deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-31938
Published: 2021-06-08
Description: Microsoft VsCode Kubernetes Tools Extension Elevation of Privilege Vulnerability
CVSS Score: 7.3 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31938; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31938
CVE: CVE-2021-31939
Published: 2021-06-08
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31939; https://www.zerodayinitiative.com/advisories/ZDI-21-670/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31939
CVE: CVE-2021-31940
Published: 2021-06-08
Description: Microsoft Office Graphics Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31940; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31940
CVE: CVE-2021-31941
Published: 2021-06-08
Description: Microsoft Office Graphics Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31941; https://www.zerodayinitiative.com/advisories/ZDI-21-669/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31941
CVE: CVE-2021-31942
Published: 2021-06-08
Description: 3D Viewer Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31942; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31942
CVE: CVE-2021-31943
Published: 2021-06-08
Description: 3D Viewer Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31943; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31943
CVE: CVE-2021-31944
Published: 2021-06-08
Description: 3D Viewer Information Disclosure Vulnerability
CVSS Score: 5.0 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31944; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31944
CVE: CVE-2021-31945
Published: 2021-06-08
Description: Paint 3D Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31945; https://www.zerodayinitiative.com/advisories/ZDI-21-667/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31945
CVE: CVE-2021-31946
Published: 2021-06-08
Description: Paint 3D Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31946; https://www.zerodayinitiative.com/advisories/ZDI-21-671/; https://www.zerodayinitiative.com/advisories/ZDI-21-684/
CVE: CVE-2021-31948
Published: 2021-06-08
Description: Microsoft SharePoint Server Spoofing Vulnerability
CVSS Score: 7.6 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31948; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31948
CVE: CVE-2021-31949
Published: 2021-06-08
Description: Microsoft Outlook Remote Code Execution Vulnerability
CVSS Score: 7.3 (HIGH)
CWE: CWE-94
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31949; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31949
CVE: CVE-2021-31950
Published: 2021-06-08
Description: Microsoft SharePoint Server Spoofing Vulnerability
CVSS Score: 7.6 (HIGH)
CWE: CWE-918
References: http://packetstormsecurity.com/files/163080/Microsoft-SharePoint-Server-16.0.10372.20060-Server-Side-Request-Forgery.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31950; http://packetstormsecurity.com/files/163080/Microsoft-SharePoint-Server-16.0.10372.20060-Server-Side-Request-Forgery.html
CVE: CVE-2021-31951
Published: 2021-06-08
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31951; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31951
CVE: CVE-2021-31952
Published: 2021-06-08
Description: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31952; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31952
CVE: CVE-2021-31953
Published: 2021-06-08
Description: Windows Filter Manager Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31953; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31953
CVE: CVE-2021-31954
Published: 2021-06-08
Description: Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269, CWE-122
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31954; https://www.zerodayinitiative.com/advisories/ZDI-21-668/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31954
CVE: CVE-2021-31955
Published: 2021-06-08
Description: Windows Kernel Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-497
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31955; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31955; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-31955
CVE: CVE-2021-31956
Published: 2021-06-08
Description: Windows NTFS Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-191, CWE-191
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31956; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31956; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-31956
CVE: CVE-2021-31957
Published: 2021-06-08
Description: ASP.NET Core Denial of Service Vulnerability
CVSS Score: 5.9 (MEDIUM)
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4PRVVLXXQEF4SEJOBV3VRJHGX7YHY2CG/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVCDYIP4A6DDRT7G6P3ZW6PKNK2DNWJ2/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PMHWHRRYDHKM6BIINW5V7OCSW4SDWB4W/
CVE: CVE-2021-31958
Published: 2021-06-08
Description: Windows NTLM Elevation of Privilege Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-294
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31958; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31958
CVE: CVE-2021-31959
Published: 2021-06-08
Description: Scripting Engine Memory Corruption Vulnerability
CVSS Score: 6.4 (MEDIUM)
References: http://packetstormsecurity.com/files/163056/Internet-Explorer-jscript9.dll-Memory-Corruption.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31959; http://packetstormsecurity.com/files/163056/Internet-Explorer-jscript9.dll-Memory-Corruption.html
CVE: CVE-2021-31960
Published: 2021-06-08
Description: Windows Bind Filter Driver Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31960; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31960
CVE: CVE-2021-31962
Published: 2021-06-08
Description: Kerberos AppContainer Security Feature Bypass Vulnerability
CVSS Score: 9.4 (CRITICAL)
