deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-26713
Published: 2021-02-19
Description: A stack-based buffer overflow in res_rtp_asterisk.c in Sangoma Asterisk before 16.16.1, 17.x before 17.9.2, and 18.x before 18.2.1 and Certified Asterisk before 16.8-cert6 allows an authenticated WebRTC client to cause an Asterisk crash by sending multiple hold/unhold requests in quick succession. This is caused by a signedness comparison mismatch.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://downloads.asterisk.org/pub/security/; https://downloads.asterisk.org/pub/security/AST-2021-004.html; https://issues.asterisk.org/jira/browse/ASTERISK-29205
CVE: CVE-2020-27785
Published: 2021-02-19
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-29074. Reason: This candidate is a reservation duplicate of CVE-2020-29074. Notes: All CVE users should reference CVE-2020-29074 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2020-12668
Published: 2021-02-19
Description: Jinjava before 2.5.4 allow access to arbitrary classes by calling Java methods on objects passed into a Jinjava context. This could allow for abuse of the application class loader, including Arbitrary File Disclosure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863
References: https://github.com/HubSpot/jinjava/compare/jinjava-2.5.3...jinjava-2.5.4; https://github.com/HubSpot/jinjava/pull/426/commits/5dfa5b87318744a4d020b66d5f7747acc36b213b; https://github.com/HubSpot/jinjava/pull/435/commits/1b9aaa4b420c58b4a301cf4b7d26207f1c8d1165
CVE: CVE-2020-12873
Published: 2021-02-19
Description: An issue was discovered in Alfresco Enterprise Content Management (ECM) before 6.2.1. A user with privileges to edit a FreeMarker template (e.g., a webscript) may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running Alfresco.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: https://issues.alfresco.com/jira/browse/MNT-21510; https://securitylab.github.com/advisories/GHSL-2020-039-alfresco; https://issues.alfresco.com/jira/browse/MNT-21510
CVE: CVE-2020-24392
Published: 2021-02-19
Description: In voloko twitter-stream 0.1.10, missing TLS hostname validation allows an attacker to perform a man-in-the-middle attack against users of the library (because eventmachine is misused).
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://github.com/voloko/twitter-stream; https://securitylab.github.com/advisories/GHSL-2020-097-voloko-twitter-stream; https://github.com/voloko/twitter-stream
CVE: CVE-2020-24393
Published: 2021-02-19
Description: TweetStream 2.6.1 uses the library eventmachine in an insecure way that does not have TLS hostname validation. This allows an attacker to perform a man-in-the-middle attack.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://github.com/tweetstream/tweetstream; https://securitylab.github.com/advisories/GHSL-2020-096-tweetstream-tweetstream; https://github.com/tweetstream/tweetstream
CVE: CVE-2020-24617
Published: 2021-02-19
Description: Mailtrain through 1.24.1 allows SQL Injection in statsClickedSubscribersByColumn in lib/models/campaigns.js via /campaigns/clicked/ajax because variable column names are not properly escaped.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/Mailtrain-org/mailtrain/pull/909; https://securitylab.github.com/advisories/GHSL-2020-132-Mailtrain; https://github.com/Mailtrain-org/mailtrain/pull/909
CVE: CVE-2020-27997
Published: 2021-02-19
Description: An issue was discovered in SmartStoreNET before 4.1.0. Lack of Cross Site Request Forgery (CSRF) protection may lead to elevation of privileges (e.g., /admin/customer/create to create an admin account).
