deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-10851
Published: 2019-05-23
Description: Computrols CBAS 18.0.0 has hard-coded encryption keys.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-798
References: https://applied-risk.com/index.php/download_file/view/196/165; https://applied-risk.com/labs/advisories; https://applied-risk.com/index.php/download_file/view/196/165
CVE: CVE-2019-10852
Published: 2019-05-23
Description: Computrols CBAS 18.0.0 allows Authenticated Blind SQL Injection via the id GET parameter, as demonstrated by the index.php?m=servers&a=start_pulling&id= substring.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/155251/Computrols-CBAS-Web-19.0.0-Blind-SQL-Injection.html; https://applied-risk.com/index.php/download_file/view/196/165; https://applied-risk.com/labs/advisories
CVE: CVE-2019-10853
Published: 2019-05-23
Description: Computrols CBAS 18.0.0 allows Authentication Bypass.
CVSS Score: 8.1 (HIGH)
References: https://applied-risk.com/index.php/download_file/view/196/165; https://applied-risk.com/labs/advisories; https://applied-risk.com/index.php/download_file/view/196/165
CVE: CVE-2019-10854
Published: 2019-05-23
Description: Computrols CBAS 18.0.0 allows Authenticated Command Injection.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://applied-risk.com/index.php/download_file/view/196/165; https://applied-risk.com/labs/advisories; https://applied-risk.com/index.php/download_file/view/196/165
CVE: CVE-2019-10855
Published: 2019-05-23
Description: Computrols CBAS 18.0.0 mishandles password hashes. The approach is MD5 with a pw prefix, e.g., if the password is admin, it will calculate the MD5 hash of pwadmin and store it in a MySQL database.
CVSS Score: 7.5 (HIGH)
CWE: CWE-326
References: https://applied-risk.com/index.php/download_file/view/196/165; https://applied-risk.com/labs/advisories; https://applied-risk.com/index.php/download_file/view/196/165
CVE: CVE-2019-10866
Published: 2019-05-23
Description: In the Form Maker plugin before 1.13.3 for WordPress, it's possible to achieve SQL injection in the function get_labels_parameters in the file form-maker/admin/models/Submissions_fm.php with a crafted value of the /models/Submissioc parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://seclists.org/fulldisclosure/2019/May/8; https://wordpress.org/plugins/form-maker/#developers; https://wpvulndb.com/vulnerabilities/9286
CVE: CVE-2018-19614
Published: 2019-05-23
Description: XSS exists in the /cmdexec/cmdexe?cmd= function in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/TheWickerMan/CVE-Disclosures/blob/master/CVE-2018-19614.md; https://www.westermo.us/; https://github.com/TheWickerMan/CVE-Disclosures/blob/master/CVE-2018-19614.md
CVE: CVE-2019-10846
Published: 2019-05-23
Description: Computrols CBAS 18.0.0 allows Unauthenticated Reflected Cross-Site Scripting vulnerabilities in the login page and password reset page via the username GET parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/155257/Computrols-CBAS-Web-19.0.0-Cross-Site-Scripting.html; https://applied-risk.com/index.php/download_file/view/196/165; https://applied-risk.com/labs/advisories
CVE: CVE-2019-10849
Published: 2019-05-23
Description: Computrols CBAS 18.0.0 allows unprotected Subversion (SVN) directory / source code disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: http://packetstormsecurity.com/files/155248/Computrols-CBAS-Web-19.0.0-Information-Disclosure.html; https://applied-risk.com/index.php/download_file/view/196/165; https://applied-risk.com/labs/advisories
CVE: CVE-2019-10850
Published: 2019-05-23
Description: Computrols CBAS 18.0.0 has Default Credentials.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://applied-risk.com/index.php/download_file/view/196/165; https://applied-risk.com/labs/advisories; https://applied-risk.com/index.php/download_file/view/196/165
CVE: CVE-2019-12309
Published: 2019-05-23
Description: dotCMS before 5.1.0 has a path traversal vulnerability exploitable by an administrator to create files. The vulnerability is caused by the insecure extraction of a ZIP archive.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: https://dotcms.com/security/SI-48; https://github.com/dotCMS/core/compare/605e5db...364c910; https://dotcms.com/security/SI-48
CVE: CVE-2019-5787
Published: 2019-05-23
Description: Use-after-garbage-collection in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html; https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html; https://crbug.com/913964
