yahoo-inc/cve-impacts huggingface dataset:
CVE-2014-9766: Integer overflow in the create_bits function in pixman-bits-image.c in Pixman before 0.32.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via large height and stride values.
Key phrases: execute arbitrary code, denial of service (application crash), cause a denial of service (application crash, integer overflow
CVE-2014-9767: Directory traversal vulnerability in the ZipArchive::extractTo function in ext/zip/php_zip.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 and ext/zip/ext_zip.cpp in HHVM before 3.12.1 allows remote attackers to create arbitrary empty directories via a crafted ZIP archive.
Key phrases: create arbitrary empty directories via a crafted ZIP, directory traversal
CVE-2014-9768: IBM Tivoli NetView Access Services (NVAS) allows remote authenticated users to gain privileges by entering the ADM command and modifying a "page ID" field to the EMSPG2 transaction code.  NOTE: the vendor's perspective is that configuration and use of available security controls in the NVAS product mitigates the reported vulnerability
Key phrases: gain privileges, gain privileges by entering the ADM command and, reported
CVE-2014-9769: pcre_jit_compile.c in PCRE 8.35 does not properly use table jumps to optimize nested alternatives, which allows remote attackers to cause a denial of service (stack memory corruption) or possibly have unspecified other impact via a crafted string, as demonstrated by packets encountered by Suricata during use of a regular expression in an Emerging Threats Open ruleset.
Key phrases: denial of service (stack memory corruption), cause a denial of service (stack memory, unspecified other impact, unspecified impact
CVE-2014-9770: tmpfiles.d/systemd.conf in systemd before 214 uses weak permissions for journal files under (1) /run/log/journal/%m and (2) /var/log/journal/%m, which allows local users to obtain sensitive information by reading these files.
Key phrases: obtain sensitive information, obtain sensitive information by reading these files, weak permissions
CVE-2014-9771: Integer overflow in imlib2 before 1.4.7 allows remote attackers to cause a denial of service (memory consumption or application crash) via a crafted image, which triggers an invalid read operation.
Key phrases: denial of service (memory consumption or application crash), cause a denial of service (memory consumption, integer overflow, invalid read operation
CVE-2014-9772: The validator package before 2.0.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via hex-encoded characters.
Key phrases: bypass the cross-site scripting (XSS, cross-site scripting (xss) filter
CVE-2014-9773: modules/chanserv/flags.c in Atheme before 7.2.7 allows remote attackers to modify the Anope FLAGS behavior by registering and dropping the (1) LIST, (2) CLEAR, or (3) MODIFY keyword nicks.
Key phrases: modify the Anope FLAGS behavior by registering and
CVE-2014-9777: The vid_dec_set_meta_buffers function in drivers/video/msm/vidc/common/dec/vdec.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate the number of buffers, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28598501 and Qualcomm internal bug CR563654.
Key phrases: gain privileges, gain privileges via a crafted application, android internal bug, qualcomm internal bug
CVE-2014-9778: The vid_dec_set_h264_mv_buffers function in drivers/video/msm/vidc/common/dec/vdec.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate the number of buffers, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28598515 and Qualcomm internal bug CR563694.
Key phrases: gain privileges, gain privileges via a crafted application, android internal bug, qualcomm internal bug
CVE-2014-9779: arch/arm/mach-msm/qdsp6v2/msm_audio_ion.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allows attackers to obtain sensitive information from kernel memory via a crafted offset, aka Android internal bug 28598347 and Qualcomm internal bug CR548679.
Key phrases: obtain sensitive information, obtain sensitive information from kernel memory via a, android internal bug, qualcomm internal bug
CVE-2014-9780: drivers/video/msm/mdss/mdp3_ctrl.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5, 5X, and 6P devices does not validate start and length values, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28602014 and Qualcomm internal bug CR542222.
Key phrases: gain privileges, gain privileges via a crafted application, android internal bug, qualcomm internal bug
CVE-2014-9781: Buffer overflow in drivers/video/fbcmap.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28410333 and Qualcomm internal bug CR556471.
Key phrases: gain privileges, gain privileges via a crafted application, buffer overflow, android internal bug, qualcomm internal bug
CVE-2014-9782: drivers/media/platform/msm/camera_v2/sensor/actuator/msm_actuator.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate direction and step parameters, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28431531 and Qualcomm internal bug CR511349.
Key phrases: gain privileges, gain privileges via a crafted application, android internal bug, qualcomm internal bug
CVE-2014-9783: drivers/media/platform/msm/camera_v2/sensor/cci/msm_cci.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices does not validate certain values, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28441831 and Qualcomm internal bug CR511382.
Key phrases: gain privileges, gain privileges via a crafted application, android internal bug, qualcomm internal bug
CVE-2014-9784: Multiple buffer overflows in drivers/char/diag/diag_debugfs.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28442449 and Qualcomm internal bug CR585147.