References: http://packetstormsecurity.com/files/163206/Windows-Kerberos-AppContainer-Enterprise-Authentication-Capability-Bypass.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31962; http://packetstormsecurity.com/files/163206/Windows-Kerberos-AppContainer-Enterprise-Authentication-Capability-Bypass.html
CVE: CVE-2021-31963
Published: 2021-06-08
Description: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVSS Score: 7.1 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31963; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31963
CVE: CVE-2021-31964
Published: 2021-06-08
Description: Microsoft SharePoint Server Spoofing Vulnerability
CVSS Score: 7.6 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31964; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31964
CVE: CVE-2021-31965
Published: 2021-06-08
Description: Microsoft SharePoint Server Information Disclosure Vulnerability
CVSS Score: 5.7 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31965; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31965
CVE: CVE-2021-31966
Published: 2021-06-08
Description: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVSS Score: 7.2 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31966; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31966
CVE: CVE-2021-31967
Published: 2021-06-08
Description: VP9 Video Extensions Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31967; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31967
CVE: CVE-2021-31968
Published: 2021-06-08
Description: Windows Remote Desktop Services Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31968; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31968
CVE: CVE-2021-31969
Published: 2021-06-08
Description: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31969; https://www.zerodayinitiative.com/advisories/ZDI-21-797/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31969
CVE: CVE-2021-31970
Published: 2021-06-08
Description: Windows TCP/IP Driver Security Feature Bypass Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-639
References: http://packetstormsecurity.com/files/163256/Microsoft-Windows-Filtering-Platform-Token-Access-Check-Privilege-Escalation.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31970; http://packetstormsecurity.com/files/163256/Microsoft-Windows-Filtering-Platform-Token-Access-Check-Privilege-Escalation.html
CVE: CVE-2021-31971
Published: 2021-06-08
Description: Windows HTML Platforms Security Feature Bypass Vulnerability
CVSS Score: 6.8 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31971; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31971
CVE: CVE-2021-31972
Published: 2021-06-08
Description: Event Tracing for Windows Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31972; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31972
CVE: CVE-2021-31973
Published: 2021-06-08
Description: Windows GPSVC Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31973; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31973
CVE: CVE-2021-31974
Published: 2021-06-08
Description: Server for NFS Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31974; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31974
CVE: CVE-2021-31975
Published: 2021-06-08
Description: Server for NFS Information Disclosure Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31975; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31975
CVE: CVE-2021-31976
Published: 2021-06-08
Description: Server for NFS Information Disclosure Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31976; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31976
CVE: CVE-2021-31977
Published: 2021-06-08
Description: Windows Hyper-V Denial of Service Vulnerability
CVSS Score: 8.6 (HIGH)
CWE: CWE-119
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31977; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31977
CVE: CVE-2021-31978
Published: 2021-06-08
Description: Microsoft Defender Denial of Service Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31978; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31978
CVE: CVE-2021-31980
Published: 2021-06-08
Description: Microsoft Intune Management Extension Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31980; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31980
CVE: CVE-2021-31983
Published: 2021-06-08
Description: Paint 3D Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31983; https://www.zerodayinitiative.com/advisories/ZDI-21-658/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31983
CVE: CVE-2021-31985
Published: 2021-06-08
Description: Microsoft Defender Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: http://packetstormsecurity.com/files/163443/MpEngine-ASProtect-Embedded-Runtime-DLL-Memory-Corruption.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31985; http://packetstormsecurity.com/files/163443/MpEngine-ASProtect-Embedded-Runtime-DLL-Memory-Corruption.html
CVE: CVE-2021-33739
Published: 2021-06-08
Description: Microsoft DWM Core Library Elevation of Privilege Vulnerability
CVSS Score: 8.4 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33739; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33739; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-33739
CVE: CVE-2021-33741
Published: 2021-06-08
Description: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVSS Score: 8.2 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33741; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33741
CVE: CVE-2021-33742
Published: 2021-06-08
Description: Windows MSHTML Platform Remote Code Execution Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33742; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33742; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-33742
CVE: CVE-2021-20728
Published: 2021-06-09
Description: Improper access control vulnerability in goo blog App for Android ver.1.2.25 and earlier and for iOS ver.1.3.3 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App.
CVSS Score: 5.3 (MEDIUM)
References: https://blog.goo.ne.jp/staffblog/e/d84a6b[PII_REDACTED][PII_REDACTED]2885db; https://jvn.jp/en/jp/JVN91691168/index.html; https://blog.goo.ne.jp/staffblog/e/d84a6b[PII_REDACTED][PII_REDACTED]2885db
CVE: CVE-2021-20730
Published: 2021-06-09
Description: Improper access control vulnerability in WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allows an attacker to obtain configuration information via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
References: https://jvn.jp/en/vu/JVNVU92862829/index.html; https://www.buffalo.jp/news/detail/20210531-01.html; https://jvn.jp/en/vu/JVNVU92862829/index.html
CVE: CVE-2021-20731
Published: 2021-06-09
Description: WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allow an attacker to execute arbitrary OS commands with root privileges via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://jvn.jp/en/vu/JVNVU92862829/index.html; https://www.buffalo.jp/news/detail/20210531-01.html; https://jvn.jp/en/vu/JVNVU92862829/index.html
CVE: CVE-2021-20732
Published: 2021-06-09
Description: The ATOM (ATOM - Smart life App for Android versions prior to 1.8.1 and ATOM - Smart life App for iOS versions prior to 1.8.2) does not verify server certificate properly, which allows man-in-the-middle attackers to eavesdrop on encrypted communication via a crafted certificate.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://jvn.jp/en/jp/JVN64064138/index.html; https://www.atomtech.co.jp/news/news/2055/; https://jvn.jp/en/jp/JVN64064138/index.html
CVE: CVE-2021-28169
Published: 2021-06-09
Description: For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory. For example a request to `/concat?/%2557EB-INF/web.xml` can retrieve the web.xml file. This can reveal sensitive information regarding the implementation of a web application.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/eclipse/jetty.project/security/advisories/GHSA-gwcr-j4wh-j3cq; https://lists.apache.org/thread.html/r04a4b4553a23aff26f42635a6ae388c3b162aab30a88d12e59d05168%40%3Cjira.kafka.apache.org%3E; https://lists.apache.org/thread.html/r234f[PII_REDACTED]636356f43654cdacef565b8f9ceb0e0c07ffb8c73b%40%3Cdev.kafka.apache.org%3E
CVE: CVE-2020-11126
Published: 2021-06-09
Description: Possible out of bound read while WLAN frame parsing due to lack of check for body and header length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin
CVE: CVE-2020-11134
Published: 2021-06-09
Description: Possible stack out of bound write might happen due to time bitmap length and bit duration fields of the attributes like NAN ranging setup attribute inside a NAN management frame are not Properly validated in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-129, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin
CVE: CVE-2020-11159
Published: 2021-06-09
Description: Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE length is less than length of frame pointer being accessed in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin
CVE: CVE-2020-11160
Published: 2021-06-09
Description: Resource leakage issue during dci client registration due to reference count is not decremented if dci client registration fails in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-190
References: https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin
CVE: CVE-2020-11161
Published: 2021-06-09
Description: Out-of-bounds memory access can occur while calculating alignment requirements for a negative width from external components in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin
CVE: CVE-2020-11165
Published: 2021-06-09
Description: Memory corruption due to buffer overflow while copying the message provided by HLOS into buffer without validating the length of buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin
CVE: CVE-2020-11178
Published: 2021-06-09
Description: Trusted APPS to overwrite the CPZ memory of another use-case as TZ only checks the physical address not overlapping with its memory and its RoT memory in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin
CVE: CVE-2020-11182
Published: 2021-06-09
Description: Possible heap overflow while parsing NAL header due to lack of check of length of data received from user in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin
CVE: CVE-2020-11233
Published: 2021-06-09
Description: Time-of-check time-of-use race condition While processing partition entries due to newly created buffer was read again from mmc without validation in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 7.0 (HIGH)
CWE: CWE-367
References: https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin