deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-1241
Published: 2021-01-20
Description: Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 8.6 (HIGH)
CWE: CWE-119
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-dosmulti-48jJuEUP; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-dosmulti-48jJuEUP
CVE: CVE-2021-1247
Published: 2021-01-20
Description: Multiple vulnerabilities in certain REST API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to execute arbitrary SQL commands on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-sql-inj-OAQOObP; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-sql-inj-OAQOObP
CVE: CVE-2021-1248
Published: 2021-01-20
Description: Multiple vulnerabilities in certain REST API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to execute arbitrary SQL commands on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-sql-inj-OAQOObP; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-sql-inj-OAQOObP
CVE: CVE-2021-1249
Published: 2021-01-20
Description: Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow a remote attacker with network-operator privileges to conduct a cross-site scripting (XSS) attack or a reflected file download (RFD) attack against a user of the interface. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-79
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-xss-vulns-GuUJ39gh; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-xss-vulns-GuUJ39gh
CVE: CVE-2021-1250
Published: 2021-01-20
Description: Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow a remote attacker with network-operator privileges to conduct a cross-site scripting (XSS) attack or a reflected file download (RFD) attack against a user of the interface. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-79
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-xss-vulns-GuUJ39gh; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-xss-vulns-GuUJ39gh
CVE: CVE-2020-26252
Published: 2021-01-20
Description: OpenMage is a community-driven alternative to Magento CE. In OpenMage before versions 19.4.10 and 20.0.6, there is a vulnerability which enables remote code execution. In affected versions an administrator with permission to update product data to be able to store an executable file on the server and load it via layout xml. The latest OpenMage Versions up from 19.4.10 and 20.0.6 have this issue solved.
CVSS Score: 8.7 (HIGH)
CWE: CWE-22, CWE-434
References: https://github.com/OpenMage/magento-lts/commit/0786aa48bc7b618cfe37b59f45e1da3714c533c3; https://github.com/OpenMage/magento-lts/security/advisories/GHSA-99m6-r53j-4hh2; https://github.com/OpenMage/magento-lts/commit/0786aa48bc7b618cfe37b59f45e1da3714c533c3
CVE: CVE-2020-26278
Published: 2021-01-20
Description: Weave Net is open source software which creates a virtual network that connects Docker containers across multiple hosts and enables their automatic discovery. Weave Net before version 2.8.0 has a vulnerability in which can allow an attacker to take over any host in the cluster. Weave Net is supplied with a manifest that runs pods on every node in a Kubernetes cluster, which are responsible for managing network connections for all other pods in the cluster. This requires a lot of power over the host, and the manifest sets `privileged: true`, which gives it that power. It also set `hostPID: true`, which gave it the ability to access all other processes on the host, and write anywhere in the root filesystem of the host. This setting was not necessary, and is being removed. You are only vulnerable if you have an additional vulnerability (e.g. a bug in Kubernetes) or misconfiguration that allows an attacker to run code inside the Weave Net pod, No such bug is known at the time of release, and there are no known instances of this being exploited. Weave Net 2.8.0 removes the hostPID setting and moves CNI plugin install to an init container. Users who do not update to 2.8.0 can edit the hostPID line in their existing DaemonSet manifest to say false instead of true, arrange some other way to install CNI plugins (e.g. Ansible) and remove those mounts from the DaemonSet manifest.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-250
References: https://github.com/weaveworks/weave/blob/master/CHANGELOG.md#release-280; https://github.com/weaveworks/weave/commit/a0ac81b3b4cae6d0dcaf3732fd91cedefc89f720; https://github.com/weaveworks/weave/pull/3876
CVE: CVE-2021-1067
Published: 2021-01-20
Description: NVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the implementation of the RPMB command status, in which an attacker can write to the Write Protect Configuration Block, which may lead to denial of service or escalation of privileges.
CVSS Score: 6.8 (MEDIUM)
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5148; https://nvidia.custhelp.com/app/answers/detail/a_id/5148
CVE: CVE-2021-1068
Published: 2021-01-20
Description: NVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the NVDEC component, in which an attacker can read from or write to a memory location that is outside the intended boundary of the buffer, which may lead to denial of service or escalation of privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5148; https://nvidia.custhelp.com/app/answers/detail/a_id/5148
CVE: CVE-2021-1069
Published: 2021-01-20
Description: NVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the NVHost function, which may lead to abnormal reboot due to a null pointer reference, causing data loss.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-476
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5147; https://nvidia.custhelp.com/app/answers/detail/a_id/5148; https://nvidia.custhelp.com/app/answers/detail/a_id/5147
CVE: CVE-2020-27221
Published: 2021-01-21
Description: In Eclipse OpenJ9 up to and including version 0.23, there is potential for a stack-based buffer overflow when the virtual machine or JNI natives are converting from UTF-8 characters to platform encoding.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://bugs.eclipse.org/bugs/show_bug.cgi?id=569763; https://bugs.eclipse.org/bugs/show_bug.cgi?id=569763
CVE: CVE-2020-11119
Published: 2021-01-21
Description: Buffer over-read can happen when the buffer length received from response handlers is more than the size of the payload in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin
CVE: CVE-2020-11136
Published: 2021-01-21
Description: Buffer Over-read in audio driver while using malloc management function due to not returning NULL for zero sized memory requirement in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin
CVE: CVE-2020-11137
Published: 2021-01-21
Description: Integer multiplication overflow resulting in lower buffer size allocation than expected causes memory access out of bounds resulting in possible device instability in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin
CVE: CVE-2020-11138
Published: 2021-01-21
Description: Uninitialized pointers accessed during music play back with incorrect bit stream due to an uninitialized heap memory result in instability in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-824
References: https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin
CVE: CVE-2020-11139
Published: 2021-01-21
Description: Out of bound memory access while processing frames due to lack of check of invalid frames received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin
CVE: CVE-2020-11140
Published: 2021-01-21
Description: Out of bound memory access during music playback with ALAC modified content due to improper validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin
CVE: CVE-2020-11143
Published: 2021-01-21
Description: Out of bound memory access during music playback with modified content due to copying data without checking destination buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin
CVE: CVE-2020-11144
Published: 2021-01-21
Description: Buffer over-read while UE process invalid DL ROHC packet for decompression due to lack of check of size of compresses packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-20, CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin
CVE: CVE-2020-11145
Published: 2021-01-21
Description: Divide by zero issue can happen while updating delta extension header due to improper validation of master SN and extension header SN in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 7.5 (HIGH)
CWE: CWE-369
References: https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin
CVE: CVE-2020-11146
Published: 2021-01-21
Description: Out of bound write while copying data using IOCTL due to lack of check of array index received from user in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 7.8 (HIGH)
CWE: CWE-129
References: https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin
CVE: CVE-2020-11148
Published: 2021-01-21
Description: Use after free issue in HIDL while using callback to post event in Rx thread when internal mutex is not acquired and meantime close is triggered and callback instance is deleted in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416
References: https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin
CVE: CVE-2020-11149
Published: 2021-01-21
Description: Out of bound access due to usage of an out-of-range pointer offset in the camera driver. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-119
References: https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin
CVE: CVE-2020-11150
Published: 2021-01-21
Description: Out of bound memory access in camera driver due to improper validation on data coming from UMD which is used for offset manipulation of pointer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-119
References: https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin
CVE: CVE-2020-11151
Published: 2021-01-21
Description: Race condition occurs while calling user space ioctl from two different threads can results to use after free issue in video in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-362, CWE-416
References: https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin
CVE: CVE-2020-11152
Published: 2021-01-21
Description: Race condition in HAL layer while processing callback objects received from HIDL due to lack of synchronization between accessing objects in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-362
References: https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin
CVE: CVE-2020-11167
Published: 2021-01-21
Description: Memory corruption while calculating L2CAP packet length in reassembly logic when remote sends more data than expected in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin
CVE: CVE-2020-11179
Published: 2021-01-21
Description: Arbitrary read and write to kernel addresses by temporarily overwriting ring buffer pointer and creating a race condition. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 7.0 (HIGH)
CWE: CWE-125, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin
CVE: CVE-2020-11180
Published: 2021-01-21
Description: Out of bound access in computer vision control due to improper validation of command length before processing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin
CVE: CVE-2020-11181
Published: 2021-01-21
Description: Out of bound access issue while handling cvp process control command due to improper validation of buffer pointer received from HLOS in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin
CVE: CVE-2020-11183
Published: 2021-01-21
Description: A process can potentially cause a buffer overflow in the display service allowing privilege escalation by executing code as that service in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-120
References: https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin
CVE: CVE-2020-11185
Published: 2021-01-21
Description: Out of bound issue in WLAN driver while processing vdev responses from firmware due to lack of validation of data received from firmware in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin
CVE: CVE-2020-11197
Published: 2021-01-21
Description: Possible integer overflow can occur when stream info update is called when total number of streams detected are zero while parsing TS clip with invalid data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin
CVE: CVE-2020-11200
Published: 2021-01-21
Description: Buffer over-read while parsing RPS due to lack of check of input validation on values received from user side. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin
CVE: CVE-2020-11212
Published: 2021-01-21
Description: Out of bounds reads while parsing NAN beacons attributes and OUIs due to improper length of field check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin