deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-10789
Published: 2020-02-06
Description: All versions of curling.js are vulnerable to Command Injection via the run function. The command argument can be controlled by users without any sanitization.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/hgarcia/curling/blob/e861d625c074679a2931bcf4ce8da0afa8162c53/lib/curl-transport.js#L56; https://snyk.io/vuln/SNYK-JS-CURLING-546484; https://github.com/hgarcia/curling/blob/e861d625c074679a2931bcf4ce8da0afa8162c53/lib/curl-transport.js#L56
CVE: CVE-2019-15711
Published: 2020-02-06
Description: A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to run system commands under root privilege via injecting specially crafted "ExportLogs" type IPC client requests to the fctsched process.
CVSS Score: 7.8 (HIGH)
References: https://danishcyberdefence.dk/blog/forticlient_linux; https://fortiguard.com/psirt/FG-IR-19-238; https://danishcyberdefence.dk/blog/forticlient_linux
CVE: CVE-2019-16152
Published: 2020-02-06
Description: A Denial of service (DoS) vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to cause FortiClient processes running under root privilege crashes via sending specially crafted IPC client requests to the fctsched process due the nanomsg not been correctly validated.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://danishcyberdefence.dk/blog/forticlient_linux; https://fortiguard.com/psirt/FG-IR-19-238; https://danishcyberdefence.dk/blog/forticlient_linux
CVE: CVE-2019-17652
Published: 2020-02-06
Description: A stack buffer overflow vulnerability in FortiClient for Linux 6.2.1 and below may allow a user with low privilege to cause FortiClient processes running under root priviledge crashes via sending specially crafted "StartAvCustomScan" type IPC client requests to the fctsched process due the argv data not been well sanitized.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://danishcyberdefence.dk/blog/forticlient_linux; https://fortiguard.com/psirt/FG-IR-19-238; https://danishcyberdefence.dk/blog/forticlient_linux
CVE: CVE-2020-5854
Published: 2020-02-06
Description: On BIG-IP 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.6.0-11.6.5.1, the tmm crashes under certain circumstances when using the connector profile if a specific sequence of connections are made.
CVSS Score: 5.9 (MEDIUM)
References: https://support.f5.com/csp/article/K50046200; https://support.f5.com/csp/article/K50046200
CVE: CVE-2020-5855
Published: 2020-02-06
Description: When the Windows Logon Integration feature is configured for all versions of BIG-IP Edge Client for Windows, unauthorized users who have physical access to an authorized user's machine can get shell access under unprivileged user.
CVSS Score: 4.3 (MEDIUM)
References: https://support.f5.com/csp/article/K55102004; https://support.f5.com/csp/article/K55102004
CVE: CVE-2020-5856
Published: 2020-02-06
Description: On BIG-IP 15.0.0-15.0.1.1 and 14.1.0-14.1.2.2, while processing specifically crafted traffic using the default 'xnet' driver, Virtual Edition instances hosted in Amazon Web Services (AWS) may experience a TMM restart.
CVSS Score: 7.5 (HIGH)
References: https://support.f5.com/csp/article/K00025388; https://support.f5.com/csp/article/K00025388
CVE: CVE-2019-12426
Published: 2020-02-06
Description: an unauthenticated user could get access to information of some backend screens by invoking setSessionLocale in Apache OFBiz 16.11.01 to 16.11.06
CVSS Score: 5.3 (MEDIUM)
References: https://lists.apache.org/thread.html/r034123f[PII_REDACTED]fd04c922afb22d2389de6e2faf3a083207202bc%40%3Ccommits.ofbiz.apache.org%3E; https://lists.apache.org/thread.html/r40a3c0930f7945e97e30c25422f52dbe476d5584346c3de5c556c272%40%3Cannounce.apache.org%3E; https://lists.apache.org/thread.html/rf8651e75162819a267384f8a31c20884bc3a9a6707afbf75200cd98d%40%3Ccommits.ofbiz.apache.org%3E
CVE: CVE-2019-19800
Published: 2020-02-06
Description: Zoho ManageEngine Applications Manager 14 before 14520 allows a remote unauthenticated attacker to disclose OS file names via FailOverHelperServlet.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306
References: https://gitlab.com/eLeN3Re/CVE-2019-19800/; https://www.manageengine.com; https://www.manageengine.com/products/applications_manager/release-notes.html
CVE: CVE-2020-5720
Published: 2020-02-06
Description: MikroTik WinBox before 3.21 is vulnerable to a path traversal vulnerability that allows creation of arbitrary files wherevere WinBox has write permissions. WinBox is vulnerable to this attack if it connects to a malicious endpoint or if an attacker mounts a man in the middle attack.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://www.tenable.com/security/research/tra-2020-07; https://www.tenable.com/security/research/tra-2020-07
CVE: CVE-2020-6767
Published: 2020-02-06
Description: A path traversal vulnerability in the Bosch Video Management System (BVMS) FileTransferService allows an authenticated remote attacker to read arbitrary files from the Central Server. This affects Bosch BVMS versions 10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.329 and 7.5 and older. This affects Bosch BVMS Viewer versions 10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.329 and 7.5 and older. This affects Bosch DIVAR IP 3000, DIVAR IP 7000 and DIVAR IP all-in-one 5000 if a vulnerable BVMS version is installed.
