deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: MicroMathematics version before commit 5c05ac8 contains a XML External Entity (XXE) vulnerability in SMathStudio files that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Specially crafted SMathStudio files. This vulnerability appears to have been fixed in after commit 5c05ac8.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-611
References: https://0dd.zone/2018/10/27/micromathematics-XXE/; https://github.com/mkulesh/microMathematics/issues/79; https://0dd.zone/2018/10/27/micromathematics-XXE/
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: codelibs fess version before commit faa265b contains a XML External Entity (XXE) vulnerability in GSA XML file parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via specially crafted GSA XML files. This vulnerability appears to have been fixed in after commit faa265b.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-611
References: https://0dd.zone/2018/10/27/fess-XXE/; https://github.com/codelibs/fess/issues/1851; https://0dd.zone/2018/10/27/fess-XXE/
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: exist version <= 5.0.0-RC4 contains a XML External Entity (XXE) vulnerability in XML Parser for REST Server that can result in Disclosure of confidential data, denial of service, SSRF, port scanning.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-611
References: https://0dd.zone/2018/10/27/exist-XXE/; https://github.com/eXist-db/exist/issues/2180; https://0dd.zone/2018/10/27/exist-XXE/
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: MegaMek version < v0.45.1 contains a Other/Unknown vulnerability in Object Stream Connection that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://0dd.zone/2018/10/28/megamek-Object-Injection/; https://github.com/MegaMek/megamek/issues/1162; https://0dd.zone/2018/10/28/megamek-Object-Injection/
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: FreeCol version <= nightly-2018-08-22 contains a XML External Entity (XXE) vulnerability in FreeColXMLReader parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Freecol file.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-611
References: https://0dd.zone/2018/10/28/freecol-XXE/; https://github.com/FreeCol/freecol/issues/26; https://0dd.zone/2018/10/28/freecol-XXE/
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: Microweber version <= 1.0.7 contains a Cross Site Scripting (XSS) vulnerability in Admin login form template that can result in Execution of JavaScript code.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://0dd.zone/2018/10/28/microweber-XSS/; https://github.com/microweber/microweber/issues/489; https://0dd.zone/2018/10/28/microweber-XSS/
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: Ubilling version <= 0.9.2 contains a Other/Unknown vulnerability in user-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://0dd.zone/2018/10/28/ubilling-Object-Injection/; https://github.com/nightflyza/Ubilling/issues/330; https://0dd.zone/2018/10/28/ubilling-Object-Injection/
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: FrostWire version <= frostwire-desktop-6.7.4-build-272 contains a XML External Entity (XXE) vulnerability in Man in the middle on update that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Man in the middle the call to update the software.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-611
References: https://0dd.zone/2018/10/28/frostwire-XXE-MitM/; https://github.com/frostwire/frostwire/issues/829; https://0dd.zone/2018/10/28/frostwire-XXE-MitM/
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: Anyplace version before commit 80359b4 contains a XML External Entity (XXE) vulnerability in Man in the middle on map API call that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This vulnerability appears to have been fixed in after commit 80359b4.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-611
References: https://0dd.zone/2018/10/28/anyplace-XXE-MitM/; https://github.com/dmsl/anyplace/issues/263; https://0dd.zone/2018/10/28/anyplace-XXE-MitM/
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: XR3Player version <= V3.124 contains a XML External Entity (XXE) vulnerability in Playlist parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-611
References: https://0dd.zone/2018/10/28/xr3player-XXE/; https://github.com/goxr3plus/XR3Player/issues/9; https://0dd.zone/2018/10/28/xr3player-XXE/
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: K9Mail version <= v5.600 contains a XML External Entity (XXE) vulnerability in WebDAV response parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via malicious WebDAV server or intercept the reponse of a valid WebDAV server.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-611
References: https://0dd.zone/2018/10/28/k9mail-XXE-MitM/; https://github.com/k9mail/k-9/issues/3681; https://0dd.zone/2018/10/28/k9mail-XXE-MitM/
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: ZoneMinder version <= 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://0dd.zone/2018/10/28/zoneminder-Object-Injection/; https://github.com/ZoneMinder/zoneminder/issues/2271; https://0dd.zone/2018/10/28/zoneminder-Object-Injection/
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: ZoneMinder version <= 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://0dd.zone/2018/10/28/zoneminder-Object-Injection-2/; https://github.com/ZoneMinder/zoneminder/issues/2272; https://0dd.zone/2018/10/28/zoneminder-Object-Injection-2/
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: runelite version <= runelite-parent-1.4.23 contains a XML External Entity (XXE) vulnerability in Man in the middle runscape services call that can result in Disclosure of confidential data, denial of service, SSRF, port scanning.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-611
References: https://0dd.zone/2018/10/28/runelite-XXE-MitM/; https://github.com/runelite/runelite/issues/6160; https://0dd.zone/2018/10/28/runelite-XXE-MitM/
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: KeePassDX version <= 2.5.0.0beta17 contains a XML External Entity (XXE) vulnerability in kdbx file parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-611
References: https://0dd.zone/2018/10/28/KeePassDX-XXE/; https://github.com/Kunzisoft/KeePassDX/issues/200; https://0dd.zone/2018/10/28/KeePassDX-XXE/
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: bw-calendar-engine version <= bw-calendar-engine-3.12.0 contains a XML External Entity (XXE) vulnerability in IscheduleClient XML Parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Man in the Middle or malicious server.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-611
References: https://0dd.zone/2018/10/28/bw-calendar-engine-XXE-MitM/; https://github.com/Bedework/bw-calendar-engine/issues/3; https://0dd.zone/2018/10/28/bw-calendar-engine-XXE-MitM/
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: UML Designer version <= 8.0.0 contains a XML External Entity (XXE) vulnerability in XML parser for plugins that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via malicious plugins.xml file.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-611
References: https://0dd.zone/2018/10/28/uml-designer-XXE/; https://github.com/ObeoNetwork/UML-Designer/issues/1035; https://0dd.zone/2018/10/28/uml-designer-XXE/
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: autopsy version <= 4.9.0 contains a XML External Entity (XXE) vulnerability in CaseMetadata XML Parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Specially crafted CaseMetadata.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-611
References: https://0dd.zone/2018/10/28/autopsy-XXE/; https://github.com/sleuthkit/autopsy/issues/4236; https://0dd.zone/2018/10/28/autopsy-XXE/
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: LH-EHR version REL-2_0_0 contains a Arbitrary File Upload vulnerability in Profile picture upload that can result in Remote Code Execution. This attack appear to be exploitable via Uploading a PHP file with image MIME type.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://0dd.zone/2018/09/03/lh-ehr-RCE-via-picture-upload/; https://github.com/LibreHealthIO/lh-ehr/issues/1223; https://0dd.zone/2018/09/03/lh-ehr-RCE-via-picture-upload/
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: Processing Foundation Processing version 3.4 and earlier contains a XML External Entity (XXE) vulnerability in loadXML() function that can result in An attacker can read arbitrary files and exfiltrate their contents via HTTP requests. This attack appear to be exploitable via The victim must use Processing to parse a crafted XML document.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611
References: https://github.com/processing/processing/issues/5706; https://twitter.com/ben_fry/status/[PII_REDACTED]65059329; https://github.com/processing/processing/issues/5706
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: Zend.To version Prior to 5.15-1 contains a Cross Site Scripting (XSS) vulnerability in The verify.php page that can result in An attacker could execute arbitrary Javascript code in the context of the victim's browser.. This attack appear to be exploitable via HTTP POST request. This vulnerability appears to have been fixed in 5.16-1 Beta.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://zend.to/changelog.php; https://zend.to/changelog.php
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: FatFreeCRM version <=0.14.1, >=0.15.0 <=0.15.1, >=0.16.0 <=0.16.3, >=0.17.0 <=0.17.2, ==0.18.0 contains a Cross Site Scripting (XSS) vulnerability in commit 6d60bc8ed010c4eda05d6645c64849f415f68d65 that can result in Javascript execution. This attack appear to be exploitable via Content with Javascript payload will be executed on end user browsers when they visit the page. This vulnerability appears to have been fixed in 0.18.1, 0.17.3, 0.16.4, 0.15.2, 0.14.2.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/asteinhauser/fat_free_crm/commit/306f940b26ccf3f406665f07bece1229a7a5dcfa; https://github.com/asteinhauser/fat_free_crm/issues/1; https://github.com/fatfreecrm/fat_free_crm/wiki/XSS-Vulnerability-%282018-10-27%29
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: Luigi version prior to version 2.8.0; after commit 53b52e12745075a8acc016d33945d9d6a7a6aaeb; after GitHub PR spotify/luigi/pull/1870 contains a Cross ite Request Forgery (CSRF) vulnerability in API endpoint: /api/<method> that can result in Task metadata such as task name, id, parameter, etc. will be leaked to unauthorized users. This attack appear to be exploitable via The victim must visit a specially crafted webpage from the network where their Luigi server is accessible.. This vulnerability appears to have been fixed in 2.8.0 and later.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/spotify/luigi/blob/2.7.9/luigi/server.py#L67; https://github.com/spotify/luigi/pull/1870; https://groups.google.com/forum/#%21topic/luigi-user/ZgfRTpBsVUY
