deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-9976
Published: 2018-05-17
Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of Texture objects in U3D files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5425.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://zerodayinitiative.com/advisories/ZDI-18-374; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-9977
Published: 2018-05-17
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of Modifier Chain objects in U3D files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5427.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://zerodayinitiative.com/advisories/ZDI-18-375; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-9978
Published: 2018-05-17
Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the context process. Was ZDI-CAN-5428.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://zerodayinitiative.com/advisories/ZDI-18-376; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-9979
Published: 2018-05-17
Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of Texture Continuation objects in U3D files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5429.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://zerodayinitiative.com/advisories/ZDI-18-377; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-9980
Published: 2018-05-17
Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5430.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://zerodayinitiative.com/advisories/ZDI-18-378; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-9981
Published: 2018-05-17
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. The issue results from the lack of proper initialization of a pointer prior to accessing it. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5431.
CVSS Score: 8.8 (HIGH)
CWE: CWE-824, CWE-824
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://zerodayinitiative.com/advisories/ZDI-18-379; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-9982
Published: 2018-05-17
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of the Texture Width in U3D files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5483.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://zerodayinitiative.com/advisories/ZDI-18-380; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-9983
Published: 2018-05-17
Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated data structure. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the context process. Was ZDI-CAN-5494.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://zerodayinitiative.com/advisories/ZDI-18-381; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-9984
Published: 2018-05-17
Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of Texture Image Channels objects in U3D files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5495.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://zerodayinitiative.com/advisories/ZDI-18-382; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-1111
Published: 2018-05-17
Description: DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol.
CVSS Score: 7.5 (HIGH)
CWE: CWE-77, CWE-78
References: http://www.securityfocus.com/bid/104195; http://www.securitytracker.com/id/1040912; https://access.redhat.com/errata/RHSA-2018:1453
CVE: CVE-2018-10326
Published: 2018-05-17
Description: PrinterOn Enterprise 4.1.3 suffers from multiple authenticated stored XSS vulnerabilities via the (1) department field in the printer configuration, (2) description field in the print server configuration, and (3) username field for authentication to print as guest.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/bzyo/CVE-PoCs/tree/master/CVE-2018-10326; https://github.com/bzyo/CVE-PoCs/tree/master/CVE-2018-10326
CVE: CVE-2018-10327
Published: 2018-05-17
Description: PrinterOn Enterprise 4.1.3 stores the Active Directory bind credentials using base64 encoding, which allows local users to obtain credentials for a domain user by reading the cps_config.xml file.
CVSS Score: 7.0 (HIGH)
CWE: CWE-522
References: https://github.com/bzyo/CVE-PoCs/tree/master/CVE-2018-10327; https://github.com/bzyo/CVE-PoCs/tree/master/CVE-2018-10327
CVE: CVE-2018-10728
Published: 2018-05-17
Description: All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows (a different vulnerability than CVE-2018-10731).
CVSS Score: 8.1 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/104231; https://cert.vde.com/de-de/advisories/vde-2018-006; https://ics-cert.us-cert.gov/advisories/ICSA-18-137-02
CVE: CVE-2018-10729
Published: 2018-05-17
Description: All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 allow reading the configuration file by an unauthenticated user.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/104231; https://cert.vde.com/de-de/advisories/vde-2018-005; https://ics-cert.us-cert.gov/advisories/ICSA-18-137-02
CVE: CVE-2018-10730
Published: 2018-05-17
Description: All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to OS command injection.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-78
References: http://www.securityfocus.com/bid/104231; https://cert.vde.com/de-de/advisories/vde-2018-004; https://ics-cert.us-cert.gov/advisories/ICSA-18-137-02
CVE: CVE-2018-10731
Published: 2018-05-17
Description: All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows when handling very large cookies (a different vulnerability than CVE-2018-10728).