CVE: CVE-2019-5788
Published: 2019-05-23
Description: An integer overflow that leads to a use-after-free in Blink Storage in Google Chrome on Linux prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190, CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html; https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html; https://crbug.com/925864
CVE: CVE-2019-5789
Published: 2019-05-23
Description: An integer overflow that leads to a use-after-free in WebMIDI in Google Chrome on Windows prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190, CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html; https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html; https://crbug.com/921581
CVE: CVE-2019-5790
Published: 2019-05-23
Description: An integer overflow leading to an incorrect capacity of a buffer in JavaScript in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html; https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html; https://crbug.com/914736
CVE: CVE-2019-5791
Published: 2019-05-23
Description: Inappropriate optimization in V8 in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125, CWE-843
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html; https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html; https://crbug.com/926651
CVE: CVE-2019-5792
Published: 2019-05-23
Description: Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html; https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html; https://crbug.com/914983
CVE: CVE-2019-5793
Published: 2019-05-23
Description: Insufficient policy enforcement in extensions in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to initiate the extensions installation user interface via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html; https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html; https://crbug.com/937487
CVE: CVE-2019-5794
Published: 2019-05-23
Description: Incorrect handling of cancelled requests in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html; https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html; https://crbug.com/935175
CVE: CVE-2019-5795
Published: 2019-05-23
Description: Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html; https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html; https://crbug.com/919643
CVE: CVE-2019-5796
Published: 2019-05-23
Description: Data race in extensions guest view in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 7.5 (HIGH)
CWE: CWE-362, CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html; https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html; https://crbug.com/918861
CVE: CVE-2019-5798
Published: 2019-05-23
Description: Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html
CVE: CVE-2019-5799
Published: 2019-05-23
Description: Incorrect inheritance of a new document's policy in Content Security Policy in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html; https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html; https://crbug.com/905301
CVE: CVE-2019-5800
Published: 2019-05-23
Description: Insufficient policy enforcement in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html; https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html; https://crbug.com/894228
CVE: CVE-2019-5801
Published: 2019-05-23
Description: Incorrect eliding of URLs in Omnibox in Google Chrome on iOS prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html; https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html; https://crbug.com/921390
CVE: CVE-2019-5802
Published: 2019-05-23
Description: Incorrect handling of download origins in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html; https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html; https://crbug.com/632514
CVE: CVE-2019-5803
Published: 2019-05-23
Description: Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html; https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html; https://crbug.com/909865
CVE: CVE-2019-5804
Published: 2019-05-23
Description: Incorrect command line processing in Chrome in Google Chrome prior to 73.0.3683.75 allowed a local attacker to perform domain spoofing via a crafted domain name.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-88
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html; https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html; https://crbug.com/933004
CVE: CVE-2019-12312
Published: 2019-05-24
