deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-3542
Published: 2019-12-11
Description: Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP_HD, GXV3500, and possibly other camera models with firmware 1.0.4.11, have a hardcoded account "!#/" with the same password, which makes it easier for remote attackers to obtain access via a TELNET session.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-798
References: http://seclists.org/fulldisclosure/2013/Jun/84; https://www.youtube.com/watch?v=XkCBs4lenhI; http://seclists.org/fulldisclosure/2013/Jun/84
CVE: CVE-2013-3691
Published: 2019-12-11
Description: AirLive POE-2600HD allows remote attackers to cause a denial of service (device reset) via a long URL.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://seclists.org/fulldisclosure/2013/Jun/84; https://www.youtube.com/watch?v=2UCAHSVqfuE; http://seclists.org/fulldisclosure/2013/Jun/84
CVE: CVE-2013-4303
Published: 2019-12-11
Description: includes/libs/IEUrlExtension.php in the MediaWiki API in MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 does not properly detect extensions when there are an even number of "." (period) characters in a string, which allows remote attackers to conduct cross-site scripting (XSS) attacks via the siprop parameter in a query action to wiki/api.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lists.wikimedia.org/pipermail/mediawiki-announce/2013-September/000133.html; http://seclists.org/oss-sec/2013/q3/553; http://www.securityfocus.com/bid/62194
CVE: CVE-2013-5743
Published: 2019-12-11
Description: Multiple SQL injection vulnerabilities in Zabbix 1.8.x before 1.8.18rc1, 2.0.x before 2.0.9rc1, and 2.1.x before 2.1.7.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://admin.fedoraproject.org/updates/zabbix-1.8.18-1.el6; https://admin.fedoraproject.org/updates/zabbix20-2.0.8-3.el6; https://admin.fedoraproject.org/updates/zabbix20-2.0.9-1.el5
CVE: CVE-2013-5978
Published: 2019-12-11
Description: Multiple cross-site scripting (XSS) vulnerabilities in products.php in the Cart66 Lite plugin before 1.5.1.15 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) Product name or (2) Price description fields via a request to wp-admin/admin.php. NOTE: This issue may only cross privilege boundaries if used in combination with CVE-2013-5977.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2013-10/0048.html; http://packetstormsecurity.com/files/123587/WordPress-Cart66-1.5.1.14-Cross-Site-Request-Forgery-Cross-Site-Scripting.html; http://seclists.org/bugtraq/2013/Oct/52
CVE: CVE-2014-7257
Published: 2019-12-11
Description: SQL injection vulnerability in DBD::PgPP 0.05 and earlier
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://jvn.jp/en/jp/JVN70490316/index.html; http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000142.html; http://jvn.jp/en/jp/JVN70490316/index.html
CVE: CVE-2019-19373
Published: 2019-12-11
Description: An issue was discovered in Squiz Matrix CMS 5.5.0 prior to 5.5.0.3, 5.5.1 prior to 5.5.1.8, 5.5.2 prior to 5.5.2.4, and 5.5.3 prior to 5.5.3.3 where a user can trigger arbitrary unserialization of a PHP object from a packages/cms/page_templates/page_remote_content/page_remote_content.inc POST parameter during processing of a Remote Content page type. This unserialization can be used to trigger the inclusion of arbitrary files on the filesystem (local file inclusion), and results in remote code execution.
CVSS Score: 7.5 (HIGH)
CWE: CWE-502
References: http://packetstormsecurity.com/files/155671/Squiz-Matrix-CMS-5.5.x.x-Code-Execution-Information-Disclosure.html; http://seclists.org/fulldisclosure/2019/Dec/34; https://matrix.squiz.net/releases/5.5/5.5.3.3
CVE: CVE-2019-19374
Published: 2019-12-11
Description: An issue was discovered in core/assets/form/form_question_types/form_question_type_file_upload/form_question_type_file_upload.inc in Squiz Matrix CMS 5.5.0 prior to 5.5.0.3, 5.5.1 prior to 5.5.1.8, 5.5.2 prior to 5.5.2.4, and 5.5.3 prior to 5.5.3.3 where a user can delete arbitrary files from the server during interaction with the File Upload field type, when a custom form exists. (This is related to an information disclosure issue within the File Upload field type that allows users to view the full path to uploaded files, including the product's web root directory.)
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: http://packetstormsecurity.com/files/155671/Squiz-Matrix-CMS-5.5.x.x-Code-Execution-Information-Disclosure.html; http://seclists.org/fulldisclosure/2019/Dec/34; https://matrix.squiz.net/releases/5.5/5.5.3.3
CVE: CVE-2019-19729
Published: 2019-12-11
Description: An issue was discovered in the BSON ObjectID (aka bson-objectid) package 1.3.0 for Node.js. ObjectID() allows an attacker to generate a malformed objectid by inserting an additional property to the user-input, because bson-objectid will return early if it detects _bsontype==ObjectID in the user-input object. As a result, objects in arbitrary forms can bypass formatting if they have a valid bsontype.