Key phrases: gain privileges, gain privileges via a crafted application, buffer overflows, android internal bug, qualcomm internal bug
CVE-2014-9785: drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices does not validate addresses before copying data, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28469042 and Qualcomm internal bug CR545747.
Key phrases: gain privileges, gain privileges via a crafted application, android internal bug, qualcomm internal bug
CVE-2014-9786: Heap-based buffer overflow in drivers/media/platform/msm/camera_v2/sensor/actuator/msm_actuator.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28557260 and Qualcomm internal bug CR545979.
Key phrases: gain privileges, gain privileges via a crafted application, heap-based buffer overflow, android internal bug, qualcomm internal bug, heap based buffer overflow
CVE-2014-9787: Integer overflow in drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28571496 and Qualcomm internal bug CR545764.
Key phrases: gain privileges, gain privileges via a crafted application, integer overflow, android internal bug, qualcomm internal bug
CVE-2014-9788: Multiple buffer overflows in the voice drivers in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28573112 and Qualcomm internal bug CR548872.
Key phrases: gain privileges, gain privileges via a crafted application, buffer overflows, android internal bug, qualcomm internal bug
CVE-2014-9789: The (1) alloc and (2) free APIs in arch/arm/mach-msm/qdsp6v2/msm_audio_ion.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices do not validate parameters, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28749392 and Qualcomm internal bug CR556425.
Key phrases: gain privileges, gain privileges via a crafted application, android internal bug, qualcomm internal bug
CVE-2014-9790: drivers/mmc/core/debugfs.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate pointers used in read and write operations, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28769136 and Qualcomm internal bug CR545716.
Key phrases: gain privileges, gain privileges via a crafted application, android internal bug, qualcomm internal bug
CVE-2014-9792: arch/arm/mach-msm/ipc_router.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices uses an incorrect integer data type, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28769399 and Qualcomm internal bug CR550606.
Key phrases: gain privileges, gain privileges via a crafted application, android internal bug, qualcomm internal bug
CVE-2014-9793: platform/msm_shared/mmc.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices mishandles the power-on write-protect feature, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28821253 and Qualcomm internal bug CR580567.
Key phrases: gain privileges, gain privileges via a crafted application, android internal bug, qualcomm internal bug
CVE-2014-9795: app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices does not properly check for an integer overflow, which allows attackers to bypass intended access restrictions via crafted start and size values, aka Android internal bug 28820720 and Qualcomm internal bug CR681957, a related issue to CVE-2014-4325.
Key phrases: bypass intended access restrictions, bypass intended access restrictions via crafted start and, integer overflow, android internal bug, qualcomm internal bug
CVE-2014-9796: app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate the page size in the kernel header, which allows attackers to bypass intended access restrictions via a crafted boot image, aka Android internal bug 28820722 and Qualcomm internal bug CR684756.
Key phrases: bypass intended access restrictions, bypass intended access restrictions via a crafted boot, android internal bug, qualcomm internal bug
CVE-2014-9798: platform/msm_shared/dev_tree.c in the Qualcomm bootloader in Android before 2016-07-05 on Nexus 5 devices does not check the relationship between tags addresses and aboot addresses, which allows attackers to cause a denial of service (OS outage) via a crafted application, aka Android internal bug 28821448 and Qualcomm internal bug CR681965.
Key phrases: denial of service (OS outage), cause a denial of service (OS outage, android internal bug, qualcomm internal bug
CVE-2014-9799: The makefile in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices omits the -fno-strict-overflow option to gcc, which might allow attackers to gain privileges via a crafted application that leverages incorrect compiler optimization of an integer-overflow protection mechanism, aka Android internal bug 28821731 and Qualcomm internal bug CR691916.
Key phrases: gain privileges, gain privileges via a crafted application that leverages, android internal bug, qualcomm internal bug, integer overflow
CVE-2014-9800: Integer overflow in lib/heap/heap.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28822150 and Qualcomm internal bug CR692478.
Key phrases: gain privileges, gain privileges via a crafted application, integer overflow, android internal bug, qualcomm internal bug
CVE-2014-9801: Multiple integer overflows in lib/libfdt/fdt_rw.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28822060 and Qualcomm internal bug CR705078.
Key phrases: gain privileges, gain privileges via a crafted application, multiple integer overflows, android internal bug, qualcomm internal bug
CVE-2014-9802: Multiple integer overflows in lib/libfdt/fdt.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28821965 and Qualcomm internal bug CR705108.