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/smartstore/SmartStoreNET/compare/4.0.1...4.1.0; https://securitylab.github.com/advisories/GHSL-2020-138-139-SmartstoreAG-SmartStoreNET; https://github.com/smartstore/SmartStoreNET/compare/4.0.1...4.1.0
CVE: CVE-2021-27509
Published: 2021-02-19
Description: In Visualware MyConnection Server before 11.0b build 5382, each published report is not associated with its own access code.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863
References: https://myconnectionserver.visualware.com/support/newrelease.html; https://myconnectionserver.visualware.com/support/newrelease.html
CVE: CVE-2021-3189
Published: 2021-02-19
Description: The slashify package 1.0.0 for Node.js allows open-redirect attacks, as demonstrated by a localhost:3000///example.com/ substring.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://securitylab.github.com/advisories/GHSL-2020-199-open-redirect-slashify; https://www.npmjs.com/package/slashify
CVE: CVE-2020-28248
Published: 2021-02-20
Description: An integer overflow in the PngImg::InitStorage_() function of png-img before 3.1.0 leads to an under-allocation of heap memory and subsequently an exploitable heap-based buffer overflow when loading a crafted PNG file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190, CWE-787
References: https://github.com/gemini-testing/png-img; https://github.com/gemini-testing/png-img/commit/14ac462a32ca4b3b78f56502ac976d5b0222ce3d; https://github.com/gemini-testing/png-img/compare/v3.0.0...v3.1.0
CVE: CVE-2021-26544
Published: 2021-02-20
Description: Livy server version 0.7.0-incubating (only) is vulnerable to a cross site scripting issue in the session name. A malicious user could use this flaw to access logs and results of other users' sessions and run jobs with their privileges. This issue is fixed in Livy 0.7.1-incubating.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.openwall.com/lists/oss-security/2021/02/20/1; https://github.com/apache/incubator-livy/commit/4d8a912699683b973eee76d4e91447d769a0cb0d; https://lists.apache.org/thread.html/r2db14e7fd1e5ec2519e8828d43529bad623d75698cc7918af3a3f3ed%40%3Cuser.livy.apache.org%3E
CVE: CVE-2021-26716
Published: 2021-02-21
Description: Modules/input/Views/schedule.php in Emoncms through 10.2.7 allows XSS via the node parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/emoncms/emoncms/issues/1652; https://github.com/emoncms/emoncms/issues/1652
CVE: CVE-2021-27513
Published: 2021-02-22
Description: The module admin_ITSM in EyesOfNetwork 5.3-10 allows remote authenticated users to upload arbitrary .xml.php files because it relies on "le filtre userside."
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/ArianeBlow/exploit-eyesofnetwork5.3.10/blob/main/PoC-BruteForceID-arbitraty-file-upload-RCE-PrivEsc.py; https://github.com/EyesOfNetworkCommunity/eonweb/issues/87; https://github.com/ArianeBlow/exploit-eyesofnetwork5.3.10/blob/main/PoC-BruteForceID-arbitraty-file-upload-RCE-PrivEsc.py
CVE: CVE-2021-27514
Published: 2021-02-22
Description: EyesOfNetwork 5.3-10 uses an integer of between 8 and 10 digits for the session ID, which might be leveraged for brute-force authentication bypass (such as in CVE-2021-27513 exploitation).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-307
References: https://github.com/ArianeBlow/exploit-eyesofnetwork5.3.10/blob/main/PoC-BruteForceID-arbitraty-file-upload-RCE-PrivEsc.py; https://github.com/EyesOfNetworkCommunity/eonweb/issues/87; https://github.com/ArianeBlow/exploit-eyesofnetwork5.3.10/blob/main/PoC-BruteForceID-arbitraty-file-upload-RCE-PrivEsc.py
CVE: CVE-2021-27515
Published: 2021-02-22
Description: url-parse before 1.5.0 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path.
CVSS Score: 5.3 (MEDIUM)
References: https://advisory.checkmarx.net/advisory/CX-2021-4306; https://github.com/unshiftio/url-parse/commit/d1e7e8822f26e8a49794b757123b51386325b2b0; https://github.com/unshiftio/url-parse/compare/1.4.7...1.5.0
CVE: CVE-2021-27516
Published: 2021-02-22
Description: URI.js (aka urijs) before 1.19.6 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path.