CVSS Score: 7.5 (HIGH)
CWE: CWE-670
References: https://github.com/williamkapke/bson-objectid/issues/30; https://www.npmjs.com/package/bson-objectid; https://github.com/williamkapke/bson-objectid/issues/30
CVE: CVE-2019-0395
Published: 2019-12-11
Description: SAP BusinessObjects Business Intelligence Platform (Fiori BI Launchpad), before version 4.2, allows execution of JavaScript in a text module in Fiori BI Launchpad, leading to Stored Cross Site Scripting vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/2830578; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397; https://launchpad.support.sap.com/#/notes/2830578
CVE: CVE-2019-0398
Published: 2019-12-11
Description: Due to insufficient CSRF protection, SAP BusinessObjects Business Intelligence Platform (Monitoring Application), before versions 4.1, 4.2 and 4.3, may lead to an authenticated user to send unintended request to the web server, leading to Cross Site Request Forgery.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://launchpad.support.sap.com/#/notes/2701027; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397; https://launchpad.support.sap.com/#/notes/2701027
CVE: CVE-2019-0399
Published: 2019-12-11
Description: SAP Portfolio and Project Management, before versions S4CORE 102, 103, EPPM 100 and CPRXRPM 500_702, 600_740, 610_740; unintentionally allows a user to discover accounting information of the Projects in Project dashboard, leading to Information Disclosure.
CVSS Score: 6.5 (MEDIUM)
References: https://launchpad.support.sap.com/#/notes/2803554; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397; https://launchpad.support.sap.com/#/notes/2803554
CVE: CVE-2019-0402
Published: 2019-12-11
Description: SAP Adaptive Server Enterprise, before versions 15.7 and 16.0, under certain conditions exposes some sensitive information to the admin, leading to Information Disclosure.
CVSS Score: 4.4 (MEDIUM)
References: https://launchpad.support.sap.com/#/notes/2845780; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397; https://launchpad.support.sap.com/#/notes/2845780
CVE: CVE-2019-0403
Published: 2019-12-11
Description: SAP Enable Now, before version 1911, allows an attacker to input commands into the CSV files, which will be executed when opened, leading to CSV Command Injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1236
References: https://launchpad.support.sap.com/#/notes/2845183; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397; https://launchpad.support.sap.com/#/notes/2845183
CVE: CVE-2019-0404
Published: 2019-12-11
Description: SAP Enable Now, before version 1911, leaks information about network configuration in the server error messages, leading to Information Disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-209
References: https://launchpad.support.sap.com/#/notes/2845183; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397; https://launchpad.support.sap.com/#/notes/2845183
CVE: CVE-2019-0405
Published: 2019-12-11
Description: SAP Enable Now, before version 1911, leaks information about the existence of a particular user which can be used to construct a list of users, leading to a user enumeration vulnerability and Information Disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://launchpad.support.sap.com/#/notes/2845183; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397; https://launchpad.support.sap.com/#/notes/2845183
CVE: CVE-2019-17087
Published: 2019-12-11
Description: Unauthorized file download vulnerability in all supported versions of Micro Focus AcuToWeb. The vulnerability could be exploited to enumerate and download files from the filesystem of the system running AcuToWeb, with the privileges of the account AcuToWeb is running under.
CVSS Score: 7.5 (HIGH)
References: https://softwaresupport.softwaregrp.com/doc/KM03569662; https://softwaresupport.softwaregrp.com/doc/KM03569662
CVE: CVE-2019-18232
Published: 2019-12-11
Description: SafeNet Sentinel LDK License Manager, all versions prior to 7.101(only Microsoft Windows versions are affected) is vulnerable when configured as a service. This vulnerability may allow an attacker with local access to create, write, and/or delete files in system folder using symbolic links, leading to a privilege escalation. This vulnerability could also be used by an attacker to execute a malicious DLL, which could impact the integrity and availability of the system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59, CWE-59
References: https://www.us-cert.gov/ics/advisories/icsa-19-339-01; https://www.us-cert.gov/ics/advisories/icsa-19-339-01
CVE: CVE-2019-18245
Published: 2019-12-11
Description: Reliable Controls LicenseManager versions 3.4 and prior may allow an authenticated user to insert malicious code into the system root path, which may allow execution of code with elevated privileges of the application.
CVSS Score: 7.8 (HIGH)
CWE: CWE-428, CWE-428
References: https://www.us-cert.gov/ics/advisories/icsa-19-337-01; https://www.us-cert.gov/ics/advisories/icsa-19-337-01
CVE: CVE-2019-3983
Published: 2019-12-11
Description: Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary code and commands on the device due to insufficient UART protections.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-798
References: https://www.tenable.com/security/research/tra-2019-51; https://www.tenable.com/security/research/tra-2019-51
CVE: CVE-2019-3985
Published: 2019-12-11
Description: Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the ssid parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.tenable.com/security/research/tra-2019-51; https://www.tenable.com/security/research/tra-2019-51
CVE: CVE-2019-3986
Published: 2019-12-11
Description: Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the encryption parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.tenable.com/security/research/tra-2019-51; https://www.tenable.com/security/research/tra-2019-51
CVE: CVE-2019-3987
Published: 2019-12-11
Description: Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the key parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.tenable.com/security/research/tra-2019-51; https://www.tenable.com/security/research/tra-2019-51
CVE: CVE-2019-3988
Published: 2019-12-11
Description: Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the bssid parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.tenable.com/security/research/tra-2019-51; https://www.tenable.com/security/research/tra-2019-51
CVE: CVE-2019-3989
Published: 2019-12-11
Description: Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when retrieving internal network configuration data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.tenable.com/security/research/tra-2019-51; https://www.tenable.com/security/research/tra-2019-51
CVE: CVE-2019-10694
Published: 2019-12-12
Description: The express install, which is the suggested way to install Puppet Enterprise, gives the user a URL at the end of the install to set the admin password. If they do not use that URL, there is an overlooked default password for the admin user. This was resolved in Puppet Enterprise 2019.0.3 and 2018.1.9.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://puppet.com/security/cve/CVE-2019-10694; https://puppet.com/security/cve/CVE-2019-10694
CVE: CVE-2019-10695
Published: 2019-12-12
Description: When using the cd4pe::root_configuration task to configure a Continuous Delivery for PE installation, the root user’s username and password were exposed in the job’s Job Details pane in the PE console. These issues have been resolved in version 1.2.1 of the puppetlabs/cd4pe module.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-532
References: https://puppet.com/security/cve/CVE-2019-10695; https://puppet.com/security/cve/CVE-2019-10695
CVE: CVE-2019-5085
Published: 2019-12-12
Description: An exploitable code execution vulnerability exists in the DICOM packet-parsing functionality of LEADTOOLS libltdic.so, version 20.0.2019.3.15. A specially crafted packet can cause an integer overflow, resulting in heap corruption. An attacker can send a packet to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190, CWE-190, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0877; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0877
CVE: CVE-2019-5090
Published: 2019-12-12
Description: An exploitable information disclosure vulnerability exists in the DICOM packet-parsing functionality of LEADTOOLS libltdic.so, version 20.0.2019.3.15. A specially crafted packet can cause an out-of-bounds read, resulting in information disclosure. An attacker can send a packet to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0882; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0882
CVE: CVE-2019-5091
Published: 2019-12-12
Description: An exploitable denial-of-service vulnerability exists in the Dicom-packet parsing functionality of LEADTOOLS libltdic.so version 20.0.2019.3.15. A specially crafted packet can cause an infinite loop, resulting in a denial of service. An attacker can send a packet to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835, CWE-835
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0883; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0883
CVE: CVE-2019-5092
Published: 2019-12-12
Description: An exploitable heap out of bounds write vulnerability exists in the UI tag parsing functionality of the DICOM image format of LEADTOOLS 20.0.2019.3.15. A specially crafted DICOM image can cause an offset beyond the bounds of a heap allocation to be written, potentially resulting in code execution. An attacker can specially craft a DICOM image to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0884; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0884
CVE: CVE-2019-5093
Published: 2019-12-12
Description: An exploitable code execution vulnerability exists in the DICOM network response functionality of LEADTOOLS libltdic.so version 20.0.2019.3.15. A specially crafted packet can cause an integer overflow, resulting in heap corruption. An attacker can send a packet to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190, CWE-190, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0885; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0885
CVE: CVE-2019-5154
Published: 2019-12-12
Description: An exploitable heap overflow vulnerability exists in the JPEG2000 parsing functionality of LEADTOOLS 20.0.2019.3.15. A specially crafted J2K image file can cause an out of bounds write of a null byte in a heap buffer, potentially resulting in code execution. An attack can specially craft a J2K image to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0945; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0945
CVE: CVE-2019-7004
Published: 2019-12-12
Description: A Cross-Site Scripting (XSS) vulnerability in the WebUI component of IP Office Application Server could allow unauthorized code execution and potentially disclose sensitive information. All product versions 11.x are affected. Product versions prior to 11.0, including unsupported versions, were not evaluated.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://packetstormsecurity.com/files/156476/Avaya-IP-Office-Application-Server-11.0.0.0-Cross-Site-Scripting.html; https://support.avaya.com/css/P8/documents/101062833; http://packetstormsecurity.com/files/156476/Avaya-IP-Office-Application-Server-11.0.0.0-Cross-Site-Scripting.html
CVE: CVE-2019-19726
Published: 2019-12-12
Description: OpenBSD through 6.6 allows local users to escalate to root because a check for LD_LIBRARY_PATH in setuid programs can be defeated by setting a very small RLIMIT_DATA resource limit. When executing chpass or passwd (which are setuid root), _dl_setup_env in ld.so tries to strip LD_LIBRARY_PATH from the environment, but fails when it cannot allocate memory. Thus, the attacker is able to execute their own library code as root.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: http://packetstormsecurity.com/files/155658/Qualys-Security-Advisory-OpenBSD-Dynamic-Loader-Privilege-Escalation.html; http://packetstormsecurity.com/files/155764/OpenBSD-Dynamic-Loader-chpass-Privilege-Escalation.html; http://packetstormsecurity.com/files/174986/glibc-ld.so-Local-Privilege-Escalation.html
CVE: CVE-2017-18640
Published: 2019-12-12
Description: The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564.
CVSS Score: 7.5 (HIGH)
CWE: CWE-776
References: https://bitbucket.org/asomov/snakeyaml/issues/377/allow-configuration-for-preventing-billion; https://bitbucket.org/asomov/snakeyaml/wiki/Billion%20laughs%20attack; https://bitbucket.org/snakeyaml/snakeyaml/issues/377
CVE: CVE-2019-19740
Published: 2019-12-12
Description: Octeth Oempro 4.7 and 4.8 allow SQL injection. The parameter CampaignID in Campaign.Get is vulnerable.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/156113/Octeth-Oempro-4.8-SQL-Injection.html; https://github.com/BrunoBulle/Oempro_4.7/blob/master/README.md; https://www2.octeth.com/blog/
CVE: CVE-2019-19746
Published: 2019-12-12
Description: make_arrow in arrow.c in Xfig fig2dev 3.2.7b allows a segmentation fault and out-of-bounds write because of an integer overflow via a large arrow type.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190, CWE-787
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7XOY5NXUZ6JRBBPYA3CXWGRGQTSDVVG2/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ILJM2G6NM5MMBKTT5CH23TAI6DJGNW36/; https://sourceforge.net/p/mcj/tickets/57/
CVE: CVE-2019-19748
Published: 2019-12-12
Description: The Work Time Calendar app before 4.7.1 for Jira allows XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://marketplace.atlassian.com/apps/1213545/work-time-calendar-for-jira/version-history; https://marketplace.atlassian.com/apps/1213545/work-time-calendar-for-jira/version-history
CVE: CVE-2019-10484
Published: 2019-12-12
Description: Use after free issue occurs when command destructors access dynamically allocated response buffer which is already deallocated during previous command teardwon sequence in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8098, MSM8909W, Nicobar, QCS405, QCS605, SDA845, SDM660, SDM670, SDM710, SDM845, SDX24, SM6150, SM7150, SM8150, SM8250, SXR2130
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://www.qualcomm.com/company/product-security/bulletins/november-2019-bulletin; https://www.qualcomm.com/company/product-security/bulletins/november-2019-bulletin
CVE: CVE-2019-10485
Published: 2019-12-12
Description: Infinite loop while decoding compressed data can lead to overrun condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8976, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, Snapdragon_High_Med_2016, SXR1130, SXR2130
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://www.qualcomm.com/company/product-security/bulletins/november-2019-bulletin; https://www.qualcomm.com/company/product-security/bulletins/november-2019-bulletin
CVE: CVE-2019-10493
Published: 2019-12-12
Description: Position determination accuracy may be degraded due to wrongly decoded information in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8053, MDM9206, MDM9207C, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8976, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, Snapdragon_High_Med_2016, SXR1130, SXR2130
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://www.qualcomm.com/company/product-security/bulletins/november-2019-bulletin; https://www.qualcomm.com/company/product-security/bulletins/november-2019-bulletin
CVE: CVE-2019-10494
Published: 2019-12-12
Description: Race condition between the camera functions due to lack of resource lock which will lead to memory corruption and UAF issue in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCN7605, QCS405, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SM6150, SM7150, SM8150
CVSS Score: 8.1 (HIGH)
CWE: CWE-367, CWE-416, CWE-667, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/november-2019-bulletin; https://www.qualcomm.com/company/product-security/bulletins/november-2019-bulletin