291
Published: 2018-04-04
Description: In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible NULL pointer dereference due to missing bounds checks. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71603553.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://source.android.com/security/bulletin/2018-04-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2017-13292
Published: 2018-04-04
Description: In wl_get_assoc_ies of wl_cfg80211.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-70722061. References: B-V[PII_REDACTED].
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2018-04-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2017-13293
Published: 2018-04-04
Description: In the nfc_hci_cmd_received() function of core.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-62679701.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2018-04-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2017-13294
Published: 2018-04-04
Description: A information disclosure vulnerability in the Android framework (aosp email application). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71814449.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://source.android.com/security/bulletin/pixel/2018-04-01; https://source.android.com/security/bulletin/pixel/2018-04-01
CVE: CVE-2017-13295
Published: 2018-04-04
Description: A denial of service vulnerability in the Android framework (package installer). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-62537081.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://source.android.com/security/bulletin/pixel/2018-04-01; https://source.android.com/security/bulletin/pixel/2018-04-01
CVE: CVE-2017-13296
Published: 2018-04-04
Description: A information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70897454.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://source.android.com/security/bulletin/pixel/2018-04-01; https://source.android.com/security/bulletin/pixel/2018-04-01
CVE: CVE-2017-13297
Published: 2018-04-04
Description: A information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71766721.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://source.android.com/security/bulletin/pixel/2018-04-01; https://source.android.com/security/bulletin/pixel/2018-04-01
CVE: CVE-2017-13298
Published: 2018-04-04
Description: A information disclosure vulnerability in the Android media framework (libhavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-72117051.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://source.android.com/security/bulletin/pixel/2018-04-01; https://source.android.com/security/bulletin/pixel/2018-04-01
CVE: CVE-2017-13299
Published: 2018-04-04
Description: A other vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70897394.
CVSS Score: 7.5 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2018-04-01; https://source.android.com/security/bulletin/pixel/2018-04-01
CVE: CVE-2017-13300
Published: 2018-04-04
Description: A denial of service vulnerability in the Android media framework (libhevc). Product: Android. Versions: 6.0, 6.0.1. Android ID: A-71567394.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://source.android.com/security/bulletin/pixel/2018-04-01; https://source.android.com/security/bulletin/pixel/2018-04-01
CVE: CVE-2017-13301
Published: 2018-04-04
Description: A denial of service vulnerability in the Android system (system ui). Product: Android. Versions: 8.0. Android ID: A-66498711.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://source.android.com/security/bulletin/pixel/2018-04-01; https://source.android.com/security/bulletin/pixel/2018-04-01
CVE: CVE-2017-13302
Published: 2018-04-04
Description: A denial of service vulnerability in the Android system (system ui). Product: Android. Versions: 8.0. Android ID: A-69969749.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://source.android.com/security/bulletin/pixel/2018-04-01; https://source.android.com/security/bulletin/pixel/2018-04-01
CVE: CVE-2017-13303
Published: 2018-04-04
Description: A information disclosure vulnerability in the Broadcom bcmdhd driver. Product: Android. Versions: Android kernel. Android ID: A-71359108. References: B-V[PII_REDACTED].
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://source.android.com/security/bulletin/pixel/2018-04-01; https://source.android.com/security/bulletin/pixel/2018-04-01
CVE: CVE-2017-13304
Published: 2018-04-04
Description: A information disclosure vulnerability in the Upstream kernel mnh_sm driver. Product: Android. Versions: Android kernel. Android ID: A-70576999.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://source.android.com/security/bulletin/pixel/2018-04-01; https://source.android.com/security/bulletin/pixel/2018-04-01
CVE: CVE-2017-13305
Published: 2018-04-04
Description: A information disclosure vulnerability in the Upstream kernel encrypted-keys. Product: Android. Versions: Android kernel. Android ID: A-70526974.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://access.redhat.com/errata/RHSA-2018:2165; https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html; https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html
CVE: CVE-2017-13306
Published: 2018-04-04
Description: A elevation of privilege vulnerability in the Upstream kernel mnh driver. Product: Android. Versions: Android kernel. Android ID: A-70295063.
CVSS Score: 7.3 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2018-04-01; https://source.android.com/security/bulletin/pixel/2018-04-01
CVE: CVE-2017-13307
Published: 2018-04-04
Description: A elevation of privilege vulnerability in the Upstream kernel pci sysfs. Product: Android. Versions: Android kernel. Android ID: A-69128924.
CVSS Score: 7.3 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2018-04-01; https://source.android.com/security/bulletin/pixel/2018-04-01
CVE: CVE-2017-13248
Published: 2018-04-04
Description: In impeg2_idct_recon_sse42() of impeg2_idct_recon_sse42_intr.c, there is an out of bound write due to a missing bounds check. This could lead to an remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70349612.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/103255; https://source.android.com/security/bulletin/2018-03-01; http://www.securityfocus.com/bid/103255
CVE: CVE-2017-13249
Published: 2018-04-04
Description: In impeg2d_api_set_display_frame of impeg2d_api_main.c, there is an out of bound write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70399408.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/103255; https://source.android.com/security/bulletin/2018-03-01; http://www.securityfocus.com/bid/103255
CVE: CVE-2017-13250
Published: 2018-04-04
Description: In ih264d_fmt_conv_420sp_to_420p of ih264d_utils.c, there is an out of bound write due to a missing out of bounds check because of a multiplication error. This could lead to an remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71375536.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/103255; https://source.android.com/security/bulletin/2018-03-01; http://www.securityfocus.com/bid/103255
CVE: CVE-2017-13251
Published: 2018-04-04
Description: In impeg2d_dec_pic_data_thread of impeg2d_dec_hdr.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when running multi threaded with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69269702.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/103255; https://source.android.com/security/bulletin/2018-03-01; http://www.securityfocus.com/bid/103255