deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-17635
Published: 2020-01-17
Description: Eclipse Memory Analyzer version 1.9.1 and earlier is subject to a deserialization vulnerability if an index file of a parsed heap dump is replaced by a malicious version and the heap dump is reopened in Memory Analyzer. The user must chose to reopen an already parsed heap dump with an untrusted index for the problem to occur. The problem can be averted if the index files from an untrusted source are deleted and the heap dump is opened and reparsed. Also some local configuration data is subject to a deserialization vulnerability if the local data were to be replaced with a malicious version. This can be averted if the local configuration data stored on the file system cannot be changed by an attacker. The vulnerability could possibly allow code execution on the local system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-502, CWE-502
References: https://bugs.eclipse.org/bugs/show_bug.cgi?id=558633; https://bugs.eclipse.org/bugs/show_bug.cgi?id=558633
CVE: CVE-2019-19339
Published: 2020-01-17
Description: It was found that the Red Hat Enterprise Linux 8 kpatch update did not include the complete fix for CVE-2018-12207. A flaw was found in the way Intel CPUs handle inconsistency between, virtual to physical memory address translations in CPU's local cache and system software's Paging structure entries. A privileged guest user may use this flaw to induce a hardware Machine Check Error on the host processor, resulting in a severe DoS scenario by halting the processor. System software like OS OR Virtual Machine Monitor (VMM) use virtual memory system for storing program instructions and data in memory. Virtual Memory system uses Paging structures like Page Tables and Page Directories to manage system memory. The processor's Memory Management Unit (MMU) uses Paging structure entries to translate program's virtual memory addresses to physical memory addresses. The processor stores these address translations into its local cache buffer called - Translation Lookaside Buffer (TLB). TLB has two parts, one for instructions and other for data addresses. System software can modify its Paging structure entries to change address mappings OR certain attributes like page size etc. Upon such Paging structure alterations in memory, system software must invalidate the corresponding address translations in the processor's TLB cache. But before this TLB invalidation takes place, a privileged guest user may trigger an instruction fetch operation, which could use an already cached, but now invalid, virtual to physical address translation from Instruction TLB (ITLB). Thus accessing an invalid physical memory address and resulting in halting the processor due to the Machine Check Error (MCE) on Page Size Change.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-805
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19339; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19339
CVE: CVE-2020-5397
Published: 2020-01-17
Description: Spring Framework, versions 5.2.x prior to 5.2.3 are vulnerable to CSRF attacks through CORS preflight requests that target Spring MVC (spring-webmvc module) or Spring WebFlux (spring-webflux module) endpoints. Only non-authenticated endpoints are vulnerable because preflight requests should not include credentials and therefore requests should fail authentication. However a notable exception to this are Chrome based browsers when using client certificates for authentication since Chrome sends TLS client certificates in CORS preflight requests in violation of spec requirements. No HTTP body can be sent or received as a result of this attack.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://pivotal.io/security/cve-2020-5397; https://www.oracle.com//security-alerts/cpujul2021.html; https://www.oracle.com/security-alerts/cpuapr2020.html
CVE: CVE-2014-5007
Published: 2020-01-17
Description: Directory traversal vulnerability in the agentLogUploader servlet in ZOHO ManageEngine Desktop Central (DC) and Desktop Central Managed Service Providers (MSP) edition before 9 build 90055 allows remote attackers to write to and execute arbitrary files as SYSTEM via a .. (dot dot) in the filename parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: http://seclists.org/fulldisclosure/2014/Aug/88; https://www.manageengine.com/products/desktop-central/remote-code-execution.html; http://seclists.org/fulldisclosure/2014/Aug/88
CVE: CVE-2020-7104
Published: 2020-01-17
Description: The chained-quiz plugin 1.1.8.1 for WordPress has reflected XSS via the wp-admin/admin-ajax.php total_questions parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpvulndb.com/vulnerabilities/10029; https://wpvulndb.com/vulnerabilities/10029
CVE: CVE-2019-15625
Published: 2020-01-18
Description: A memory usage vulnerability exists in Trend Micro Password Manager 3.8 that could allow an attacker with access and permissions to the victim's memory processes to extract sensitive information.
CVSS Score: 5.5 (MEDIUM)
References: https://esupport.trendmicro.com/en-us/home/pages/technical-support/1123595.aspx; https://esupport.trendmicro.com/support/pwm/solution/ja-jp/1123614.aspx; https://jvn.jp/en/jp/JVN49593434/index.html
CVE: CVE-2019-19696
Published: 2020-01-18
Description: A RootCA vulnerability found in Trend Micro Password Manager for Windows and macOS exists where the localhost.key of RootCA.crt might be improperly accessed by an unauthorized party and could be used to create malicious self-signed SSL certificates, allowing an attacker to misdirect a user to phishing sites.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-522
References: https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124092.aspx; https://esupport.trendmicro.com/support/pwm/solution/ja-jp/1124091.aspx; https://jvn.jp/en/jp/JVN37183636/index.html
CVE: CVE-2019-19697
Published: 2020-01-18
Description: An arbitrary code execution vulnerability exists in the Trend Micro Security 2019 (v15) consumer family of products which could allow an attacker to gain elevated privileges and tamper with protected services by disabling or otherwise preventing them to start. An attacker must already have administrator privileges on the target machine in order to exploit the vulnerability.
CVSS Score: 6.7 (MEDIUM)
References: http://hyp3rlinx.altervista.org/advisories/TREND-MICRO-SECURITY-CONSUMER-SECURITY-BYPASS-PROTECTED-SERVICE-TAMPERING.txt; https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124090.aspx; https://seclists.org/bugtraq/2020/Jan/29
CVE: CVE-2019-20357
Published: 2020-01-18
Description: A Persistent Arbitrary Code Execution vulnerability exists in the Trend Micro Security 2020 (v160 and 2019 (v15) consumer familiy of products which could potentially allow an attacker the ability to create a malicious program to escalate privileges and attain persistence on a vulnerable system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-428
References: http://hyp3rlinx.altervista.org/advisories/TREND-MICRO-SECURITY-CONSUMER-PERSISTENT-ARBITRARY-CODE-EXECUTION.txt; https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124099.aspx; https://seclists.org/bugtraq/2020/Jan/28
CVE: CVE-2020-7222
Published: 2020-01-18
Description: An issue was discovered in Amcrest Web Server 2.520.AC00.18.R 2017-06-29 WEB 3.2.1.453504. The login page responds with JavaScript when one tries to authenticate. An attacker who changes the result parameter (to true) in this JavaScript code can bypass authentication and achieve limited privileges (ability to see every option but not modify them).
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287
References: https://sku11army.blogspot.com/2020/01/amcrest-2520ac0018r-login-bypass.html; https://sku11army.blogspot.com/2020/01/amcrest-2520ac0018r-login-bypass.html
CVE: CVE-2020-7227
Published: 2020-01-18
Description: Westermo MRD-315 1.7.3 and 1.7.4 devices have an information disclosure vulnerability that allows an authenticated remote attacker to retrieve the source code of different functions of the web application via requests that lack certain mandatory parameters. This affects ifaces-diag.asp, system.asp, backup.asp, sys-power.asp, ifaces-wls.asp, ifaces-wls-pkt.asp, and ifaces-wls-pkt-adv.asp.
CVSS Score: 6.5 (MEDIUM)
References: https://sku11army.blogspot.com/2020/01/westermo-source-code-disclousure-in.html; https://sku11army.blogspot.com/2020/01/westermo-source-code-disclousure-in.html
CVE: CVE-2020-7231
Published: 2020-01-19
Description: Evoko Home 1.31 devices provide different error messages for failed login requests depending on whether the username is valid.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209
References: https://sku11army.blogspot.com/2020/01/evoko-otra-sala-por-favor.html; https://sku11army.blogspot.com/2020/01/evoko-otra-sala-por-favor.html
CVE: CVE-2020-7232
Published: 2020-01-19
Description: Evoko Home devices 1.31 through 1.37 allow remote attackers to obtain sensitive information (such as usernames and password hashes) via a WebSocket request, as demonstrated by the sockjs/224/uf1psgff/websocket URI at a wss:// URL.
CVSS Score: 7.5 (HIGH)
References: https://sku11army.blogspot.com/2020/01/evoko-otra-sala-por-favor.html; https://sku11army.blogspot.com/2020/01/evoko-otra-sala-por-favor.html
CVE: CVE-2020-7233
Published: 2020-01-19
Description: KMS Controls BAC-A1616BC BACnet devices have a cleartext password of snowman in the BACKDOOR_NAME variable in the BC_Logon.swf file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522
References: https://sku11army.blogspot.com/2020/01/kms-controls-backdoor-in-bacnet.html; https://sku11army.blogspot.com/2020/01/kms-controls-backdoor-in-bacnet.html
CVE: CVE-2020-7234
Published: 2020-01-19
Description: Ruckus ZoneFlex R310 104.0.0.0.1347 devices allow Stored XSS via the SSID field on the Configuration > Radio 2.4G > Wireless X screen (after a successful login to the super account).
