deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-7945
Published: 2017-08-18
Description: The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11.8, 2.12.x before 2.12.6, 2.13.x before 2.13.3, 2.14.x before 2.14.2, and 2.15.x before 2.15.2 allows remote attackers to obtain the DRBD secret via instance information job results.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://docs.ganeti.org/ganeti/2.10/html/news.html#version-2-10-8; http://docs.ganeti.org/ganeti/2.11/html/news.html#version-2-11-8; http://docs.ganeti.org/ganeti/2.12/html/news.html#version-2-12.6
CVE: CVE-2017-0687
Published: 2017-08-18
Description: A denial of service vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35583675.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/99478; https://source.android.com/security/bulletin/2017-08-01; http://www.securityfocus.com/bid/99478
CVE: CVE-2017-11185
Published: 2017-08-18
Description: The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted RSA signature.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-476
References: http://www.debian.org/security/2017/dsa-3962; http://www.securityfocus.com/bid/100492; https://www.strongswan.org/blog/2017/08/14/strongswan-vulnerability-%28cve-2017-11185%29.html
CVE: CVE-2017-11652
Published: 2017-08-18
Description: Razer Synapse 2.20.15.1104 and earlier uses weak permissions for the CrashReporter directory, which allows local users to gain privileges via a Trojan horse dbghelp.dll file.
CVSS Score: 8.4 (HIGH)
CWE: CWE-732
References: http://packetstormsecurity.com/files/143516/Razer-Synapse-2.20-DLL-Hijacking.html; http://packetstormsecurity.com/files/143516/Razer-Synapse-2.20-DLL-Hijacking.html
CVE: CVE-2017-11653
Published: 2017-08-18
Description: Razer Synapse 2.20.15.1104 and earlier uses weak permissions for the Devices directory, which allows local users to gain privileges via a Trojan horse (1) RazerConfigNative.dll or (2) RazerConfigNativeLOC.dll file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: http://packetstormsecurity.com/files/143516/Razer-Synapse-2.20-DLL-Hijacking.html; http://packetstormsecurity.com/files/143516/Razer-Synapse-2.20-DLL-Hijacking.html
CVE: CVE-2017-12420
Published: 2017-08-18
Description: Heap-based buffer overflow in the SMB implementation in NetApp Clustered Data ONTAP before 8.3.2P8 and 9.0 before P2 allows remote authenticated users to cause a denial of service or execute arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100429; https://kb.netapp.com/support/s/article/NTAP-20[PII_REDACTED]; http://www.securityfocus.com/bid/100429
CVE: CVE-2017-12589
Published: 2017-08-18
Description: ToMAX R60G R60GV2-V2.0-v.2.6.3-170330 devices do not have any protection against a CSRF attack.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.securityfocus.com/bid/100438; https://iscouncil.blogspot.com/2017/08/cross-site-request-forgery_11.html; http://www.securityfocus.com/bid/100438
CVE: CVE-2017-12591
Published: 2017-08-18
Description: ASUS DSL-N10S V2.1.16_APAC devices have reflected and stored cross site scripting, as demonstrated by the snmpSysName parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://iscouncil.blogspot.com/2017/08/multiple-vulnerabilities-in-asus.html; https://iscouncil.blogspot.com/2017/08/multiple-vulnerabilities-in-asus.html
CVE: CVE-2017-12592
Published: 2017-08-18
Description: ASUS DSL-N10S V2.1.16_APAC devices have a privilege escalation vulnerability. A normal user can escalate its privilege and perform administrative actions. There is no mapping of users with their privileges.
CVSS Score: 8.8 (HIGH)
References: https://iscouncil.blogspot.com/2017/08/multiple-vulnerabilities-in-asus.html; https://iscouncil.blogspot.com/2017/08/multiple-vulnerabilities-in-asus.html
CVE: CVE-2017-12593
Published: 2017-08-18
Description: ASUS DSL-N10S V2.1.16_APAC devices allow CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://iscouncil.blogspot.com/2017/08/multiple-vulnerabilities-in-asus.html; https://iscouncil.blogspot.com/2017/08/multiple-vulnerabilities-in-asus.html
CVE: CVE-2017-12776
Published: 2017-08-18
Description: SQL injection vulnerability in reports.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the delreport parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://sh1yan.top/shiyan/cve.txt; https://github.com/xxfocus/cve/blob/master/takeupdate.md; http://sh1yan.top/shiyan/cve.txt
CVE: CVE-2014-3451
Published: 2017-08-18
Description: OpenFire XMPP Server before 3.10 accepts self-signed certificates, which allows remote attackers to perform unspecified spoofing attacks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: http://packetstormsecurity.com/files/131614/OpenFire-XMPP-3.9.3-Certificate-Handling.html; http://www.openwall.com/lists/oss-security/2015/04/23/16; http://www.securityfocus.com/archive/1/535363/100/1100/threaded
CVE: CVE-2014-9411
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offset is potentially possible in rollback protection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-118
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2014-9968
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the UIMDIAG interface.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2014-9969
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, the GPS client may use an insecure cryptographic algorithm.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-327
References: https://source.android.com/security/bulletin/2017-07-01; https://source.android.com/security/bulletin/2017-07-01
CVE: CVE-2014-9971
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, disabling asserts causes an instruction inside of an assert to not be executed resulting in incorrect control flow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.securityfocus.com/bid/103671; https://source.android.com/security/bulletin/2017-07-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2014-9972
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, disabling asserts can potentially cause a NULL pointer dereference during an out-of-memory condition.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-476
References: http://www.securityfocus.com/bid/103671; https://source.android.com/security/bulletin/2017-07-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2014-9973
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of a buffer length was missing in a PlayReady DRM routine.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2014-9974
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of buffer lengths was missing in Keymaster.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2014-9975
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a rollback vulnerability potentially exists in Full Disk Encryption.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-326
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2014-9976
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in 1x call processing.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/103671; https://source.android.com/security/bulletin/2017-07-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2014-9977
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in PlayReady DRM.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2014-9978
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE service.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2014-9979
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a variable is uninitialized in a TrustZone system call potentially leading to the compromise of secure memory.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2014-9980
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a Sample App failed to check a length potentially leading to unauthorized access to secure memory.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2014-9981
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, an overflow check in the USB interface was insufficient during boot.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/103671; https://source.android.com/security/bulletin/2017-07-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2015-0574
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, the validation of filesystem access was insufficient.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.securityfocus.com/bid/103671; https://source.android.com/security/bulletin/2017-07-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2015-0575
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, insecure ciphersuites were included in the default configuration.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-326
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2015-0576
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in HSDPA.