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: Square Open Source Retrofit version Prior to commit 4a693c5aeeef2be6c7ecf80e7b5ec79f6ab59437 contains a XML External Entity (XXE) vulnerability in JAXB that can result in An attacker could use this to remotely read files from the file system or to perform SSRF.. This vulnerability appears to have been fixed in After commit 4a693c5aeeef2be6c7ecf80e7b5ec79f6ab59437.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-611
References: https://github.com/square/retrofit/pull/2735; https://github.com/square/retrofit/pull/2735
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultID: CVE-2017-6519.  Reason: This candidate is a duplicate of CVE-2017-6519.  Notes: All CVE users should reference CVE-2017-6519 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: FreshDNS version 1.0.3 and earlier contains a Cross ite Request Forgery (CSRF) vulnerability in All (authenticated) API calls in index.php / class.manager.php that can result in Editing domains and zones with victim's privileges. This attack appear to be exploitable via Victim must open a website containing attacker's javascript. This vulnerability appears to have been fixed in 1.0.5 and later.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/funzoneq/freshdns/issues/7; https://github.com/funzoneq/freshdns/pull/6/commits/bdeff81bd4baff9463d46b90fb1889e7ac7ec4ed; https://github.com/funzoneq/freshdns/issues/7
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: FreshDNS version 1.0.3 and prior contains a Cross Site Scripting (XSS) vulnerability in Account data form; Zone editor that can result in Execution of attacker's JavaScript code in victim's session. This attack appear to be exploitable via The attacker stores a specially crafted string as their Full Name in their account details. The victim (e.g. the administrator of the FreshDNS instance) opens the User List in the admin interface.. This vulnerability appears to have been fixed in 1.0.5 and later.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/funzoneq/freshdns/issues/16; https://github.com/funzoneq/freshdns/pull/6/commits/48b5ca812a89689fd2f32248875cedcba8c9014f; https://github.com/funzoneq/freshdns/issues/16
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: Wampserver version prior to version 3.1.5 contains a Cross Site Scripting (XSS) vulnerability in index.php localhost page that can result in very low. This attack appear to be exploitable via payload onmouseover. This vulnerability appears to have been fixed in 3.1.5 and later.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://forum.wampserver.com/read.php?2%2C153491; http://forum.wampserver.com/read.php?2%2C153491
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: Alpine Linux version Versions prior to 2.6.10, 2.7.6, and 2.10.1 contains a Other/Unknown vulnerability in apk-tools (Alpine Linux' package manager) that can result in Remote Code Execution. This attack appear to be exploitable via A specially crafted APK-file can cause apk to write arbitrary data to an attacker-specified file, due to bugs in handling long link target name and the way a regular file is extracted.. This vulnerability appears to have been fixed in 2.6.10, 2.7.6, and 2.10.1.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://alpinelinux.org/posts/Alpine-3.8.1-released.html; https://git.alpinelinux.org/cgit/apk-tools/commit/?id=6484ed9849f03971eb48ee1fdc21a2f128247eb1; https://justi.cz/security/2018/09/13/alpine-apk-rce.html
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: Square Retrofit version versions from (including) 2.0 and 2.5.0 (excluding) contains a Directory Traversal vulnerability in RequestBuilder class, method addPathParameter that can result in By manipulating the URL an attacker could add or delete resources otherwise unavailable to her.. This attack appear to be exploitable via An attacker should have access to an encoded path parameter on POST, PUT or DELETE request.. This vulnerability appears to have been fixed in 2.5.0 and later.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://access.redhat.com/errata/RHSA-2019:3892; https://github.com/square/retrofit/blob/master/CHANGELOG.md; https://github.com/square/retrofit/commit/b9a7f6ad72073ddd40254c0058710e87a073047d#diff-943ec7ed35e[PII_REDACTED]4d1dc0ec982
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: Copay Bitcoin Wallet version 5.01 to 5.1.0 included. contains a Other/Unknown vulnerability in wallet private key storage that can result in Users' private key can be compromised. . This attack appear to be exploitable via Affected version run the malicious code at startup . This vulnerability appears to have been fixed in 5.2.0 and later .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522
References: https://arstechnica.com/information-technology/2018/11/hacker-backdoors-widely-used-open-source-software-to-steal-bitcoin/; https://blog.bitpay.com/npm-package-vulnerability-copay/; https://github.com/bitpay/copay/issues/9346
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: FreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3 contains a Other/Unknown vulnerability in channels/drdynvc/client/drdynvc_main.c, drdynvc_process_capability_request that can result in The RDP server can read the client's memory.. This attack appear to be exploitable via RDPClient must connect the rdp server with echo option. This vulnerability appears to have been fixed in after commit 205c612820dac644d665b5bb1cdf437dc5ca01e3.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://access.redhat.com/errata/RHSA-2019:2157; https://github.com/FreeRDP/FreeRDP/issues/4866; https://github.com/FreeRDP/FreeRDP/pull/4871
CVE: CVE-2018-11960
Published: 2018-12-20
Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, A use after free condition can occur in the SPS driver which can lead to error in kernel.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/106136; https://www.codeaurora.org/security-bulletin/2018/12/03/december-2018-code-aurora-security-bulletin; http://www.securityfocus.com/bid/106136
CVE: CVE-2018-11961
Published: 2018-12-20
Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Possibility of accessing out of bound vector index When updating some GNSS configurations.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/106136; https://www.codeaurora.org/security-bulletin/2018/12/03/december-2018-code-aurora-security-bulletin; http://www.securityfocus.com/bid/106136
CVE: CVE-2018-11963
Published: 2018-12-20
Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Buffer overread may occur due to non-null terminated strings while processing vsprintf in camera jpeg driver.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/106136; https://www.codeaurora.org/security-bulletin/2018/12/03/december-2018-code-aurora-security-bulletin; http://www.securityfocus.com/bid/106136
CVE: CVE-2018-11964
Published: 2018-12-20
Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Exposing the hashed content in /etc/passwd may lead to security issue.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://www.codeaurora.org/security-bulletin/2018/12/03/december-2018-code-aurora-security-bulletin; https://www.codeaurora.org/security-bulletin/2018/12/03/december-2018-code-aurora-security-bulletin
CVE: CVE-2018-11965
Published: 2018-12-20
Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Anyone can execute proptrigger.sh which will lead to change in properties.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://www.codeaurora.org/security-bulletin/2018/12/03/december-2018-code-aurora-security-bulletin; https://www.codeaurora.org/security-bulletin/2018/12/03/december-2018-code-aurora-security-bulletin
CVE: CVE-2018-11983
Published: 2018-12-20
Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Error in kernel observed while accessing freed mask pointers after reallocating memory for mask table.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://www.codeaurora.org/security-bulletin/2018/12/03/december-2018-code-aurora-security-bulletin; https://www.codeaurora.org/security-bulletin/2018/12/03/december-2018-code-aurora-security-bulletin
CVE: CVE-2018-11984
Published: 2018-12-20
Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, A use after free condition and an out-of-bounds access can occur in the DIAG driver.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://www.codeaurora.org/security-bulletin/2018/12/03/december-2018-code-aurora-security-bulletin; https://www.codeaurora.org/security-bulletin/2018/12/03/december-2018-code-aurora-security-bulletin
CVE: CVE-2018-11985
Published: 2018-12-20
Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, When allocating heap using user supplied size, Possible heap overflow vulnerability due to integer overflow in roundup to native pointer.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://www.codeaurora.org/security-bulletin/2018/12/03/december-2018-code-aurora-security-bulletin; https://www.codeaurora.org/security-bulletin/2018/12/03/december-2018-code-aurora-security-bulletin
CVE: CVE-2018-11986
Published: 2018-12-20
Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Possible buffer overflow in TX and RX FIFOs of microcontroller in camera subsystem used to exchange commands and messages between Micro FW and CPP driver.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://www.codeaurora.org/security-bulletin/2018/12/03/december-2018-code-aurora-security-bulletin; https://www.codeaurora.org/security-bulletin/2018/12/03/december-2018-code-aurora-security-bulletin
CVE: CVE-2018-11987
Published: 2018-12-20
Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, if there is an unlikely memory alloc failure for the secure pool in boot, it can result in wrong pointer access causing kernel panic.
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: https://www.codeaurora.org/security-bulletin/2018/12/03/december-2018-code-aurora-security-bulletin; https://www.codeaurora.org/security-bulletin/2018/12/03/december-2018-code-aurora-security-bulletin
CVE: CVE-2018-11988
Published: 2018-12-20
Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Un-trusted pointer de-reference issue by accessing a variable which is already freed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://www.codeaurora.org/security-bulletin/2018/12/03/december-2018-code-aurora-security-bulletin; https://www.codeaurora.org/security-bulletin/2018/12/03/december-2018-code-aurora-security-bulletin