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://sku11army.blogspot.com/2020/01/ruckus-wireless-authenticated-stored.html; https://sku11army.blogspot.com/2020/01/ruckus-wireless-authenticated-stored.html
CVE: CVE-2020-7235
Published: 2020-01-19
Description: UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cB3?ta= (profile title).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://sku11army.blogspot.com/2020/01/uhp-networks-multiple-reflected-xss-in.html; https://sku11army.blogspot.com/2020/01/uhp-networks-multiple-reflected-xss-in.html
CVE: CVE-2020-7236
Published: 2020-01-19
Description: UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cw2?td= (Site Name field of the Site Setup section).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://sku11army.blogspot.com/2020/01/uhp-networks-multiple-reflected-xss-in.html; https://sku11army.blogspot.com/2020/01/uhp-networks-multiple-reflected-xss-in.html
CVE: CVE-2020-7237
Published: 2020-01-20
Description: Cacti 1.2.8 allows Remote Code Execution (by privileged users) via shell metacharacters in the Performance Boost Debug Log field of poller_automation.php. OS commands are executed when a new poller cycle begins. The attacker must be authenticated, and must have access to modify the Performance Settings of the product.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00005.html; http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00042.html
CVE: CVE-2019-20381
Published: 2020-01-20
Description: TestLink before 1.9.20 allows XSS via non-lowercase javascript: in the index.php reqURI parameter. NOTE: this issue exists because of an incomplete fix for CVE-2019-19491.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://mantis.testlink.org/view.php?id=8808; https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/cde692895e425731e6951d265a01ca6425a7c26e; https://github.com/TestLinkOpenSourceTRMS/testlink-code/compare/1.9.19...1.9.20
CVE: CVE-2020-7215
Published: 2020-01-20
Description: An issue was discovered in Gallagher Command Centre 7.x before 7.90.991(MR5), 8.00 before 8.00.1161(MR5), and 8.10 before 8.10.1134(MR4). External system configuration data (used for third party integrations such as DVR systems) were logged in the Command Centre event trail. Any authenticated operator with the 'view events' privilege could see the full configuration, including cleartext usernames and passwords, under the event details of a Modified DVR System event.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532
References: https://security.gallagher.com/cve-2020-7215; https://security.gallagher.com/cve-2020-7215
CVE: CVE-2020-7240
Published: 2020-01-20
Description: Meinberg Lantime M300 and M1000 devices allow attackers (with privileges to configure a device) to execute arbitrary OS commands by editing the /config/netconf.cmd script (aka Extended Network Configuration). Note: According to the description, the vulnerability requires a fully authenticated super-user account using a webUI function that allows super users to edit a script supposed to execute OS commands. The given weakness enumeration (CWE-78) is not applicable in this case as it refers to abusing functions/input fields not supposed to be accepting OS commands by using 'Special Elements.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://sku11army.blogspot.com/2020/01/heinberg-lantime-m1000-rce.html; https://sku11army.blogspot.com/2020/01/meinberg-lantime-m1000-rce.html; https://wolke.meinberg.de/index.php/s/dKP3PKgFXS6sPRE#pdfviewer
CVE: CVE-2020-7241
Published: 2020-01-20
Description: The WP Database Backup plugin through 5.5 for WordPress stores downloads by default locally in the directory wp-content/uploads/db-backup/. This might allow attackers to read ZIP archives by guessing random ID numbers, guessing date strings with a 2020_{0..1}{0..2}_{0..3}{0..9} format, guessing UNIX timestamps, and making HTTPS requests with the complete guessed URL.
CVSS Score: 7.5 (HIGH)
CWE: CWE-330
References: https://github.com/V1n1v131r4/Exploiting-WP-Database-Backup-WordPress-Plugin/blob/master/README.md; https://wordpress.org/plugins/wp-database-backup/#developers; https://zeroauth.ltd/blog/2020/01/21/analysis-on-cve-2020-7241-misrepresenting-a-security-vulnerability/
CVE: CVE-2020-7242
Published: 2020-01-20
Description: Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by navigating to the Diagnostics Trace Route page and entering shell metacharacters in the Target IP address field. (In some cases, authentication can be achieved with the comtech password for the comtech account.)
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://sku11army.blogspot.com/2020/01/comtech-authenticated-rce-on-comtech.html; https://sku11army.blogspot.com/2020/01/comtech-authenticated-rce-on-comtech.html
CVE: CVE-2020-7243
Published: 2020-01-20
Description: Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by navigating to the Fetch URL page and entering shell metacharacters in the URL field. (In some cases, authentication can be achieved with the comtech password for the comtech account.)
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://sku11army.blogspot.com/2020/01/comtech-multiple-authenticated-rce-on.html; https://sku11army.blogspot.com/2020/01/comtech-multiple-authenticated-rce-on.html
CVE: CVE-2020-7244
Published: 2020-01-20
Description: Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by navigating to the Poll Routes page and entering shell metacharacters in the Router IP Address field. (In some cases, authentication can be achieved with the comtech password for the comtech account.)
