rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-15787 
XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Data Execution Prevention Violation starting at xnview+0x0000000000580063."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15788 
XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at CADImage+0x0000000000002d83."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15789 
XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at CADImage+0x00000000000048e7."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15801 
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dll file that is mishandled during an attempt to render the DLL icon, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77310000!LdrpResSearchResourceInsideDirectory+0x000000000000029e."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T19:00:00.000Z
CVE-2017-15802 
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dll file that is mishandled during an attempt to render the DLL icon, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77310000!LdrpResCompareResourceNames+0x0000000000000087."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T19:00:00.000Z
CVE-2017-15803 
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dll file that is mishandled during an attempt to render the DLL icon, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at ntdll_77310000!LdrpResCompareResourceNames+0x0000000000000150."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T19:00:00.000Z
CVE-2017-15804 
The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27 contains a buffer overflow during unescaping of user names with the ~ operator.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15805 
Cisco Small Business SA520 and SA540 devices with firmware 2.1.71 and 2.2.0.7 allow ../ directory traversal in scgi-bin/platform.cgi via the thispage parameter, for reading arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-23T08:00:00.000Z
CVE-2017-15806 
The send function in the ezcMailMtaTransport class in Zeta Components Mail before 1.8.2 does not properly restrict the set of characters used in the ezcMail returnPath property, which might allow remote attackers to execute arbitrary code via a crafted email address, as demonstrated by one containing "-X/path/to/wwwroot/file.php."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-15T16:00:00.000Z
CVE-2017-15808 
In phpMyFaq before 2.9.9, there is CSRF in admin/ajax.config.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-23T17:00:00.000Z
CVE-2017-15809 
In phpMyFaq before 2.9.9, there is XSS in admin/tags.main.php via a crafted tag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-23T17:00:00.000Z
CVE-2017-15810 
The PopCash.Net Code Integration Tool plugin before 1.1 for WordPress has XSS via the tab parameter to wp-admin/admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-23T17:00:00.000Z
CVE-2017-15811 
The Pootle Button plugin before 1.2.0 for WordPress has XSS via the assets_url parameter in assets/dialog.php, exploitable via wp-admin/admin-ajax.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-23T17:00:00.000Z
CVE-2017-15812 
The Easy Appointments plugin before 1.12.0 for WordPress has XSS via a Settings values in the admin panel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-23T17:00:00.000Z
CVE-2017-15813 
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a buffer overflow can occur while reading firmware logs.
Problem types: description: Buffer Copy without Checking Size of Input in WLAN
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2017-12-05T17:00:00.000Z
CVE-2017-15814 
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in msm_flash_subdev_do_ioctl of drivers/media/platform/msm/camera_v2/sensor/flash/msm_flash.c, there is a possible out of bounds read if flash_data.cfg_type is CFG_FLASH_INIT due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-16T22:00:00.000Z
CVE-2017-15815 
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a potential buffer overflow can happen when processing any 802.11 MGMT frames like Auth frame in limProcessAuthFrame.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-15T21:00:00.000Z
CVE-2017-15817 
In all Qualcomm products with Android releases from CAF using the Linux kernel, when an access point sends a challenge text greater than 128 bytes, the host driver is unable to validate this potentially leading to authentication failure.
Problem types: description: Stack-based Buffer Overflow in WLAN
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-02-23T23:00:00.000Z
CVE-2017-15818 
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while loading a user application in qseecom, an integer overflow could potentially occur if the application partition size is rounded up to page_size.
Problem types: description: Integer Overflow to Buffer Overflow in Core
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-09-18T18:00:00.000Z
CVE-2017-15820 
In all Qualcomm products with Android releases from CAF using the Linux kernel, in a KGSL IOCTL handler, a Use After Free Condition can potentially occur.
Problem types: description: Use After Free in Graphics
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-02-23T23:00:00.000Z
CVE-2017-15821 
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the function wma_p2p_noa_event_handler(), there is no bound check on a value coming from firmware which can potentially lead to a buffer overwrite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-15T21:00:00.000Z
CVE-2017-15822 
In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, while processing a 802.11 management frame, a buffer overflow may potentially occur.
Problem types: description: Buffer Copy without Checking Size of Input in WLAN
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-04-03T17:00:00.000Z
CVE-2017-15823 
In spectral_create_samp_msg() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-11, some values from firmware are not properly validated potentially leading to a buffer overflow.