Key phrases: gain privileges, gain privileges via a crafted application, multiple integer overflows, android internal bug, qualcomm internal bug
CVE-2014-9803: arch/arm64/include/asm/pgtable.h in the Linux kernel before 3.15-rc5-next-20140519, as used in Android before 2016-07-05 on Nexus 5X and 6P devices, mishandles execute-only pages, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28557020.
Key phrases: gain privileges, gain privileges via a crafted application, android internal bug
CVE-2014-9804: vision.c in ImageMagick allows remote attackers to cause a denial of service (infinite loop) via vectors related to "too many object."
Key phrases: denial of service (infinite loop), cause a denial of service (infinite loop, too many object
CVE-2014-9805: ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted pnm file.
Key phrases: denial of service (segmentation fault and application crash), cause a denial of service (segmentation fault
CVE-2014-9806: ImageMagick allows remote attackers to cause a denial of service (file descriptor consumption) via a crafted file.
Key phrases: denial of service (file descriptor consumption), cause a denial of service (file descriptor
CVE-2014-9807: The pdb coder in ImageMagick allows remote attackers to cause a denial of service (double free) via unspecified vectors.
Key phrases: denial of service (double free), cause a denial of service (double free, unspecified vectors
CVE-2014-9808: ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted dpc image.
Key phrases: denial of service (segmentation fault and application crash), cause a denial of service (segmentation fault
CVE-2014-9809: ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted xwd image.
Key phrases: denial of service (segmentation fault and application crash), cause a denial of service (segmentation fault
CVE-2014-9810: The dpx file handler in ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a malformed dpx file.
Key phrases: denial of service (segmentation fault and application crash), cause a denial of service (segmentation fault, malformed dpx file
CVE-2014-9811: The xwd file handler in ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a malformed xwd file.
Key phrases: denial of service (segmentation fault and application crash), cause a denial of service (segmentation fault, malformed xwd file
CVE-2014-9812: ImageMagick allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted ps file.
Key phrases: denial of service (NULL pointer dereference), cause a denial of service (NULL pointer, null pointer dereference
CVE-2014-9813: ImageMagick allows remote attackers to cause a denial of service (application crash) via a crafted viff file.
Key phrases: denial of service (application crash), cause a denial of service (application crash
CVE-2014-9814: ImageMagick allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted wpg file.
Key phrases: denial of service (NULL pointer dereference), cause a denial of service (NULL pointer, null pointer dereference
CVE-2014-9815: ImageMagick allows remote attackers to cause a denial of service (application crash) via a crafted wpg file.
Key phrases: denial of service (application crash), cause a denial of service (application crash
CVE-2014-9816: ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted viff file.
Key phrases: denial of service (out-of-bounds access), cause a denial of service (out-, out of bounds access
CVE-2014-9817: Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted pdb file.
Key phrases: have unspecified impact via a crafted pdb file, heap-based buffer overflow, heap based buffer overflow
CVE-2014-9818: ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a malformed sun file.
Key phrases: denial of service (out-of-bounds access), cause a denial of service (out-, malformed sun file, out of bounds access
CVE-2014-9819: Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted palm file, a different vulnerability than CVE-2014-9823.
Key phrases: have unspecified impact via a crafted palm file, heap-based buffer overflow, heap based buffer overflow
CVE-2014-9820: Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted pnm file.
Key phrases: have unspecified impact via a crafted pnm file, heap-based buffer overflow, heap based buffer overflow
CVE-2014-9821: Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted xpm file.
Key phrases: have unspecified impact via a crafted xpm file, heap-based buffer overflow, heap based buffer overflow
CVE-2014-9822: Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted quantum file.
Key phrases: have unspecified impact via a crafted quantum file, heap-based buffer overflow, heap based buffer overflow
CVE-2014-9823: Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted palm file, a different vulnerability than CVE-2014-9819.
Key phrases: have unspecified impact via a crafted palm file, heap-based buffer overflow, heap based buffer overflow
CVE-2014-9824: Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file, a different vulnerability than CVE-2014-9825.
Key phrases: have unspecified impact via a crafted psd file, heap-based buffer overflow, heap based buffer overflow
CVE-2014-9825: Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file, a different vulnerability than CVE-2014-9824.
Key phrases: have unspecified impact via a crafted psd file, heap-based buffer overflow, heap based buffer overflow
CVE-2014-9826: ImageMagick allows remote attackers to have unspecified impact via vectors related to error handling in sun files.
Key phrases: have unspecified impact via vectors related to error
CVE-2014-9827: coders/xpm.c in ImageMagick allows remote attackers to have unspecified impact via a crafted xpm file.
Key phrases: have unspecified impact via a crafted xpm file
CVE-2014-9828: coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file.
Key phrases: have unspecified impact via a crafted psd file
CVE-2014-9829: coders/sun.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted sun file.