CVSS Score: 7.5 (HIGH)
References: https://advisory.checkmarx.net/advisory/CX-2021-4305; https://github.com/medialize/URI.js/commit/a1ad8bcbc39a4d136d7e252e76e957f3ece70839; https://github.com/medialize/URI.js/releases/tag/v1.19.6
CVE: CVE-2021-24115
Published: 2021-02-22
Description: In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations (base32, base58, base64, and hex).
CVSS Score: 9.8 (CRITICAL)
References: https://botan.randombit.net/news.html; https://github.com/randombit/botan/compare/2.17.2...2.17.3; https://github.com/randombit/botan/pull/2549
CVE: CVE-2021-26119
Published: 2021-02-22
Description: Smarty before 3.1.39 allows a Sandbox Escape because $smarty.template_object can be accessed in sandbox mode.
CVSS Score: 7.5 (HIGH)
References: https://github.com/smarty-php/smarty/blob/master/CHANGELOG.md; https://lists.debian.org/debian-lts-announce/2021/04/msg00004.html; https://lists.debian.org/debian-lts-announce/2021/04/msg00014.html
CVE: CVE-2021-26120
Published: 2021-02-22
Description: Smarty before 3.1.39 allows code injection via an unexpected function name after a {function name= substring.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/smarty-php/smarty/blob/master/CHANGELOG.md; https://lists.debian.org/debian-lts-announce/2021/04/msg00004.html; https://lists.debian.org/debian-lts-announce/2021/04/msg00014.html
CVE: CVE-2021-3149
Published: 2021-02-22
Description: On Netshield NANO 25 10.2.18 devices, /usr/local/webmin/System/manual_ping.cgi allows OS command injection (after authentication by the attacker) because the system C library function is used unsafely.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10356; https://www.digitaldefense.com/resources/vulnerability-research/netshield-corporation-nano-25/; https://www.netshieldcorp.com/netshield-appliances/
CVE: CVE-2020-35556
Published: 2021-02-22
Description: An issue was discovered in Acronis Cyber Protect before 15 Update 1 build 26172. Because the local notification service misconfigures CORS, information disclosure can occur.
CVSS Score: 7.5 (HIGH)
References: https://dl.managed-protection.com/u/cyberprotect/rn/15/user/en-US/AcronisCyberProtect15_relnotes.htm; https://www.acronis.com; https://dl.managed-protection.com/u/cyberprotect/rn/15/user/en-US/AcronisCyberProtect15_relnotes.htm
CVE: CVE-2020-35571
Published: 2021-02-22
Description: An issue was discovered in MantisBT through 2.24.3. In the helper_ensure_confirmed call in manage_custom_field_update.php, the custom field name is not sanitized. This may be problematic depending on CSP settings.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://mantisbt.org/bugs/view.php?id=27768; https://mantisbt.org/bugs/view.php?id=27768
CVE: CVE-2020-35664
Published: 2021-02-22
Description: An issue was discovered in Acronis Cyber Protect before 15 Update 1 build 26172. There is cross-site scripting (XSS) in the console.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://dl.managed-protection.com/u/cyberprotect/rn/15/user/en-US/AcronisCyberProtect15_relnotes.htm; https://www.acronis.com; https://dl.managed-protection.com/u/cyberprotect/rn/15/user/en-US/AcronisCyberProtect15_relnotes.htm
CVE: CVE-2020-35681
Published: 2021-02-22
Description: Django Channels 3.x before 3.0.3 allows remote attackers to obtain sensitive information from a different request scope. The legacy channels.http.AsgiHandler class, used for handling HTTP type requests in an ASGI environment prior to Django 3.0, did not correctly separate request scopes in Channels 3.0. In many cases this would result in a crash but, with correct timing, responses could be sent to the wrong client, resulting in potential leakage of session identifiers and other sensitive data. Note that this affects only the legacy Channels provided class, and not Django's similar ASGIHandler, available from Django 3.0.