Problem types: description: Improper Input Validation in WLAN
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-03-30T21:00:00.000Z
CVE-2017-15824 
In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, the function UpdateDeviceStatus() writes a local stack buffer without initialization to flash memory using WriteToPartition() which may potentially leak memory.
Problem types: description: Information Exposure Vulnerability in Boot
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-07-06T17:00:00.000Z
CVE-2017-15825 
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing a gpt update, an out of bounds memory access may potentially occur.
Problem types: description: Out of bounds Access When Accessing Partition Entries in Update gpt
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-09-18T18:00:00.000Z
CVE-2017-15826 
Due to a race condition in MDSS rotator in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-20, a double free vulnerability may potentially exist when two threads free the same perf structures.
Problem types: description: Double free in mdss_rotator_release_from_work_distribution()
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-03-30T21:00:00.000Z
CVE-2017-15828 
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while accessing the keystore in LK, an integer overflow vulnerability exists which may potentially lead to a buffer overflow.
Problem types: description: Integer Overflow to Buffer Overflow vulnerability in Bootloader
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-09-18T18:00:00.000Z
CVE-2017-15829 
In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a GPU Driver which can potentially lead to a Use After Free condition.
Problem types: description: Race condition in GPU Driver
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-02-23T23:00:00.000Z
CVE-2017-15830 
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper ch_list array index initialization in function sme_set_plm_request() causes potential buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-16T22:00:00.000Z
CVE-2017-15831 
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the function wma_ndp_end_indication_event_handler(), there is no input validation check on a event_info value coming from firmware, which can cause an integer overflow and then leads to potential heap overwrite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-16T22:00:00.000Z
CVE-2017-15832 Buffer overwrite due to improper input validation in WLAN host
Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2024-11-26T08:55:16.904Z
CVE-2017-15833 
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, untrusted pointer dereference in update_userspace_power() function in power leads to information exposure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-16T22:00:00.000Z
CVE-2017-15834 
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, race condition in diag_dbgfs_read_dcistats(), while accessing diag_dbgfs_dci_data_index, causes potential heap overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-16T22:00:00.000Z
CVE-2017-15835 
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, While processing the RIC Data Descriptor IE in an artificially crafted 802.11 frame with IE length more than 255, an infinite loop may potentially occur resulting in a denial of service.
Problem types: description: Loop with Unreachable Exit Condition in WLAN
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-12-07T14:00:00.000Z
CVE-2017-15836 
In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, if the firmware sends a service ready event to the host with a large number in the num_hw_modes or num_phy, then it could result in an integer overflow which may potentially lead to a buffer overflow.
Problem types: description: Integer Overflow to Buffer Overflow in WLAN
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-04-03T17:00:00.000Z
CVE-2017-15837 
In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, a policy for the packet pattern attribute NL80211_PKTPAT_OFFSET is not defined which can lead to a buffer over-read in nla_get_u32().
Problem types: description: Buffer Over-read in WLAN
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-04-03T17:00:00.000Z
CVE-2017-15841 
When HOST sends a Special command ID packet, Controller triggers a RAM Dump and FW reset in Snapdragon Mobile in version SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, Snapdragon_High_Med_2016.
Problem types: description: CWE285: Improper Authorization
Affected products: vendor: Qualcomm Technologies, Inc.
product: Snapdragon Mobile
Published: 2019-05-06T22:23:45.000Z
CVE-2017-15842 
Buffer might get used after it gets freed due to unlocking the mutex before freeing the buffer in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
Problem types: description: Use After Free in Audio.
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-06-12T20:00:00.000Z
CVE-2017-15843 
Due to a race condition in a bus driver, a double free in msm_bus_floor_vote_context() can potentially occur in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
Problem types: description: Double Free in msm_bus_floor_vote_context()
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-06-12T20:00:00.000Z
CVE-2017-15844 
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing the function for writing device values into flash, uninitialized memory can be written to flash.
Problem types: description: Buffer Over-read in Boot
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-09-18T18:00:00.000Z
CVE-2017-15845 
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, an invalid input of firmware size (negative value) from user space can potentially lead to the memory leak or buffer overflow during the WLAN cal data store operation.