CVSS Score: 7.0 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/103671; https://source.android.com/security/bulletin/2017-07-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2015-2675
Published: 2017-08-18
Description: The OAuth implementation in librest before 0.7.93 incorrectly truncates the pointer returned by the rest_proxy_call_get_url function, which allows remote attackers to cause a denial of service (application crash) via running the EnsureCredentials method from the org.gnome.OnlineAccounts.Account interface on an object representing a Flickr account.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://rhn.redhat.com/errata/RHSA-2015-2237.html; http://www.openwall.com/lists/oss-security/2015/03/23/8; https://bugzilla.gnome.org/show_bug.cgi?id=742644
CVE: CVE-2015-4071
Published: 2017-08-18
Description: The Helpdesk Pro Plugin before 1.4.0 for Joomla! allows remote attackers to read the support tickets of arbitrary users via obtaining the target ticketId, and navigating to http://{target}/component/helpdeskpro/?view=ticket&id={ticketId}.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://packetstormsecurity.com/files/132766/Joomla-Helpdesk-Pro-XSS-File-Disclosure-SQL-Injection.html; http://seclists.org/fulldisclosure/2015/Jul/102; http://seclists.org/fulldisclosure/2015/Jul/82
CVE: CVE-2015-4464
Published: 2017-08-18
Description: Kguard Digital Video Recorder 104, 108, v2 does not have any authorization or authentication between an ActiveX client and the application server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://packetstormsecurity.com/files/132437/Kguard-Digital-Video-Recorder-Bypass-Issues.html; http://www.securityfocus.com/archive/1/535822/100/0/threaded; http://www.securityfocus.com/bid/73032
CVE: CVE-2015-5057
Published: 2017-08-18
Description: Cross-site scripting (XSS) vulnerability exists in the Wordpress admin panel when the Broken Link Checker plugin before 1.10.9 is installed.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2015/06/25/1; http://www.securityfocus.com/bid/75421; https://wordpress.org/plugins/broken-link-checker/#developers
CVE: CVE-2015-5081
Published: 2017-08-18
Description: Cross-site request forgery (CSRF) vulnerability in django CMS before 3.0.14, 3.1.x before 3.1.1 allows remote attackers to manipulate privileged users into performing unknown actions via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2015/06/28/1; https://github.com/divio/django-cms/commit/f77cbc607d6e2a62e63287d37ad320109a2cc78a; https://www.django-cms.org/en/blog/2015/06/27/311-3014-release/
CVE: CVE-2015-5153
Published: 2017-08-18
Description: Pulp does not remove permissions for named objects upon deletion, which allows authenticated users to gain the privileges of a deleted object via creating an object with the same name.
CVSS Score: 8.8 (HIGH)
CWE: CWE-275
References: https://bugzilla.redhat.com/show_bug.cgi?id=1243526; https://bugzilla.redhat.com/show_bug.cgi?id=1243526
CVE: CVE-2015-8592
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a pointer is not validated prior to being dereferenced potentially resulting in Guest-OS memory corruption.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-476
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2015-8593
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in 1x call processing.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/103671; https://source.android.com/security/bulletin/2017-07-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2015-8594
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in RFA-1x.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/103671; https://source.android.com/security/bulletin/2017-07-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2015-8595
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in digital television/digital radio DRM.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2015-8596
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of buffer lengths is missing in malware protection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2015-9034
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a string can fail to be null-terminated in SIP leading to a buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2015-9035
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a memory buffer fails to be freed after it is no longer needed potentially resulting in memory exhaustion.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2015-9036
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, an incorrect length is used to clear a memory buffer resulting in adjacent memory getting corrupted.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2015-9037
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read may occur in the processing of a downlink 3G NAS message.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2015-9038
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer may be dereferenced in the front end.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-476
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2015-9039
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in eMBMS where an assertion can be reached by a sequence of downlink messages.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2015-9040
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in a GERAN API.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2015-9041
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists when performing WCDMA radio tuning.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2015-9042
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists when processing a QMI message.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2015-9043
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer can be dereferenced upon the expiry of a timer.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-476
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2015-9044
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reached due to an improper bound on the size of a frequency list.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2015-9045
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in GERAN where a buffer can be overflown while taking power measurements.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2015-9046
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reached due to an improper bound on the size of a frequency list.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2015-9047
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in GNSS when performing a scan after bootup.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2015-9048
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in the processing of lost RTP packets.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2015-9049
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in the processing of certain responses from the USIM.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2015-9050
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists where an array out of bounds access can occur during a CA call.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2015-9051
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reached due to an improper bound on a length in a System Information message.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467