CVSS Score: 7.7 (HIGH)
CWE: CWE-22, CWE-22
References: https://psirt.bosch.com/security-advisories/BOSCH-SA-381489-BT.html; https://media.boschsecurity.com/fs/media/pb/security_advisories/bosch-sa-381489-bt_cve-2020-6767_securityadvisory_bvms_pathtraversal.pdf; https://psirt.bosch.com/security-advisories/BOSCH-SA-381489-BT.html
CVE: CVE-2020-6855
Published: 2020-02-06
Description: A large or infinite loop vulnerability in the JOC Cockpit component of SOS JobScheduler 1.11 and 1.13.2 allows attackers to parameterize housekeeping jobs in a way that exhausts system resources and results in a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-835
References: https://change.sos-berlin.com/browse/JITL-590; https://change.sos-berlin.com/browse/JITL-590
CVE: CVE-2020-6856
Published: 2020-02-06
Description: An XML External Entity (XEE) vulnerability exists in the JOC Cockpit component of SOS JobScheduler 1.12 and 1.13.2 allows attackers to read files from the server via an entity declaration in any of the XML documents that are used to specify the run-time settings of jobs and orders.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-776
References: https://change.sos-berlin.com/browse/JOC-853; https://change.sos-berlin.com/browse/JOC-853
CVE: CVE-2020-7920
Published: 2020-02-06
Description: pmm-server in Percona Monitoring and Management (PMM) 2.2.x before 2.2.1 allows unauthenticated denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://jira.percona.com/browse/PMM-5232; https://jira.percona.com/browse/PMM-5233; https://www.percona.com/blog/2020/02/03/improvements-in-pmm-bug-fixes-in-percona-server-percona-backup-for-mongodb-alert-release-roundup-2-3-2020/
CVE: CVE-2020-7953
Published: 2020-02-06
Description: An issue was discovered in OpServices OpMon 9.3.2. Without authentication, it is possible to read server files (e.g., /etc/passwd) due to the use of the nmap -iL (aka input file) option.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://medium.com/%40ph0rensic; https://medium.com/%40ph0rensic/three-cves-on-opmon-3ca775a262f5; https://medium.com/%40ph0rensic
CVE: CVE-2020-7954
Published: 2020-02-06
Description: An issue was discovered in OpServices OpMon 9.3.2. Starting from the apache user account, it is possible to perform privilege escalation through the lack of correct configuration in the server's sudoers file, which by default allows the execution of programs (e.g. nmap) without the need for a password with sudo.