Problem types: description: Integer Underflow in WLAN
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-01-10T22:00:00.000Z
CVE-2017-15846 
In the video_ioctl2() function in the camera driver in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-09-16, an untrusted pointer dereference may potentially occur.
Problem types: description: Untrusted Pointer Dereference in Camera
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-03-30T21:00:00.000Z
CVE-2017-15847 
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the SPCom kernel driver, a race condition exists when creating a channel.
Problem types: description: Time-of-check Time-of-use (TOCTOU) Race Condition in Core
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-01-10T22:00:00.000Z
CVE-2017-15848 
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the fastrpc kernel driver, a buffer overflow vulnerability from userspace may potentially exist.
Problem types: description: Buffer Copy Without Checking Size of Input ("Classic Buffer Overflow") in Multimedia
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-01-10T22:00:00.000Z
CVE-2017-15849 
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a LayerStack can be destroyed in between Validate and Commit by the application resulting in a Use After Free condition.
Problem types: description: Use After Free in Display
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-01-10T19:00:00.000Z
CVE-2017-15850 
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, userspace can read values from audio codec registers.
Problem types: description: Information Exposure in Audio
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-01-10T22:00:00.000Z
CVE-2017-15851 
Lack of copy_from_user and information leak in function "msm_ois_subdev_do_ioctl, file msm_ois.c can lead to a camera crash in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel
Problem types: description: Improper Input Validation in Automotive Multimedia
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-07-06T19:00:00.000Z
CVE-2017-15852 
Information leak of the ISPIF base address in Android for MSM, Firefox OS for MSM, and QRD Android can occur in the camera driver.
Problem types: description: Information Exposure in Camera
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-03-30T21:00:00.000Z
CVE-2017-15853 
In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, while processing PTT commands, ptt_sock_send_msg_to_app() is invoked without validating the packet length. If the packet length is invalid, then a buffer over-read can occur.
Problem types: description: Buffer Over-read in WLAN
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-04-03T17:00:00.000Z
CVE-2017-15854 
The value of fix_param->num_chans is received from firmware and if it is too large, an integer overflow can occur in wma_radio_chan_stats_event_handler() for the derived length len leading to a subsequent buffer overflow in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
Problem types: description: Interger Overflow to Buffer Overflow in WLAN
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-06-12T20:00:00.000Z
CVE-2017-15855 
In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, the camera application triggers "user-memory-access" issue as the Camera CPP module Linux driver directly accesses the application provided buffer, which resides in user space. An unchecked userspace value (ioctl_ptr->len) is used to copy contents to a kernel buffer which can lead to kernel buffer overflow.
Problem types: description: Buffer Copy without Checking Size of Input in Camera
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-05-17T22:00:00.000Z
CVE-2017-15856 
Due to a race condition while processing the power stats debug file to read status, a double free condition can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
Problem types: description: Double Free in WLAN
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-07-06T17:00:00.000Z
CVE-2017-15857 
In the camera driver, an out-of-bounds access can occur due to an error in copying region params from user space in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-12T20:00:00.000Z
CVE-2017-15859 
While processing the QCA_NL80211_VENDOR_SUBCMD_SET_TXPOWER_SCALE_DECR_DB vendor command, in which attribute QCA_WLAN_VENDOR_ATTR_TXPOWER_SCALE_DECR_DB contains fewer than 1 byte, in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-08-11 a buffer overrun occurs.
Problem types: description: Buffer Copy without Checking Size of Input in WLAN
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-03-30T21:00:00.000Z
CVE-2017-15860 
In all Qualcomm products with Android releases from CAF using the Linux kernel, while processing an encrypted authentication management frame, a stack buffer overflow may potentially occur.
Problem types: description: Stack-based Buffer Overflow in WLAN
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-02-23T23:00:00.000Z
CVE-2017-15861 
In all Qualcomm products with Android releases from CAF using the Linux kernel, in the function wma_roam_synch_event_handler, vdev_id is received from firmware and used to access an array without validation.
Problem types: description: Improper Input Validation
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-02-23T23:00:00.000Z
CVE-2017-15862 
In all Qualcomm products with Android releases from CAF using the Linux kernel, in wma_unified_link_radio_stats_event_handler(), the number of radio channels coming from firmware is not properly validated, potentially leading to an integer overflow vulnerability followed by a buffer overflow.
Problem types: description: Integer Overflow to Buffer Overflow in WLAN
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-02-23T23:00:00.000Z