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/104231; https://cert.vde.com/de-de/advisories/vde-2018-007; https://ics-cert.us-cert.gov/advisories/ICSA-18-137-02
CVE: CVE-2018-11099
Published: 2018-05-17
Description: The header::add_INFO_descriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted vcf file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://seclists.org/fulldisclosure/2018/May/43; https://lists.debian.org/debian-lts-announce/2019/05/msg00039.html; https://usn.ubuntu.com/3974-1/
CVE: CVE-2018-11101
Published: 2018-05-17
Description: Open Whisper Signal (aka Signal-Desktop) through 1.10.1 allows XSS via a resource location specified in an attribute of a SCRIPT, IFRAME, or IMG element, leading to JavaScript execution after a reply, a different vulnerability than CVE-2018-10994. The attacker needs to send HTML code directly as a message, and then reply to that message to trigger this vulnerability. The Signal-Desktop software fails to sanitize specific HTML elements that can be used to inject HTML code into remote chat windows when replying to an HTML message. Specifically the IMG and IFRAME elements can be used to include remote or local resources. For example, the use of an IFRAME element enables full code execution, allowing an attacker to download/upload files, information, etc. The SCRIPT element was also found to be injectable. On the Windows operating system, the CSP fails to prevent remote inclusion of resources via the SMB protocol. In this case, remote execution of JavaScript can be achieved by referencing the script on an SMB share within an IFRAME element, for example: <IFRAME src=\\DESKTOP-XXXXX\Temp\test.html> and then replying to it. The included JavaScript code is then executed automatically, without any interaction needed from the user. The vulnerability can be triggered in the Signal-Desktop client by sending a specially crafted message and then replying to it with any text or content in the reply (it doesn't matter).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2018/May/46; http://seclists.org/fulldisclosure/2018/May/46
CVE: CVE-2018-11128
Published: 2018-05-17
Description: The ObjReader::ReadObj() function in ObjReader.cpp in vincent0629 PDFParser allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly execute arbitrary code via a crafted pdf file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://seclists.org/fulldisclosure/2018/May/44; http://seclists.org/fulldisclosure/2018/May/44
CVE: CVE-2018-11129
Published: 2018-05-17
Description: The header::add_INFO_descriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted vcf file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://seclists.org/fulldisclosure/2018/May/43; https://lists.debian.org/debian-lts-announce/2019/05/msg00039.html; https://usn.ubuntu.com/3974-1/
CVE: CVE-2018-11130
Published: 2018-05-17
Description: The header::add_FORMAT_descriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted vcf file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://seclists.org/fulldisclosure/2018/May/43; https://lists.debian.org/debian-lts-announce/2019/05/msg00039.html; https://usn.ubuntu.com/3974-1/
CVE: CVE-2018-7218
Published: 2018-05-17
Description: The AppFirewall functionality in Citrix NetScaler Application Delivery Controller and NetScaler Gateway 10.5 before Build 68.7, 11.0 before Build 71.24, 11.1 before Build 58.13, and 12.0 before Build 57.24 allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securitytracker.com/id/1040921; https://support.citrix.com/article/CTX234869; http://www.securitytracker.com/id/1040921
CVE: CVE-2018-8714
Published: 2018-05-17
Description: Honeywell MatrikonOPC OPC Controller before 5.1.0.0 allows local users to transfer arbitrary files from a host computer and consequently obtain sensitive information via vectors related to MSXML libraries.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/104157; https://ics-cert.us-cert.gov/advisories/ICSA-18-130-01; https://www.opcsupport.com/s/article/SECURITY-NOTIFICATION-OPC-Explorer-SN-2017-04-27-01
CVE: CVE-2018-1276
Published: 2018-05-17
Description: Windows 2012R2 stemcells, versions prior to 1200.17, contain an information exposure vulnerability on vSphere. A remote user with the ability to push apps can execute crafted commands to read the IaaS metadata from the VM, which may contain BOSH credentials.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://www.cloudfoundry.org/blog/cve-2018-1276/; https://www.cloudfoundry.org/blog/cve-2018-1276/
CVE: CVE-2018-1433
Published: 2018-05-17
Description: IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) web handler /DownloadFile does not require authentication to read arbitrary files from the system. IBM X-Force ID: 139473.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=ssg1S1012263; http://www.ibm.com/support/docview.wss?uid=ssg1S1012282; http://www.ibm.com/support/docview.wss?uid=ssg1S1012283
CVE: CVE-2018-1434
Published: 2018-05-17
Description: IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) are vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 139474.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.ibm.com/support/docview.wss?uid=ssg1S1012263; http://www.ibm.com/support/docview.wss?uid=ssg1S1012282; http://www.ibm.com/support/docview.wss?uid=ssg1S1012283
CVE: CVE-2018-1438
Published: 2018-05-17
Description: IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) web handler /DLSnap could allow an unauthenticated attacker to read arbitrary files on the system. IBM X-Force ID: 139566.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=ssg1S1012263; http://www.ibm.com/support/docview.wss?uid=ssg1S1012282; http://www.ibm.com/support/docview.wss?uid=ssg1S1012283
CVE: CVE-2018-1461
Published: 2018-05-17
Description: IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 140362.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ssg1S1012263; http://www.ibm.com/support/docview.wss?uid=ssg1S1012282; http://www.ibm.com/support/docview.wss?uid=ssg1S1012283
CVE: CVE-2018-1462
Published: 2018-05-17
Description: IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) could allow an authenticated user to access system files they should not have access to including deleting files or causing a denial of service. IBM X-Force ID: 140363.
