deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-9052
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reached while processing a downlink message.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2015-9053
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the processing of certain responses from the USIM.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2015-9054
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer can be dereferenced during GAL decoding.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-476
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2015-9055
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a memory management routine.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2015-9060
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a pointer is not properly validated in a QTEE system call.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2015-9061
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, playReady DRM failed to check a length potentially leading to unauthorized access to secure memory.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2015-9062
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow to buffer overflow vulnerability exists when loading an ELF file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-190
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2015-9063
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a procedure involving a remote UIM client.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/103671; https://source.android.com/security/bulletin/2017-07-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2015-9064
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send IMEI or IMEISV to the network on a network request before NAS security has been activated.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: http://www.securityfocus.com/bid/103671; https://source.android.com/security/bulletin/2017-07-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2015-9065
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a UE can respond to a UEInformationRequest before Access Stratum security is established.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-254
References: http://www.securityfocus.com/bid/103671; https://source.android.com/security/bulletin/2017-07-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2015-9066
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in an Inter-RAT procedure.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/103671; https://source.android.com/security/bulletin/2017-07-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2015-9067
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a potential compiler optimization of memset() is addressed.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2015-9068
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a mink syscall is not properly validated.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2015-9069
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, the Secure File System can become corrupted.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2015-9070
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in a TrustZone syscall.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2015-9071
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in a TrustZone syscall.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2015-9072
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, an untrusted pointer dereference can occur in a TrustZone syscall.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-476
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2015-9073
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, an untrusted pointer dereference can occur in a TrustZone syscall.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-476
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2016-10343
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, sSL handshake failure with ClientHello rejection results in memory leak.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2016-10344
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offset is potentially possible in LTE.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-476
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2016-10346
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in the hypervisor.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2016-10347
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a hypervisor function is not properly validated.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2016-10380
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send unprotected MeasurementReports revealing UE location.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1
References: http://www.securityfocus.com/bid/103671; https://source.android.com/security/bulletin/2017-07-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2016-10381
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send unprotected MeasurementReports revealing UE location.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1
References: http://www.securityfocus.com/bid/103671; https://source.android.com/security/bulletin/2017-07-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2016-10382
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, access control to the I2C bus is not sufficient.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2016-10383
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, there is a TOCTOU race condition in Secure UI.
CVSS Score: 8.1 (HIGH)
CWE: CWE-362
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2016-10384
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a WLAN driver ioctl.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.securityfocus.com/bid/103671; https://source.android.com/security/bulletin/2017-07-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2016-10385
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a use-after-free vulnerability exists in IMS RCS.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/103671; https://source.android.com/security/bulletin/2017-07-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2016-10386
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, an array index out of bounds vulnerability exists in LPP.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-129
References: http://www.securityfocus.com/bid/103671; https://source.android.com/security/bulletin/2017-07-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2016-10387
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a handover scenario.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.securityfocus.com/bid/103671; https://source.android.com/security/bulletin/2017-07-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2016-10388
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a configuration vulnerability exists when loading a 3rd-party QTEE application.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-16
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2016-10389
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, there is no size check for the images being flashed onto the NAND memory in their respective partitions, so there is a possibility of writing beyond the intended partition.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99465; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99465
CVE: CVE-2016-10390
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, when downloading a file, an excessive amount of memory may be consumed.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-399
References: http://www.securityfocus.com/bid/103671; https://source.android.com/security/bulletin/2017-07-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2016-10391
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, the length in an HCI command is not properly checked for validity.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2016-10392
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a driver can potentially leak kernel memory.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/103671; https://source.android.com/security/bulletin/2017-07-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2016-5871