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://sku11army.blogspot.com/2020/01/comtech-multiple-authenticated-rce-on.html; https://sku11army.blogspot.com/2020/01/comtech-multiple-authenticated-rce-on.html
CVE: CVE-2019-20384
Published: 2020-01-21
Description: Gentoo Portage through 2.3.84 allows local users to place a Trojan horse plugin in the /usr/lib64/nagios/plugins directory by leveraging access to the nagios user account, because this directory is writable in between a call to emake and a call to fowners.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-362
References: http://www.openwall.com/lists/oss-security/2020/01/21/1; https://bugs.gentoo.org/692492; http://www.openwall.com/lists/oss-security/2020/01/21/1
CVE: CVE-2019-20385
Published: 2020-01-21
Description: The CSV upload feature in /supervisor/procesa_carga.php on Logaritmo Aware CallManager 2012 devices allows upload of .php files with a text/* content type. The PHP code can then be executed by visiting a /supervisor/csv/ URI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://xpl0ited.blogspot.com/2019/11/unrestricted-file-upload-at-logaritmo.html; https://xpl0ited.blogspot.com/2019/11/unrestricted-file-upload-at-logaritmo.html
CVE: CVE-2020-7249
Published: 2020-01-21
Description: SMC D3G0804W 3.5.2.5-LAT_GA devices allow XSS via the SSID field on the WiFi Network Configuration page (after a successful login to the admin account).
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://sku11army.blogspot.com/2020/01/smc-networks-stored-cross-site.html; https://sku11army.blogspot.com/2020/01/smc-networks-stored-cross-site.html
CVE: CVE-2020-7239
Published: 2020-01-21
Description: The conversation-watson plugin before 0.8.21 for WordPress has a DOM-based XSS vulnerability that is executed when a chat message containing JavaScript is sent.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/conversation-watson/#developers; https://wpvulndb.com/vulnerabilities/10035; https://www.hooperlabs.xyz/disclosures/cve-2020-7239.php
CVE: CVE-2019-20386
Published: 2020-01-21
Description: An issue was discovered in button_open in login/logind-button.c in systemd before 243. When executing the udevadm trigger command, a memory leak may occur.
CVSS Score: 2.4 (LOW)
CWE: CWE-401, CWE-401
References: http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00014.html; https://github.com/systemd/systemd/commit/b2774a3ae692113e1f47a336a6c09bac9cfb49ad; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HZPCOMW5X6IZZXASCDD2CNW2DLF3YADC/
CVE: CVE-2019-10532
Published: 2020-01-21
Description: Null-pointer dereference issue can occur while calculating string length when source string length is zero in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996, Nicobar, QCS605, QM215, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM8150, SM8250, SXR1130, SXR2130
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/january-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2020-bulletin
CVE: CVE-2019-10548
Published: 2020-01-21
Description: While trying to obtain datad ipc handle during DPL initialization, Heap use-after-free issue can occur if modem SSR occurs at same time in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables in APQ8009, APQ8053, APQ8096AU, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCA6574AU, QCS605, QM215, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SM6150, SM7150, SM8150, SXR1130
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://www.qualcomm.com/company/product-security/bulletins/january-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2020-bulletin
CVE: CVE-2019-10558
Published: 2020-01-21
Description: While transferring data from APPS to DSP, Out of bound in FastRPC HLOS Driver due to the data buffer which can be controlled by DSP in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCN7605, QCS605, QM215, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SDX24, SDX55, SM6150, SM8150, SM8250, SXR1130, SXR2130
CVSS Score: 7.8 (HIGH)
References: https://www.qualcomm.com/company/product-security/bulletins/january-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2020-bulletin
CVE: CVE-2019-10561
Published: 2020-01-21
Description: Improper initialization of local variables which are parameters to sfs api may cause invalid pointer dereference and leads to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9206, MDM9607, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, QM215, SDA660, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660
CVSS Score: 5.5 (MEDIUM)
References: https://www.qualcomm.com/company/product-security/bulletins/january-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2020-bulletin
CVE: CVE-2019-10578
Published: 2020-01-21
Description: Null pointer dereference can occur while parsing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA6574AU, QCS605, QM215, Rennell, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://www.qualcomm.com/company/product-security/bulletins/january-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2020-bulletin
CVE: CVE-2019-10579
Published: 2020-01-21
Description: Buffer over-read can occur while playing the video clip which is not standard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA6574AU, QCS605, QM215, Rennell, SA6155P, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/january-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2020-bulletin