Description: In Libreswan 3.27 an assertion failure can lead to a pluto IKE daemon restart. An attacker can trigger a NULL pointer dereference by initiating an IKEv2 IKE_SA_INIT exchange, followed by a bogus INFORMATIONAL exchange instead of the normallly expected IKE_AUTH exchange. This affects send_v2N_spi_response_from_state() in programs/pluto/ikev2_send.c that will then trigger a NULL pointer dereference leading to a restart of libreswan.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-617
References: http://www.iwantacve.cn/index.php/archives/218/; https://github.com/libreswan/libreswan/compare/9b1394e...3897683; https://github.com/libreswan/libreswan/issues/246
CVE: CVE-2019-12313
Published: 2019-05-24
Description: XSS exists in Shave before 2.5.3 because output encoding is mishandled during the overwrite of an HTML element.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/dollarshaveclub/shave/commit/da7371b0531ba14eae48ef1bb1456a3de4cfa954#diff-074799b511e4b61923dfd3f2a3bf9b54R67; https://github.com/dollarshaveclub/shave/compare/852b537...da7371b; https://www.npmjs.com/advisories/822
CVE: CVE-2019-12314
Published: 2019-05-24
Description: Deltek Maconomy 2.2.5 is prone to local file inclusion via absolute path traversal in the WS.macx1.W_MCS/ PATH_INFO, as demonstrated by a cgi-bin/Maconomy/MaconomyWS.macx1.W_MCS/etc/passwd URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: http://packetstormsecurity.com/files/153079/Deltek-Maconomy-2.2.5-Local-File-Inclusion.html; https://github.com/JameelNabbo/exploits/blob/master/Maconomy%20Erp%20local%20file%20include.txt; https://github.com/ras313/CVE-2019-12314/security/advisories/GHSA-8762-rf4g-23xm
CVE: CVE-2019-11875
Published: 2019-05-24
Description: In AutomateAppCore.dll in Blue Prism Robotic Process Automation 6.4.0.8445, a vulnerability in access control can be exploited to escalate privileges. The vulnerability allows for abusing the application for fraud or unauthorized access to certain information. The attack requires a valid user account to connect to the Blue Prism server, but the roles associated to this account are not required to have any permissions. First of all, the application files are modified to grant full permissions on the client side. In a test environment (or his own instance of the software) an attacker is able to grant himself full privileges also on the server side. He can then, for instance, create a process with malicious behavior and export it to disk. With the modified client, it is possible to import the exported file as a release and overwrite any existing process in the database. Eventually, the bots execute the malicious process. The server does not check the user's permissions for the aforementioned actions, such that a modification of the client software enables this kind of attack. Possible scenarios may involve changing bank accounts or setting passwords.
CVSS Score: 8.8 (HIGH)
CWE: CWE-669, CWE-862
References: http://packetstormsecurity.com/files/153007/Blue-Prism-Robotic-Process-Automation-RPA-Privilege-Escalation.html; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-002.txt; http://packetstormsecurity.com/files/153007/Blue-Prism-Robotic-Process-Automation-RPA-Privilege-Escalation.html
CVE: CVE-2019-11876
Published: 2019-05-24
Description: In PrestaShop 1.7.5.2, the shop_country parameter in the install/index.php installation script/component is affected by Reflected XSS. Exploitation by a malicious actor requires the user to follow the initial stages of the setup (accepting terms and conditions) before executing the malicious link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.logicallysecure.com/blog/xss-presta-xss-drupal/; https://www.prestashop.com/forums/forum/2-prestashop-news-and-releases/; https://www.logicallysecure.com/blog/xss-presta-xss-drupal/
CVE: CVE-2019-12150
Published: 2019-05-24
Description: Karamasoft UltimateEditor 1 does not ensure that an uploaded file is an image or document (neither file types nor extensions are restricted). The attacker must use the Attach icon to perform an upload. An uploaded file is accessible under the UltimateEditorInclude/UserFiles/ URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/Gr4y21/My-CVE-IDs/blob/master/CVE-2019-12150/Karamasoft%20Arbitrary%20File%20Upload; https://www.karamasoft.com; https://github.com/Gr4y21/My-CVE-IDs/blob/master/CVE-2019-12150/Karamasoft%20Arbitrary%20File%20Upload
CVE: CVE-2019-12155
Published: 2019-05-24
Description: interface_release_resource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00008.html; http://www.openwall.com/lists/oss-security/2019/05/22/1
CVE: CVE-2019-12195
Published: 2019-05-24
Description: TP-Link TL-WR840N v5 00000005 devices allow XSS via the network name. The attacker must log into the router by breaking the password and going to the admin login page by THC-HYDRA to get the network name. With an XSS payload, the network name changed automatically and the internet connection was disconnected. All the users become disconnected from the internet.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/153027/TP-LINK-TL-WR840N-Cross-Site-Scripting.html; https://www.tp-link.com/us/security; http://packetstormsecurity.com/files/153027/TP-LINK-TL-WR840N-Cross-Site-Scripting.html
CVE: CVE-2019-12315
Published: 2019-05-24
Description: Samsung SCX-824 printers allow a reflected Cross-Site-Scripting (XSS) vulnerability that can be triggered by using the "print from file" feature, as demonstrated by the sws/swsAlert.sws?popupid=successMsg msg parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/med0x2e/2715d32602ba688ea3bc239a3d5f8214; https://gist.github.com/med0x2e/2715d32602ba688ea3bc239a3d5f8214
CVE: CVE-2016-10245
Published: 2019-05-24
Description: Insufficient sanitization of the query parameter in templates/html/search_opensearch.php could lead to reflected cross-site scripting or iframe injection.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00000.html; http://www.securityfocus.com/bid/108476; http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_12
CVE: CVE-2016-8898
Published: 2019-05-24
Description: Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/ecommerce/controllers/cartController.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.openwall.com/lists/oss-security/2016/09/30/5; https://github.com/exponentcms/exponent-cms/commit/99636b2118cd9af4eb9920f6b6c228bd824593d2; http://www.openwall.com/lists/oss-security/2016/09/30/5
CVE: CVE-2016-8900
Published: 2019-05-24
Description: Exponent CMS version 2.3.9 suffers from a Object Injection vulnerability in framework/modules/core/controllers/expTagController.php related to change_tags.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74
References: http://www.openwall.com/lists/oss-security/2016/09/30/5; https://github.com/exponentcms/exponent-cms/commit/fdafb5ec97838e4edbd685f587f28d3174ebb3db; http://www.openwall.com/lists/oss-security/2016/09/30/5
CVE: CVE-2018-10815
Published: 2019-05-24
Description: An issue was discovered in Cloudera Manager before 5.13.4, 5.14.x before 5.14.4, and 5.15.x before 5.15.1. A read-only user can access sensitive cluster information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://www.cloudera.com/; https://www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html; https://www.cloudera.com/
CVE: CVE-2018-11271
Published: 2019-05-24
Description: Improper authentication can happen on Remote command handling due to inappropriate handling of events in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SM7150, Snapdragon_High_Med_2016, SXR1130
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://www.qualcomm.com/company/product-security/bulletins#_CVE-2018-11271; https://www.qualcomm.com/company/product-security/bulletins#_CVE-2018-11271
CVE: CVE-2018-11923
Published: 2019-05-24
Description: Improper buffer length check before copying can lead to integer overflow and then a buffer overflow in WMA event handler in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-190
References: https://www.codeaurora.org/security-bulletin/2019/04/01/april-2019-code-aurora-security-bulletin; https://www.codeaurora.org/security-bulletin/2019/04/01/april-2019-code-aurora-security-bulletin
CVE: CVE-2018-11924
Published: 2019-05-24
Description: Improper buffer length validation in WLAN function can lead to a potential integer oveflow issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24, SM7150
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://www.codeaurora.org/security-bulletin/2019/04/01/april-2019-code-aurora-security-bulletin; https://www.codeaurora.org/security-bulletin/2019/04/01/april-2019-code-aurora-security-bulletin
CVE: CVE-2018-11925
Published: 2019-05-24
Description: Data length received from firmware is not validated against the max allowed size which can result in buffer overflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, IPQ8074, MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://www.codeaurora.org/security-bulletin/2019/04/01/april-2019-code-aurora-security-bulletin; https://www.codeaurora.org/security-bulletin/2019/04/01/april-2019-code-aurora-security-bulletin