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow to buffer overflow vulnerability exists when loading an image file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-190
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2016-5872
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, arguments to several QTEE syscalls are not properly validated.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.securityfocus.com/bid/99467; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99467
CVE: CVE-2017-12881
Published: 2017-08-18
Description: Cross-site request forgery (CSRF) vulnerability in the Spring Batch Admin before 1.3.0 allows remote attackers to hijack the authentication of unspecified victims and submit arbitrary requests, such as exploiting the file upload vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2017/08/16/5; http://www.securityfocus.com/bid/100410; http://www.openwall.com/lists/oss-security/2017/08/16/5
CVE: CVE-2017-12882
Published: 2017-08-18
Description: Stored Cross-site scripting (XSS) vulnerability in Spring Batch Admin before 1.3.0 allows remote authenticated users to inject arbitrary JavaScript or HTML via the file upload functionality.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2017/08/16/5; http://www.securityfocus.com/bid/100410; http://www.openwall.com/lists/oss-security/2017/08/16/5
CVE: CVE-2017-12946
Published: 2017-08-18
Description: classes\controller\admin\modals.php in the Easy Modal plugin before 2.1.0 for WordPress has SQL injection in a delete action with the id, ids, or modal parameter to wp-admin/admin.php, exploitable by administrators.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: http://www.defensecode.com/advisories/DC-2017-01-007_WordPress_Easy_Modal_Plugin_Advisory.pdf; https://wordpress.org/plugins/easy-modal/#developers; http://www.defensecode.com/advisories/DC-2017-01-007_WordPress_Easy_Modal_Plugin_Advisory.pdf
CVE: CVE-2017-12947
Published: 2017-08-18
Description: classes\controller\admin\modals.php in the Easy Modal plugin before 2.1.0 for WordPress has SQL injection in an untrash action with the id, ids, or modal parameter to wp-admin/admin.php, exploitable by administrators.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: http://www.defensecode.com/advisories/DC-2017-01-007_WordPress_Easy_Modal_Plugin_Advisory.pdf; https://wordpress.org/plugins/easy-modal/#developers; http://www.defensecode.com/advisories/DC-2017-01-007_WordPress_Easy_Modal_Plugin_Advisory.pdf
CVE: CVE-2017-12948
Published: 2017-08-18
Description: Core\Admin\PFTemplater.php in the PressForward plugin 4.3.0 and earlier for WordPress has XSS in the PATH_INFO to wp-admin/admin.php, related to PHP_SELF.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.defensecode.com/advisories/DC-2017-05-007_WordPress_PressForward_Plugin_Advisory.pdf; http://www.defensecode.com/advisories/DC-2017-05-007_WordPress_PressForward_Plugin_Advisory.pdf
CVE: CVE-2017-12949
Published: 2017-08-18
Description: lib\modules\contributors\contributor_list_table.php in the Podlove Podcast Publisher plugin 2.5.3 and earlier for WordPress has SQL injection in the orderby parameter to wp-admin/admin.php, exploitable through CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://www.defensecode.com/advisories/DC-2017-05-006_WordPress_Podlove_Podcast_Publisher_Plugin_Advisory.pdf; http://www.defensecode.com/advisories/DC-2017-05-006_WordPress_Podlove_Podcast_Publisher_Plugin_Advisory.pdf
CVE: CVE-2017-8253
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel memory can potentially be overwritten if an invalid master is sent from userspace.
CVSS Score: 7.8 (HIGH)
CWE: CWE-770
References: http://www.securityfocus.com/bid/99465; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99465
CVE: CVE-2017-8254
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, an audio client pointer is dereferenced before being checked if it is valid.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/99465; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99465
CVE: CVE-2017-8255
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in boot.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/99465; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99465
CVE: CVE-2017-8256
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, array out of bounds access can occur if userspace sends more than 16 multicast addresses.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/99465; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99465
CVE: CVE-2017-8257
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, when accessing the sde_rotator debug interface for register reading with multiple processes, one process can free the debug buffer while another process still has the debug buffer in use.
CVSS Score: 7.8 (HIGH)
CWE: CWE-362
References: http://www.securityfocus.com/bid/99465; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99465
CVE: CVE-2017-8260
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, due to a type downcast, a value may improperly pass validation and cause an out of bounds write later.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-787
References: http://www.securityfocus.com/bid/99465; https://github.com/ScottyBauer/Android_Kernel_CVE_POCs/blob/master/CVE-2017-8260.c; https://source.android.com/security/bulletin/2017-07-01
CVE: CVE-2017-8261
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, in a camera driver ioctl, a kernel overwrite can potentially occur.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/99465; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99465
CVE: CVE-2017-8262
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, in some memory allocation and free functions, a race condition can potentially occur leading to a Use After Free condition.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-416
References: http://www.securityfocus.com/bid/99465; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99465
CVE: CVE-2017-8263
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a kernel fault can occur when doing certain operations on a read-only virtual address in userspace.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/99465; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99465
CVE: CVE-2017-8265
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driver which can lead to a double free.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-415
References: http://www.securityfocus.com/bid/99465; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99465
CVE: CVE-2017-8266
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to a use-after-free condition.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-416
References: http://www.securityfocus.com/bid/99465; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99465
CVE: CVE-2017-8267
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in an IOCTL handler potentially leading to an integer overflow and then an out-of-bounds write.
CVSS Score: 7.0 (HIGH)
CWE: CWE-190, CWE-362
References: http://www.securityfocus.com/bid/99465; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99465
CVE: CVE-2017-8268
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, the camera application can possibly request frame/command buffer processing with invalid values leading to the driver performing a heap buffer over-read.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/99465; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99465
CVE: CVE-2017-8270
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a driver potentially leading to a use-after-free condition.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-416
References: http://www.securityfocus.com/bid/99465; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99465
CVE: CVE-2017-8272
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, in a driver function, a value from userspace is not properly validated potentially leading to an out of bounds heap write.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/99465; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99465