deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-13407
Published: 2018-07-06
Description: A CSRF issue was discovered in Jirafeau before 3.4.1. The "delete file" feature on the admin panel is not protected against automated requests and could be abused.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-352
References: https://www.bishopfox.com/news/2018/06/jirafeau-version-3-3-0-multiple-vulnerabilities/; https://www.bishopfox.com/news/2018/06/jirafeau-version-3-3-0-multiple-vulnerabilities/
CVE: CVE-2018-13408
Published: 2018-07-06
Description: An issue was discovered in Jirafeau before 3.4.1. The "search file by link" form is affected by reflected XSS that could allow, by targeting an administrator, stealing a session and gaining administrative privileges.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.bishopfox.com/news/2018/06/jirafeau-version-3-3-0-multiple-vulnerabilities/; https://www.bishopfox.com/news/2018/06/jirafeau-version-3-3-0-multiple-vulnerabilities/
CVE: CVE-2018-13409
Published: 2018-07-06
Description: An issue was discovered in Jirafeau before 3.4.1. The "search file by hash" form is affected by reflected XSS that could allow, by targeting an administrator, stealing a session and gaining administrative privileges.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.bishopfox.com/news/2018/06/jirafeau-version-3-3-0-multiple-vulnerabilities/; https://www.bishopfox.com/news/2018/06/jirafeau-version-3-3-0-multiple-vulnerabilities/
CVE: CVE-2018-3564
Published: 2018-07-06
Description: In the FastRPC driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, a Use After Free condition can occur when mapping on the remote processor fails.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components; https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=782cd411398e3cf2aca1615ab2649df0c46920ee; https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin
CVE: CVE-2018-3569
Published: 2018-07-06
Description: A buffer over-read can occur during a fast initial link setup (FILS) connection in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2018-06-01#qualcomm-components; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=fe9ea02140c4be[PII_REDACTED]15da90bc3a1a2bc0; https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin
CVE: CVE-2018-3577
Published: 2018-07-06
Description: While processing fragments, when the fragment count becomes very large, an integer overflow leading to a buffer overflow can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=cf1c43ce8840021d2907afaa6c514e6971d7ebac; https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin
CVE: CVE-2018-3597
Published: 2018-07-06
Description: In the ADSP RPC driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, an arbitrary kernel write can occur.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components; https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=e569b915a246627d[PII_REDACTED]a9c0d388ee4ab4; https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components
CVE: CVE-2018-5829
Published: 2018-07-06
Description: In wlan_hdd_cfg80211_set_privacy_ibss() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, a buffer over-read can potentially occur.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2018-06-01#qualcomm-components; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=27381e9d253629180dcdaa698d3fd01bec28d351; https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin
CVE: CVE-2018-5830
Published: 2018-07-06
Description: While processing the HTT_T2H_MSG_TYPE_MGMT_TX_COMPL_IND message, a buffer overflow can potentially occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://source.android.com/security/bulletin/2018-06-01#qualcomm-components; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=129e76e0ea923b319555f37ea601dfb974a06bfe; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=8174eb0235a7e581153ea1d4a401e7ea8354cc08
CVE: CVE-2018-5831
Published: 2018-07-06
Description: In the KGSL driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, a reference counting error can lead to a Use After Free condition.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://source.android.com/security/bulletin/2018-06-01#qualcomm-components; https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=e3e13d745238ad8853af47c2d938344ea8d3c77f; https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin
CVE: CVE-2018-5832
Published: 2018-07-06
Description: Due to a race condition in a camera driver ioctl handler in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, a Use After Free condition can occur.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-416
References: https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components; https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin; https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components
CVE: CVE-2018-5834
Published: 2018-07-06
Description: In __wlan_hdd_cfg80211_vendor_scan(), a buffer overwrite can potentially occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://source.android.com/security/bulletin/2018-06-01#qualcomm-components; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=ede0f8a4d11ec56ee87177478cc0c25af0894860; https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin
CVE: CVE-2018-5835
Published: 2018-07-06
Description: If the seq_len is greater then CSR_MAX_RSC_LEN, a buffer overflow in __wlan_hdd_cfg80211_add_key() may occur when copying keyRSC in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://source.android.com/security/bulletin/2018-06-01#qualcomm-components; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/prima/commit/?id=5a0eeb72c3cde7dcb[PII_REDACTED]a88a678ad9aec; https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin
CVE: CVE-2018-5836
Published: 2018-07-06
Description: In wma_nan_rsp_event_handler() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, the data_len value is received from firmware and not properly validated which could potentially lead to an out-of-bounds access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=12a789c2e0e9fd2df40ac13ac27fe[PII_REDACTED]7; https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin
CVE: CVE-2018-5838
Published: 2018-07-06
Description: Improper Validation of Array Index In the adreno OpenGL driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds access can occur in SurfaceFlinger.
CVSS Score: 7.8 (HIGH)
CWE: CWE-129
References: https://www.qualcomm.com/company/product-security/bulletins; https://www.qualcomm.com/company/product-security/bulletins
CVE: CVE-2018-5874
Published: 2018-07-06
Description: While parsing an mp4 file, a stack-based buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins; https://www.qualcomm.com/company/product-security/bulletins
CVE: CVE-2018-5875
Published: 2018-07-06
Description: While parsing an mp4 file, an integer overflow leading to a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-190
References: https://www.qualcomm.com/company/product-security/bulletins; https://www.qualcomm.com/company/product-security/bulletins
CVE: CVE-2018-5876
Published: 2018-07-06
Description: While parsing an mp4 file, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://www.qualcomm.com/company/product-security/bulletins; https://www.qualcomm.com/company/product-security/bulletins
CVE: CVE-2018-5878
Published: 2018-07-06
Description: While sending the response to a RIL_REQUEST_GET_SMSC_ADDRESS message, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://www.qualcomm.com/company/product-security/bulletins; https://www.qualcomm.com/company/product-security/bulletins
CVE: CVE-2018-5882
Published: 2018-07-06
Description: While parsing a Flac file with a corrupted comment block, a buffer over-read can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins; https://www.qualcomm.com/company/product-security/bulletins
CVE: CVE-2018-5884
Published: 2018-07-06
Description: Improper Access Control in Multimedia in Snapdragon Mobile and Snapdragon Wear, Non-standard applications without permission may acquire permission of Qualcomm-specific proprietary intents.
CVSS Score: 8.4 (HIGH)
CWE: CWE-269
References: https://www.qualcomm.com/company/product-security/bulletins; https://www.qualcomm.com/company/product-security/bulletins
CVE: CVE-2018-5885
Published: 2018-07-06
Description: While loading dynamic fonts, a buffer overflow may occur if the number of segments in the font file is out of range in Snapdragon Mobile and Snapdragon Wear.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://www.qualcomm.com/company/product-security/bulletins; https://www.qualcomm.com/company/product-security/bulletins
CVE: CVE-2018-5887
Published: 2018-07-06
Description: While processing the USB StrSerialDescriptor array, an array index out of bounds can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components; https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=c8415f6f2271008aef[PII_REDACTED]236df627d9b1; https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components
CVE: CVE-2018-5888
Published: 2018-07-06
Description: While processing the system path, an out of bounds access can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components; https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=5388803fa6d004382f4a857056ce06d963698d9c; https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components
CVE: CVE-2018-5889
Published: 2018-07-06
Description: While processing a compressed kernel image, a buffer overflow can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components; https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=a95ca8e2eeb8a030e977f033cff122cad408158c; https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components
CVE: CVE-2018-5890
Published: 2018-07-06
Description: If the fdt_totalsize is reported as 0 for the current device tree, it bypasses an error check for a valid device tree in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components; https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=c9c8de8000ff32f8d1e24e697d861d92d8ed0b7a; https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components
CVE: CVE-2018-5891
Published: 2018-07-06
Description: While processing modem SSR after IMS is registered, the IMS data daemon is restarted but the ipc_dataHandle is no longer available. Consequently, the DPL thread frees the internal memory for dataDHandle but the local variable pointer is not updated which can lead to a Use After Free condition in Snapdragon Mobile and Snapdragon Wear.
CVSS Score: 8.4 (HIGH)
CWE: CWE-416
References: https://www.qualcomm.com/company/product-security/bulletins; https://www.qualcomm.com/company/product-security/bulletins
CVE: CVE-2018-5892
Published: 2018-07-06
Description: The Touch Pal application can collect user behavior data without awareness by the user in Snapdragon Mobile and Snapdragon Wear.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://www.qualcomm.com/company/product-security/bulletins; https://www.qualcomm.com/company/product-security/bulletins
CVE: CVE-2018-5893
Published: 2018-07-06
Description: While processing a message from firmware in htt_t2h_msg_handler_fast() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, a buffer overwrite can occur.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=4cc54a30958d2a8d989364aa45a27fde3dd17352; https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin
CVE: CVE-2018-5894
Published: 2018-07-06
Description: Improper Validation of Array Index in Multimedia While parsing an mp4 file in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds access can occur.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-129
References: https://www.qualcomm.com/company/product-security/bulletins; https://www.qualcomm.com/company/product-security/bulletins
CVE: CVE-2018-5895
Published: 2018-07-06
Description: Buffer over-read may happen in wma_process_utf_event() due to improper buffer length validation before writing into param_buf->num_wow_packet_buffer in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components; https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin; https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components
CVE: CVE-2018-5896
Published: 2018-07-06
Description: In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, kernel panic may happen due to out-of-bound read, caused by not checking source buffer length against length of packet stream to be copied.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2018-06-01#qualcomm-components; https://source.android.com/security/bulletin/2018-06-01#qualcomm-components
CVE: CVE-2018-5897
Published: 2018-07-06
Description: While reading the data from buffer in dci_process_ctrl_status() there can be buffer over-read problem if the len is not checked correctly in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components; https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components
CVE: CVE-2018-5898
Published: 2018-07-06
Description: Integer overflow can occur in msm_pcm_adsp_stream_cmd_put() function if the user supplied data "param_length" goes beyond certain limit in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components; https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components
CVE: CVE-2018-5899
Published: 2018-07-06
Description: In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, whenever TDLS connection is setup, we are freeing the netbuf in ol_tx_completion_handler and after that, we are accessing it in NBUF_UPDATE_TX_PKT_COUNT causing a use after free.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components; https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin; https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components
CVE: CVE-2017-15851
Published: 2018-07-06
Description: Lack of copy_from_user and information leak in function "msm_ois_subdev_do_ioctl, file msm_ois.c can lead to a camera crash in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel
CVSS Score: 7.8 (HIGH)
CWE: CWE-200
References: https://source.android.com/security/bulletin/pixel/2018-07-01#qualcomm-components; https://www.vulnerabilitycenter.com/#%21vul=87351; https://source.android.com/security/bulletin/pixel/2018-07-01#qualcomm-components
CVE: CVE-2018-11304
Published: 2018-07-06
Description: Possible buffer overflow in msm_adsp_stream_callback_put due to lack of input validation of user-provided data that leads to integer overflow in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://source.android.com/security/bulletin/pixel/2018-07-01#qualcomm-components; https://www.vulnerabilitycenter.com/#%21vul=87338; https://source.android.com/security/bulletin/pixel/2018-07-01#qualcomm-components
CVE: CVE-2018-13410
Published: 2018-07-06
Description: Info-ZIP Zip 3.0, when the -T and -TT command-line options are used, allows attackers to cause a denial of service (invalid free and application crash) or possibly have unspecified other impact because of an off-by-one error. NOTE: it is unclear whether there are realistic scenarios in which an untrusted party controls the -TT value, given that the entire purpose of -TT is execution of arbitrary commands
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://seclists.org/fulldisclosure/2018/Jul/24; http://seclists.org/fulldisclosure/2018/Jul/24
CVE: CVE-2018-3570
Published: 2018-07-06
Description: In the cpuidle driver in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel, the list_for_each macro was not used correctly which could lead to an untrusted pointer dereference.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: https://source.android.com/security/bulletin/pixel/2018-07-01#qualcomm-components; https://www.vulnerabilitycenter.com/#%21vul=87349; https://source.android.com/security/bulletin/pixel/2018-07-01#qualcomm-components
CVE: CVE-2018-3586
Published: 2018-07-06
Description: An integer overflow to buffer overflow vulnerability exists in the ADSPRPC heap manager in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://source.android.com/security/bulletin/2018-07-01#qualcomm-components; https://source.android.com/security/bulletin/2018-07-01#qualcomm-components
CVE: CVE-2018-3587
Published: 2018-07-06
Description: In a firmware memory dump feature in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android), a Use After Free condition can occur.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=35af847c2364acf1bfb4ffd679130898e6ae6285; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=a18c0b5955a2f6281bc89d1add3f24907813ae31; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=e4dbb2c8180d6f3b600b93f9090fe1a7f49df027
CVE: CVE-2018-3608
Published: 2018-07-06
Description: A vulnerability in Trend Micro Maximum Security's (Consumer) 2018 (versions 12.0.1191 and below) User-Mode Hooking (UMH) driver could allow an attacker to create a specially crafted packet that could alter a vulnerable system in such a way that malicious code could be injected into other processes.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://esupport.trendmicro.com/support/vb/solution/ja-jp/1120144.aspx; https://esupport.trendmicro.com/en-US/home/pages/technical-support/1120237.aspx; http://esupport.trendmicro.com/support/vb/solution/ja-jp/1120144.aspx
CVE: CVE-2018-5853
Published: 2018-07-06
Description: A race condition exists in a driver in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-05-05 potentially leading to a use-after-free condition.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-416
References: https://source.android.com/security/bulletin/pixel/2018-05-01; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=f64e9815f0488a7b37e4e1395a1457d1dfefda66; https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin
CVE: CVE-2018-5855
Published: 2018-07-06
Description: While padding or shrinking a nested wmi packet in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, a buffer over-read can potentially occur.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: http://www.securityfocus.com/bid/107770; https://source.android.com/security/bulletin/2018-07-01; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qca-wifi-host-cmn/commit/?id=61f4a467177afc23bdc1944ec61e52bed156c104