CVSS Score: 7.6 (HIGH)
CWE: CWE-863
References: http://www.ibm.com/support/docview.wss?uid=ssg1S1012263; http://www.ibm.com/support/docview.wss?uid=ssg1S1012282; http://www.ibm.com/support/docview.wss?uid=ssg1S1012283
CVE: CVE-2018-1463
Published: 2018-05-17
Description: IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) could allow an authenticated user to access system files they should not have access to some of which could contain account credentials. IBM X-Force ID: 140368.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863
References: http://www.ibm.com/support/docview.wss?uid=ssg1S1012263; http://www.ibm.com/support/docview.wss?uid=ssg1S1012282; http://www.ibm.com/support/docview.wss?uid=ssg1S1012283
CVE: CVE-2018-1464
Published: 2018-05-17
Description: IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) could allow an authenticated user to obtain sensitive information that they should not have authorization to read. IBM X-Force ID: 140395.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=ssg1S1012263; http://www.ibm.com/support/docview.wss?uid=ssg1S1012282; http://www.ibm.com/support/docview.wss?uid=ssg1S1012283
CVE: CVE-2018-1465
Published: 2018-05-17
Description: IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) could allow an authenticated user to obtain the private key which could make intercepting GUI communications possible. IBM X-Force ID: 140396.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=ssg1S1012263; http://www.ibm.com/support/docview.wss?uid=ssg1S1012282; http://www.ibm.com/support/docview.wss?uid=ssg1S1012283
CVE: CVE-2018-1466
Published: 2018-05-17
Description: IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products (6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 140397.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-326
References: http://www.ibm.com/support/docview.wss?uid=ssg1S1012263; http://www.ibm.com/support/docview.wss?uid=ssg1S1012282; http://www.ibm.com/support/docview.wss?uid=ssg1S1012283
CVE: CVE-2017-15855
Published: 2018-05-17
Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, the camera application triggers "user-memory-access" issue as the Camera CPP module Linux driver directly accesses the application provided buffer, which resides in user space. An unchecked userspace value (ioctl_ptr->len) is used to copy contents to a kernel buffer which can lead to kernel buffer overflow.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-129
References: https://source.android.com/security/bulletin/pixel/2018-04-01; https://www.codeaurora.org/security-bulletin/2018/03/29/march-2018-code-aurora-security-bulletin; https://source.android.com/security/bulletin/pixel/2018-04-01
CVE: CVE-2018-3567
Published: 2018-05-17
Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, a buffer overflow vulnerability exists in WLAN while processing the HTT_T2H_MSG_TYPE_PEER_MAP or HTT_T2H_MSG_TYPE_PEER_UNMAP messages.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://source.android.com/security/bulletin/pixel/2018-04-01; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=f2627fca43bc4403a445c2b84481383ac0249364; https://source.android.com/security/bulletin/pixel/2018-04-01
CVE: CVE-2018-3568
Published: 2018-05-17
Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in __wlan_hdd_cfg80211_vendor_scan(), a buffer overwrite can potentially occur.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://source.android.com/security/bulletin/pixel/2018-04-01; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=70cd30a5c1fdd02af19cf0e34c41842cce89a82d; https://source.android.com/security/bulletin/pixel/2018-04-01