CVSS Score: 7.4 (HIGH)
CWE: CWE-200
References: https://channels.readthedocs.io/en/stable/releases/3.0.3.html; https://channels.readthedocs.io/en/stable/releases/index.html; https://github.com/django/channels/releases
CVE: CVE-2020-11147
Published: 2021-02-22
Description: Use after free issue in audio modules while removing and freeing objects during list iteration due to incorrect usage of macro in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416
References: https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin
CVE: CVE-2020-11163
Published: 2021-02-22
Description: Possible buffer overflow while updating ikev2 parameters due to lack of check of input validation for certain parameters received from the ePDG server in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-129
References: https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin
CVE: CVE-2020-11170
Published: 2021-02-22
Description: Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header extraction in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin
CVE: CVE-2020-11177
Published: 2021-02-22
Description: User can overwrite Security Code NV item without knowing current SPC due to improper validation of SPC code setting and device lock in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 8.8 (HIGH)
References: https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin
CVE: CVE-2020-11187
Published: 2021-02-22
Description: Possible memory corruption in BSI module due to improper validation of parameter count in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile
CVSS Score: 7.8 (HIGH)
CWE: CWE-129
References: https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin
CVE: CVE-2020-11194
Published: 2021-02-22
Description: Possible out of bound access in TA while processing a command from NS side due to improper length check of response buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-119
References: https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin
CVE: CVE-2020-11195
Published: 2021-02-22
Description: Out of bound write and read in TA while processing command from NS side due to improper length check on command and response buffers in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-125, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin
CVE: CVE-2020-11198
Published: 2021-02-22
Description: Key material used for TZ diag buffer encryption and other data related to log buffer is not wiped securely due to improper usage of memset in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-212
References: https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin
CVE: CVE-2020-11203
Published: 2021-02-22
Description: Stack overflow may occur if GSM/WCDMA broadcast config size received from user is larger than variable length array in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVSS Score: 7.1 (HIGH)
CWE: CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin
CVE: CVE-2020-11204
Published: 2021-02-22
Description: Possible memory corruption and information leakage in sub-system due to lack of check for validity and boundary compliance for parameters that are read from shared MSG RAM in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin
CVE: CVE-2020-11223
Published: 2021-02-22
Description: Out of bound in camera driver due to lack of check of validation of array index before copying into array in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin
CVE: CVE-2020-11253
Published: 2021-02-22
Description: Arbitrary memory write issue in video driver while setting the internal buffers in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin
CVE: CVE-2020-11269
Published: 2021-02-22
Description: Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin
CVE: CVE-2020-11270
Published: 2021-02-22
Description: Possible denial of service due to RTT responder consistently rejects all FTMR by transmitting FTM1 with failure status in the FTM parameter IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin
CVE: CVE-2020-11271
Published: 2021-02-22
Description: Possible out of bounds while accessing global control elements due to race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVSS Score: 7.8 (HIGH)
CWE: CWE-129
References: https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin
CVE: CVE-2020-11272
Published: 2021-02-22
Description: Before enqueuing a frame to the PE queue for further processing, an entry in a hash table can be deleted and using a stale version later can lead to use after free condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin
CVE: CVE-2020-11275
Published: 2021-02-22
Description: Possible buffer over-read while parsing quiet IE in Rx beacon frame due to improper check of IE length in received beacon in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin
CVE: CVE-2020-11276
Published: 2021-02-22
Description: Possible buffer over read while processing P2P IE and NOA attribute of beacon and probe response frames due to improper validation of P2P IE and NOA attribute lengths in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin
CVE: CVE-2020-11277
Published: 2021-02-22
Description: Possible race condition during async fastrpc session after sending RPC message due to the fastrpc ctx gets free during async session in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile
CVSS Score: 7.4 (HIGH)
CWE: CWE-362, CWE-416
References: https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin
CVE: CVE-2020-11278
Published: 2021-02-22
Description: Possible denial of service while handling host WMI command due to improper validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin