deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-11321
Published: 2019-04-18
Description: An issue was discovered in Motorola CX2 1.01 and M2 1.01. The router opens TCP port 8010. Users can send hnap requests to this port without authentication to obtain information such as the MAC addresses of connected client devices.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306
References: https://github.com/TeamSeri0us/pocs/blob/master/iot/motorola.pdf; https://github.com/TeamSeri0us/pocs/blob/master/iot/motorola.pdf
CVE: CVE-2019-11322
Published: 2019-04-18
Description: An issue was discovered in Motorola CX2 1.01 and M2 1.01. There is a command injection in the function startRmtAssist in hnap, which leads to remote code execution via shell metacharacters in a JSON value.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/TeamSeri0us/pocs/blob/master/iot/motorola.pdf; https://github.com/TeamSeri0us/pocs/blob/master/iot/motorola.pdf
CVE: CVE-2019-8999
Published: 2019-04-18
Description: An XML External Entity vulnerability in the UEM Core of BlackBerry UEM version(s) earlier than 12.10.1a could allow an attacker to potentially gain read access to files on any system reachable by the UEM service account.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: http://support.blackberry.com/kb/articleDetail?articleNumber=000056241; http://support.blackberry.com/kb/articleDetail?articleNumber=000056241
CVE: CVE-2018-16877
Published: 2019-04-18
Description: A flaw was found in the way pacemaker's client-server authentication was implemented in versions up to and including 2.0.0. A local attacker could use this flaw, and combine it with other IPC weaknesses, to achieve local privilege escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-287
References: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00034.html; http://www.securityfocus.com/bid/108042
CVE: CVE-2018-16878
Published: 2019-04-18
Description: A flaw was found in pacemaker up to and including version 2.0.1. An insufficient verification inflicted preference of uncontrolled processes can lead to DoS
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400, CWE-400
References: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00034.html; http://www.securityfocus.com/bid/108039
CVE: CVE-2018-17287
Published: 2019-04-18
Description: In Kofax Front Office Server Administration Console 4.1.1.11.0.5212, some fields, such as passwords, are obfuscated in the front-end, but the cleartext value can be exfiltrated by using the back-end "download" feature, as demonstrated by an mfp.password downloadsettingvalue operation.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-311, CWE-345
References: https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2018-17287-Information%20Disclosure-Kofax; https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2018-17287-Information%20Disclosure-Kofax
CVE: CVE-2018-17288
Published: 2019-04-18
Description: Kofax Front Office Server version 4.1.1.11.0.5212 (both Thin Client and Administration Console) suffers from multiple authenticated stored XSS vulnerabilities via the (1) "Filename" field in /Kofax/KFS/ThinClient/document/upload/ - (Thin Client) or (2) "DeviceName" field in /Kofax/KFS/Admin/DeviceService/device/ - (Administration Console).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2018-17288-XSS-Kofax; https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2018-17288-XSS-Kofax
CVE: CVE-2018-17289
Published: 2019-04-18
Description: An XML external entity (XXE) vulnerability in Kofax Front Office Server Administration Console version 4.1.1.11.0.5212 allows remote authenticated users to read arbitrary files via crafted XML inside an imported package configuration (.ZIP file) within the Kofax/KFS/Admin/PackageService/package/upload file parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611
References: https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2018-17289-XXE-Kofax; https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2018-17289-XXE-Kofax
CVE: CVE-2019-11017
Published: 2019-04-18
Description: On D-Link DI-524 V2.06RU devices, multiple Stored and Reflected XSS vulnerabilities were found in the Web Configuration: /spap.htm, /smap.htm, and /cgi-bin/smap, as demonstrated by the cgi-bin/smap RC parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/152465/D-Link-DI-524-2.06RU-Cross-Site-Scripting.html; https://www.exploit-db.com/exploits/46687; http://packetstormsecurity.com/files/152465/D-Link-DI-524-2.06RU-Cross-Site-Scripting.html
CVE: CVE-2019-11223
Published: 2019-04-18
Description: An Unrestricted File Upload Vulnerability in the SupportCandy plugin through 2.0.0 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://cert.kalasag.com.ph/news/research/vulnerable-wordpress-plugin-lets-you-take-over-websites/; https://wordpress.org/plugins/supportcandy/#developers; https://wpvulndb.com/vulnerabilities/9488
CVE: CVE-2019-3398
Published: 2019-04-18
Description: Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote attacker who has permission to add attachments to pages and / or blogs or to create a new space or a personal space or who has 'Admin' permissions for a space can exploit this path traversal vulnerability to write files to arbitrary locations which can lead to remote code execution on systems that run a vulnerable version of Confluence Server or Data Center. All versions of Confluence Server from 2.0.0 before 6.6.13 (the fixed version for 6.6.x), from 6.7.0 before 6.12.4 (the fixed version for 6.12.x), from 6.13.0 before 6.13.4 (the fixed version for 6.13.x), from 6.14.0 before 6.14.3 (the fixed version for 6.14.x), and from 6.15.0 before 6.15.2 are affected by this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22, CWE-22
References: http://packetstormsecurity.com/files/152616/Confluence-Server-Data-Center-Path-Traversal.html; http://packetstormsecurity.com/files/155235/Atlassian-Confluence-6.15.1-Directory-Traversal.html; http://packetstormsecurity.com/files/155245/Atlassian-Confluence-6.15.1-Directory-Traversal.html
CVE: CVE-2019-3885
Published: 2019-04-18
Description: A use-after-free flaw was found in pacemaker up to and including version 2.0.1 which could result in certain sensitive information to be leaked via the system logs.
CVSS Score: 3.3 (LOW)
CWE: CWE-416, CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00034.html; http://www.securityfocus.com/bid/108036; https://access.redhat.com/errata/RHSA-2019:1278
CVE: CVE-2019-9005
Published: 2019-04-18
Description: The Cprime Power Scripts app before 4.0.14 for Atlassian Jira allows Directory Traversal.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://marketplace.atlassian.com/apps/43318/power-scripts-jira-script-automation/version-history; https://www.detack.de/en/cve-2019-9005; https://marketplace.atlassian.com/apps/43318/power-scripts-jira-script-automation/version-history
CVE: CVE-2018-20200
Published: 2019-04-18
Description: CertificatePinner.java in OkHttp 3.x through 3.12.0 allows man-in-the-middle attackers to bypass certificate pinning by changing SSLContext and the boolean values while hooking the application. NOTE: This id is disputed because some parties don't consider this is a vulnerability. Their rationale can be found in https://github.com/square/okhttp/issues/4967
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://github.com/square/okhttp/commits/master; https://github.com/square/okhttp/issues/4967
CVE: CVE-2019-11084
Published: 2019-04-18
Description: GAuth 0.9.9 beta has stored XSS that shows a popup repeatedly and discloses cookies.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/gbraad/gauth/issues/110; https://github.com/gbraad/gauth/issues/110
CVE: CVE-2019-10893
Published: 2019-04-18
Description: CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.793 (Free/Open Source Version) and 0.9.8.753 (Pro) is vulnerable to Stored/Persistent XSS for Admin Email fields on the "CWP Settings > "Edit Settings" screen. By changing the email ID to any XSS Payload and clicking on Save Changes, the XSS Payload will execute.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://forum.centos-webpanel.com/informations/; http://packetstormsecurity.com/files/152437/CentOS-Web-Panel-0.9.8.793-Free-0.9.8.753-Pro-Cross-Site-Scripting.html; http://www.securityfocus.com/bid/108035
CVE: CVE-2019-3718
Published: 2019-04-18
Description: Dell SupportAssist Client versions prior to 3.2.0.90 contain an improper origin validation vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to attempt CSRF attacks on users of the impacted systems.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.securityfocus.com/bid/108020; https://www.dell.com/support/article/us/en/19/sln316857/dsa-2019-051-dell-supportassist-client-multiple-vulnerabilities?lang=en; http://www.securityfocus.com/bid/108020
CVE: CVE-2019-3719
Published: 2019-04-18
Description: Dell SupportAssist Client versions prior to 3.2.0.90 contain a remote code execution vulnerability. An unauthenticated attacker, sharing the network access layer with the vulnerable system, can compromise the vulnerable system by tricking a victim user into downloading and executing arbitrary executables via SupportAssist client from attacker hosted sites.
CVSS Score: 8.0 (HIGH)
References: https://www.dell.com/support/article/us/en/19/sln316857/dsa-2019-051-dell-supportassist-client-multiple-vulnerabilities?lang=en; https://www.dell.com/support/article/us/en/19/sln316857/dsa-2019-051-dell-supportassist-client-multiple-vulnerabilities?lang=en
CVE: CVE-2019-11324
Published: 2019-04-18
Description: The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succeeding in situations where a verification failure is the correct outcome. This is related to use of the ssl_context, ca_certs, or ca_certs_dir argument.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00039.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00041.html; http://www.openwall.com/lists/oss-security/2019/04/19/1
CVE: CVE-2019-11015
Published: 2019-04-18
Description: A vulnerability was found in the MIUI OS version 10.1.3.0 that allows a physically proximate attacker to bypass Lockscreen based authentication via the Wallpaper Carousel application to obtain sensitive Clipboard data and the user's stored credentials (partially). This occurs because of paste access to a social media login page.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-287
References: https://www.andmp.com/2019/04/unpatched-vulnerability-in-xiaomi-miui-os-lock-screen.html; https://www.andmp.com/2019/04/unpatched-vulnerability-in-xiaomi-miui-os-lock-screen.html
CVE: CVE-2019-11331
Published: 2019-04-18
Description: Network Time Protocol (NTP), as specified in RFC 5905, uses port 123 even for modes where a fixed port number is not required, which makes it easier for remote attackers to conduct off-path attacks.
CVSS Score: 8.1 (HIGH)
References: http://www.securityfocus.com/bid/108010; https://support.f5.com/csp/article/K09940637; https://support.f5.com/csp/article/K09940637?utm_source=f5support&amp%3Butm_medium=RSS
CVE: CVE-2019-9160
Published: 2019-04-18
Description: WAC on the Sangfor Sundray WLAN Controller version 3.7.4.2 and earlier has a backdoor account allowing a remote attacker to login to the system via SSH (on TCP port 22345) and escalate to root (because the password for root is the WebUI admin password concatenated with a static string).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://www.cnvd.org.cn/flaw/show/CNVD-2019-07680; http://www.cnvd.org.cn/flaw/show/CNVD-2019-07680
CVE: CVE-2019-11332
Published: 2019-04-18
Description: MKCMS 5.0 allows remote attackers to take over arbitrary user accounts by posting a username and e-mail address to ucenter/repass.php, which triggers e-mail transmission with the password, as demonstrated by 123456.
CVSS Score: 8.8 (HIGH)
References: https://cisk123456.blogspot.com/2019/04/mkcms-v50.html; https://cisk123456.blogspot.com/2019/04/mkcms-v50.html
CVE: CVE-2019-9161
Published: 2019-04-18
Description: WAC on the Sangfor Sundray WLAN Controller version 3.7.4.2 and earlier has a Remote Code Execution issue allowing remote attackers to achieve full access to the system, because shell metacharacters in the nginx_webconsole.php Cookie header can be used to read an etc/config/wac/wns_cfg_admin_detail.xml file containing the admin password. (The password for root is the WebUI admin password concatenated with a static string.)
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://www.cnvd.org.cn/flaw/show/CNVD-2019-07679; http://www.cnvd.org.cn/flaw/show/CNVD-2019-07679
CVE: CVE-2019-11338
Published: 2019-04-19
Description: libavcodec/hevcdec.c in FFmpeg 3.4 and 4.1.2 mishandles detection of duplicate first slices, which allows remote attackers to cause a denial of service (NULL pointer dereference and out-of-array access) or possibly have unspecified other impact via crafted HEVC data.
CVSS Score: 8.8 (HIGH)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00012.html; http://www.securityfocus.com/bid/108034; https://github.com/FFmpeg/FFmpeg/commit/54655623a82632e7624714d7b2a3e039dc5faa7e
CVE: CVE-2019-11339
Published: 2019-04-19
Description: The studio profile decoder in libavcodec/mpeg4videodec.c in FFmpeg 4.0 before 4.0.4 and 4.1 before 4.1.2 allows remote attackers to cause a denial of service (out-of-array access) or possibly have unspecified other impact via crafted MPEG-4 video data.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00012.html; http://www.securityfocus.com/bid/108037; https://github.com/FFmpeg/FFmpeg/commit/1f686d023b95219db933394a7704ad9aa5f01cbb
CVE: CVE-2019-10245
Published: 2019-04-19
Description: In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a method to execute past the end of bytecode array causing crashes. Eclipse OpenJ9 v0.14.0 correctly detects this case and rejects the attempted class load.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-119
References: http://www.securityfocus.com/bid/108094; https://access.redhat.com/errata/RHSA-2019:1163; https://access.redhat.com/errata/RHSA-2019:1164
CVE: CVE-2019-11340
Published: 2019-04-19
Description: util/emailutils.py in Matrix Sydent before 1.0.2 mishandles registration restrictions that are based on e-mail domain, if the allowed_local_3pids option is enabled. This occurs because of potentially unwanted behavior in Python, in which an email.utils.parseaddr call on user@bad.example.net@good.example.com returns the user@bad.example.net substring.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20
References: https://github.com/matrix-org/sydent/commit/4e1cfff53429c49c87d5c457a18ed435520044fc; https://github.com/matrix-org/sydent/compare/7c002cd...09278fb; https://matrix.org/blog/2019/04/18/security-update-sydent-1-0-2/
CVE: CVE-2018-1729
Published: 2019-04-19
Description: IBM QRadar SIEM 7.3 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 147708.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=ibm10881546; http://www.securityfocus.com/bid/108031; https://exchange.xforce.ibmcloud.com/vulnerabilities/147708
CVE: CVE-2019-4055
Published: 2019-04-19
Description: IBM MQ 8.0.0.0 through 8.0.0.10, 9.0.0.0 through 9.0.0.5, and 9.1.0.0 through 9.1.1 is vulnerable to a denial of service attack within the TLS key renegotiation function. IBM X-Force ID: 156564.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/108027; https://exchange.xforce.ibmcloud.com/vulnerabilities/156564; https://www.ibm.com/support/docview.wss?uid=ibm10870484
CVE: CVE-2019-10886
Published: 2019-04-19
Description: An incorrect access control exists in the Sony Photo Sharing Plus application in the firmware before PKG6.5629 version (for the X7500D TV and other applicable TVs). This vulnerability allows an attacker to read arbitrary files without authentication over HTTP when Photo Sharing Plus application is running. This may allow an attacker to browse a particular directory (e.g. images) inside the private network.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-306
References: http://packetstormsecurity.com/files/152612/Sony-Smart-TV-Information-Disclosure-File-Read.html; http://seclists.org/fulldisclosure/2019/Apr/32; http://www.securityfocus.com/bid/108072
CVE: CVE-2019-11344
Published: 2019-04-19
Description: data/inc/files.php in Pluck 4.7.8 allows remote attackers to execute arbitrary code by uploading a .htaccess file that specifies SetHandler x-httpd-php for a .txt file, because only certain PHP-related filename extensions are blocked.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/pluck-cms/pluck/issues/72; https://github.com/pluck-cms/pluck/issues/72
CVE: CVE-2019-5008
Published: 2019-04-19
Description: hw/sparc64/sun4u.c in QEMU 3.1.50 is vulnerable to a NULL pointer dereference, which allows the attacker to cause a denial of service via a device driver.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00000.html; http://www.securityfocus.com/bid/108024; https://fakhrizulkifli.github.io/posts/2019/01/03/CVE-2019-5008/
CVE: CVE-2019-9841
Published: 2019-04-19
Description: Vesta Control Panel 0.9.8-23 allows XSS via a crafted URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://cardaci.xyz/advisories/2019/04/15/vesta-control-panel-0.9.8-23-reflected-xss-in-file-manager-api/; https://forum.vestacp.com/viewtopic.php?f=25&t=18599&sid=fc1a48fd2f43815b2dc69c3f64caed36; https://github.com/serghey-rodin/vesta/commit/c28c5d29a3c61bc8110c11349e3f2309cd537cfa
CVE: CVE-2019-2026
Published: 2019-04-19
Description: In updateAssistMenuItems of Editor.java, there is a possible escape from the Setup Wizard due to a missing permission check. This could lead to local escalation of privilege and FRP bypass with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0Android ID: A-120866126
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://source.android.com/security/bulletin/2019-04-01; https://source.android.com/security/bulletin/2019-04-01
CVE: CVE-2019-2027
Published: 2019-04-19
Description: In floor0_inverse1 of floor0.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-119120561.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2019-04-01; https://source.android.com/security/bulletin/2019-04-01
CVE: CVE-2019-2028
Published: 2019-04-19
Description: In numerous hand-crafted functions in libmpeg2, NEON registers are not preserved. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-120644655.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://source.android.com/security/bulletin/2019-04-01; https://source.android.com/security/bulletin/2019-04-01
CVE: CVE-2019-2029
Published: 2019-04-19
Description: In btm_proc_smp_cback of tm_ble.cc, there is a possible memory corruption due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-120612744.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-787
References: https://source.android.com/security/bulletin/2019-04-01; https://source.android.com/security/bulletin/2019-04-01
CVE: CVE-2019-2030
Published: 2019-04-19
Description: In removeInterfaceAddress of NetworkController.cpp, there is a possible use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-119496789.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://source.android.com/security/bulletin/2019-04-01; https://source.android.com/security/bulletin/2019-04-01
CVE: CVE-2019-2031
Published: 2019-04-19
Description: In rw_t3t_act_handle_check_ndef_rsp of rw_t3t.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-120502559.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2019-04-01; https://source.android.com/security/bulletin/2019-04-01
CVE: CVE-2019-2032
Published: 2019-04-19
Description: In SetScanResponseData of ble_advertiser_hci_interface.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-8.0 Android-8.1 Android-9. Android ID: A-121145627.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2019-04-01; https://source.android.com/security/bulletin/2019-04-01
CVE: CVE-2019-2033
Published: 2019-04-19
Description: In create_hdr of dnssd_clientstub.c, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-121327565.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://source.android.com/security/bulletin/2019-04-01; https://source.android.com/security/bulletin/2019-04-01
CVE: CVE-2019-2034
Published: 2019-04-19
Description: In rw_i93_sm_read_ndef of rw_i93.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege in the NFC process with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-122035770.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-787
References: https://source.android.com/security/bulletin/2019-04-01; https://source.android.com/security/bulletin/2019-04-01
CVE: CVE-2019-2035
Published: 2019-04-19
Description: In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-122320256
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2019-04-01; https://source.android.com/security/bulletin/2019-04-01