CVSS Score: 7.8 (HIGH)
CWE: CWE-306
References: https://medium.com/%40ph0rensic; https://medium.com/%40ph0rensic/three-cves-on-opmon-3ca775a262f5; https://medium.com/%40ph0rensic
CVE: CVE-2020-8608
Published: 2020-02-06
Description: In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-120
References: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00007.html; https://gitlab.freedesktop.org/slirp/libslirp/-/tags/v4.1.0; https://gitlab.freedesktop.org/slirp/libslirp/commit/68ccb8021a838066f0951d4b2817eb6b6f10a843
CVE: CVE-2020-8636
Published: 2020-02-06
Description: An issue was discovered in OpServices OpMon 9.3.2 that allows Remote Code Execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://medium.com/%40ph0rensic/three-cves-on-opmon-3ca775a262f5; https://medium.com/%40ph0rensic/three-cves-on-opmon-3ca775a262f5
CVE: CVE-2020-8771
Published: 2020-02-06
Description: The Time Capsule plugin before 1.21.16 for WordPress has an authentication bypass. Any request containing IWP_JSON_PREFIX causes the client to be logged in as the first account on the list of administrator accounts.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://wpvulndb.com/vulnerabilities/10010; https://www.webarxsecurity.com/vulnerability-infinitewp-client-wp-time-capsule/; https://wpvulndb.com/vulnerabilities/10010
CVE: CVE-2020-8772
Published: 2020-02-06
Description: The InfiniteWP Client plugin before 1.9.4.5 for WordPress has a missing authorization check in iwp_mmb_set_request in init.php. Any attacker who knows the username of an administrator can log in.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://wpvulndb.com/vulnerabilities/10011; https://www.webarxsecurity.com/vulnerability-infinitewp-client-wp-time-capsule/; https://wpvulndb.com/vulnerabilities/10011
CVE: CVE-2012-6297
Published: 2020-02-06
Description: Command Injection vulnerability exists via a CSRF in DD-WRT 24-sp2 from specially crafted configuration values containing shell meta-characters, which could let a remote malicious user cause a Denial of Service.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://lists.openwall.net/bugtraq/2013/07/12/2; https://packetstormsecurity.com/files/cve/CVE-2012-6297; https://seclists.org/fulldisclosure/2013/Oct/241
CVE: CVE-2012-6306
Published: 2020-02-06
Description: A vulnerability exists in HCView (aka Hardcoreview) 1.4 due to a write access violation with a GIF file.
CVSS Score: 9.8 (CRITICAL)
References: http://www.openwall.com/lists/oss-security/2012/12/10/3; https://marc.info/?l=oss-security&m=[PII_REDACTED]8927&w=2; http://www.openwall.com/lists/oss-security/2012/12/10/3
CVE: CVE-2012-6307
Published: 2020-02-06
Description: A vulnerability exists in JPEGsnoop 1.5.2 due to an unspecified issue in JPEG file handling, which could let a malicious user execute arbitrary code
CVSS Score: 8.8 (HIGH)
References: http://www.openwall.com/lists/oss-security/2012/12/10/4; https://www.exploit-db.com/exploits/21739/; http://www.openwall.com/lists/oss-security/2012/12/10/4
CVE: CVE-2012-6309
Published: 2020-02-06
Description: A vulnerability exists in Arctic Torrent 1.4 via unspecified vectors in .torrent file handling, which could let a malicious user cause a Denial of Service.
CVSS Score: 7.5 (HIGH)
References: http://www.openwall.com/lists/oss-security/2012/12/10/5; http://www.openwall.com/lists/oss-security/2012/12/10/5
CVE: CVE-2012-6340
Published: 2020-02-06
Description: An Authentication vulnerability exists in NETGEAR WGR614 v7 and v9 due to a hardcoded credential used for serial programming, a related issue to CVE-2006-1002.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-287
References: https://packetstormsecurity.com/files/118854/Netgear-WGR614-Credential-Information.html; https://vuldb.com/?id.7180; https://www.securityfocus.com/archive/1/525042
CVE: CVE-2020-5317
Published: 2020-02-06
Description: Dell EMC ECS versions prior to 3.4.0.1 contain an XSS vulnerability. A remote authenticated malicious user could exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When victim users access the data store through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable web application.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.dell.com/support/security/en-us/details/540788/DSA-2020-016-Dell-EMC-ECS-Cross-Site-Scripting-XSS-Vulnerability; https://www.dell.com/support/security/en-us/details/540788/DSA-2020-016-Dell-EMC-ECS-Cross-Site-Scripting-XSS-Vulnerability
CVE: CVE-2020-5318
Published: 2020-02-06
Description: Dell EMC Isilon OneFS versions 8.1.2, 8.1.0.4, 8.1.0.3, and 8.0.0.7 contain a vulnerability in some configurations. An attacker may exploit this vulnerability to gain access to restricted files. The non-RAN HTTP and WebDAV file-serving components have a vulnerability wherein when either are enabled, and Basic Authentication is enabled for either or both components, files are accessible without authentication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-285, CWE-863
References: https://www.dell.com/support/security/en-us/details/540708/DSA-2020-018-Dell-EMC-Isilon-OneFS-Security-Update-for-Improper-Authorization-Vulnerability; https://www.dell.com/support/security/en-us/details/540708/DSA-2020-018-Dell-EMC-Isilon-OneFS-Security-Update-for-Improper-Authorization-Vulnerability
CVE: CVE-2020-5319
Published: 2020-02-06
Description: Dell EMC Unity, Dell EMC Unity XT, and Dell EMC UnityVSA versions prior to 5.0.2.0.5.009 contain a Denial of Service vulnerability on NAS Server SSH implementation that is used to provide SFTP service on a NAS server. A remote unauthenticated attacker may potentially exploit this vulnerability and cause a Denial of Service (Storage Processor Panic) by sending an out of order SSH protocol sequence.
CVSS Score: 7.5 (HIGH)
CWE: CWE-129, CWE-129
References: https://www.dell.com/support/security/en-us/details/540336/DSA-2020-019-Dell-EMC-Unity-Family-Dell-EMC-Unity-XT-Family-Denial-of-Service-Vulnerability; https://www.dell.com/support/security/en-us/details/540336/DSA-2020-019-Dell-EMC-Unity-Family-Dell-EMC-Unity-XT-Family-Denial-of-Service-Vulnerability
CVE: CVE-2020-8657
Published: 2020-02-06
Description: An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key (hardcoded as EONAPI_KEY in include/api_functions.php for API version 2.4.2) by default for all installations, hence allowing an attacker to calculate/guess the admin access token.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798, CWE-798
References: http://packetstormsecurity.com/files/156605/EyesOfNetwork-AutoDiscovery-Target-Command-Execution.html; https://github.com/EyesOfNetworkCommunity/eonapi/issues/17; http://packetstormsecurity.com/files/156605/EyesOfNetwork-AutoDiscovery-Target-Command-Execution.html
CVE: CVE-2012-6341
Published: 2020-02-06
Description: An Information Disclosure vulnerability exists in the my config file in NEtGEAR WGR614 v7 and v9, which could let a malicious user recover all previously used passwords on the device, for both the control panel and WEP/WPA/WPA2, in plaintext. This is a different issue than CVE-2012-6340.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://packetstormsecurity.com/files/date/2012-12-14/; https://www.securityfocus.com/archive/1/525042; https://packetstormsecurity.com/files/date/2012-12-14/
CVE: CVE-2013-2683
Published: 2020-02-06
Description: Cisco Linksys E4200 1.0.05 Build 7 devices contain an Information Disclosure Vulnerability which allows remote attackers to obtain private IP addresses and other sensitive information.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://packetstormsecurity.com/files/121551/Cisco-Linksys-E4200-Cross-Site-Scripting-Local-File-Inclusion.html; http://www.securityfocus.com/bid/59713; https://exchange.xforce.ibmcloud.com/vulnerabilities/84067
CVE: CVE-2013-2684
Published: 2020-02-06
Description: Cross-site Scripting (XSS) in Cisco Linksys E4200 1.0.05 Build 7 devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/121551/Cisco-Linksys-E4200-Cross-Site-Scripting-Local-File-Inclusion.html; http://www.securityfocus.com/bid/59716; https://exchange.xforce.ibmcloud.com/vulnerabilities/84070
CVE: CVE-2019-17585
Published: 2020-02-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019
CVE: CVE-2019-17586
Published: 2020-02-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019
CVE: CVE-2019-17587
Published: 2020-02-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019
CVE: CVE-2019-17588
Published: 2020-02-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019
CVE: CVE-2019-17589
Published: 2020-02-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019
CVE: CVE-2019-6478
Published: 2020-02-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019
CVE: CVE-2019-6479
Published: 2020-02-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019
CVE: CVE-2020-6760
Published: 2020-02-06
Description: Schmid ZI 620 V400 VPN 090 routers allow an attacker to execute OS commands as root via shell metacharacters to an entry on the SSH subcommand menu, as demonstrated by ping.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/0xedh/someshit/blob/master/CVE-2020-6760.md; https://github.com/0xedh/someshit/blob/master/CVE-2020-6760.md
CVE: CVE-2013-3564
Published: 2020-02-06
Description: The web interface in VideoLAN VLC media player before 2.0.7 has no access control which allows remote attackers to view directory listings via the 'dir' command or issue other commands without authenticating.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://www3.trustwave.com/spiderlabs/advisories/TWSL2013-007.txt; https://www3.trustwave.com/spiderlabs/advisories/TWSL2013-007.txt
CVE: CVE-2013-3568
Published: 2020-02-06
Description: Cross-site request forgery (CSRF) vulnerability in Cisco Linksys WRT110 allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.exploit-db.com/exploits/28484; http://www.securityfocus.com/bid/61151; https://exchange.xforce.ibmcloud.com/vulnerabilities/85642
CVE: CVE-2013-3638
Published: 2020-02-06
Description: SQL injection vulnerability in Boonex Dolphin before 7.1.3 allows remote authenticated users to execute arbitrary SQL commands via the 'pathes' parameter in 'categories.php'.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/60511; https://exchange.xforce.ibmcloud.com/vulnerabilities/84928; http://www.securityfocus.com/bid/60511
CVE: CVE-2020-8645
Published: 2020-02-07
Description: An issue was discovered in Simplejobscript.com SJS through 1.66. There is an unauthenticated SQL injection via the job applications search function. The vulnerable parameter is job_id. The function is getJobApplicationsByJobId(). The file is _lib/class.JobApplication.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/niteosoft/simplejobscript/issues/9; https://github.com/niteosoft/simplejobscript/issues/9
CVE: CVE-2020-8654
Published: 2020-02-07
Description: An issue was discovered in EyesOfNetwork 5.3. An authenticated web user with sufficient privileges could abuse the AutoDiscovery module to run arbitrary OS commands via the /module/module_frame/index.php autodiscovery.php target field.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/156266/EyesOfNetwork-5.3-Remote-Code-Execution.html; http://packetstormsecurity.com/files/156605/EyesOfNetwork-AutoDiscovery-Target-Command-Execution.html; https://github.com/EyesOfNetworkCommunity/eonweb/issues/50
CVE: CVE-2020-8655
Published: 2020-02-07
Description: An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to run arbitrary commands as root via a crafted NSE script for nmap 7.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269, CWE-269
References: http://packetstormsecurity.com/files/156266/EyesOfNetwork-5.3-Remote-Code-Execution.html; http://packetstormsecurity.com/files/156605/EyesOfNetwork-AutoDiscovery-Target-Command-Execution.html; https://github.com/EyesOfNetworkCommunity/eonconf/issues/8
CVE: CVE-2020-8656
Published: 2020-02-07
Description: An issue was discovered in EyesOfNetwork 5.3. The EyesOfNetwork API 2.4.2 is prone to SQL injection, allowing an unauthenticated attacker to perform various tasks such as authentication bypass via the username field to getApiKey in include/api_functions.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/156266/EyesOfNetwork-5.3-Remote-Code-Execution.html; http://packetstormsecurity.com/files/156605/EyesOfNetwork-AutoDiscovery-Target-Command-Execution.html; https://github.com/EyesOfNetworkCommunity/eonapi/issues/16
CVE: CVE-2019-10567
Published: 2020-02-07
Description: There is a way to deceive the GPU kernel driver into thinking there is room in the GPU ringbuffer and overwriting existing commands could allow unintended GPU opcodes to be executed in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCS405, QCS605, QM215, Rennell, SA6155P, Saipan, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
CVSS Score: 7.8 (HIGH)
References: https://www.qualcomm.com/company/product-security/bulletins/february-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/february-2020-bulletin
CVE: CVE-2019-10590
Published: 2020-02-07
Description: Out of bound access while parsing dts atom, which is non-standard as it does not have valid number of tracks in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCS405, QCS605, QM215, Rennell, SA6155P, Saipan, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-129
References: https://www.qualcomm.com/company/product-security/bulletins/february-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/february-2020-bulletin