Key phrases: denial of service (out-of-bounds access), cause a denial of service (out-, out of bounds access
CVE-2014-9830: coders/sun.c in ImageMagick allows remote attackers to have unspecified impact via a corrupted sun file.
Key phrases: have unspecified impact via a corrupted sun file
CVE-2014-9831: coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via a corrupted wpg file.
Key phrases: have unspecified impact via a corrupted wpg file
CVE-2014-9832: Heap overflow in ImageMagick 6.8.9-9 via a crafted pcx file.
Key phrases: heap overflow
CVE-2014-9833: Heap overflow in ImageMagick 6.8.9-9 via a crafted psd file.
Key phrases: heap overflow
CVE-2014-9834: Heap overflow in ImageMagick 6.8.9-9 via a crafted pict file.
Key phrases: heap overflow
CVE-2014-9835: Heap overflow in ImageMagick 6.8.9-9 via a crafted wpf file.
Key phrases: heap overflow
CVE-2014-9836: ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service via a crafted xpm file.
Key phrases: cause a denial of service via a crafted
CVE-2014-9837: coders/pnm.c in ImageMagick 6.9.0-1 Beta and earlier allows remote attackers to cause a denial of service (crash) via a crafted png file.
Key phrases: denial of service (crash), cause a denial of service (crash)
CVE-2014-9838: magick/cache.c in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (crash).
Key phrases: denial of service (crash), cause a denial of service (crash), magick cache
CVE-2014-9839: magick/colormap-private.h in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds access).
Key phrases: denial of service (out-of-bounds access), cause a denial of service (out-, out of bounds access
CVE-2014-9840: ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted palm file.
Key phrases: denial of service (out-of-bounds access), cause a denial of service (out-, out of bounds access
CVE-2014-9841: The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, related to "throwing of exceptions."
Key phrases: have unspecified impact via unknown vectors
CVE-2014-9842: Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.
Key phrases: denial of service (memory consumption), cause a denial of service (memory consumption, memory leak, unspecified
CVE-2014-9843: The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors.
Key phrases: have unspecified impact via unknown vectors
CVE-2014-9844: The ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image file.
Key phrases: denial of service (out-of-bounds read), cause a denial of service (out-, out of bounds read
CVE-2014-9845: The ReadDIBImage function in coders/dib.c in ImageMagick allows remote attackers to cause a denial of service (crash) via a corrupted dib file.
Key phrases: denial of service (crash), cause a denial of service (crash), corrupted dib file
CVE-2014-9846: Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact.
Key phrases: have unspecified impact, buffer overflow
CVE-2014-9847: The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact.
Key phrases: have an unspecified impact
CVE-2014-9848: Memory leak in ImageMagick allows remote attackers to cause a denial of service (memory consumption).
Key phrases: denial of service (memory consumption), cause a denial of service (memory consumption, memory leak
CVE-2014-9849: The png coder in ImageMagick allows remote attackers to cause a denial of service (crash).
Key phrases: denial of service (crash), cause a denial of service (crash)
CVE-2014-9850: Logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource consumption).
Key phrases: denial of service (resource consumption), cause a denial of service (resource consumption, logic error
CVE-2014-9851: ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash).
Key phrases: denial of service (application crash), cause a denial of service (application crash
CVE-2014-9852: distribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows remote attackers to have unspecified impact via unspecified vectors.
Key phrases: have unspecified impact via unspecified vectors
CVE-2014-9853: Memory leak in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (memory consumption) via a crafted rle file.
Key phrases: denial of service (memory consumption), cause a denial of service (memory consumption, memory leak
CVE-2014-9854: coders/tiff.c in ImageMagick allows remote attackers to cause a denial of service (application crash) via vectors related to the "identification of image."
Key phrases: denial of service (application crash), cause a denial of service (application crash, identification of image
CVE-2014-9862: Integer signedness error in bspatch.c in bspatch in bsdiff, as used in Apple OS X before 10.11.6 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a crafted patch file.
Key phrases: execute arbitrary code, denial of service (heap-based buffer overflow), execute arbitrary code or cause a denial of, integer signedness error, heap based buffer overflow
CVE-2014-9863: Integer underflow in the diag driver in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices allows attackers to gain privileges or obtain sensitive information via a crafted application, aka Android internal bug 28768146 and Qualcomm internal bug CR549470.
Key phrases: obtain sensitive information, gain privileges, gain privileges or obtain sensitive information via a, integer underflow, android internal bug, qualcomm internal bug
CVE-2014-9864: drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not validate ioctl calls, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28747998 and Qualcomm internal bug CR561841.
Key phrases: gain privileges, gain privileges via a crafted application, android internal bug, qualcomm internal bug
CVE-2014-9865: drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not properly restrict user-space input, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28748271 and Qualcomm internal bug CR550013.
Key phrases: gain privileges, gain privileges via a crafted application, android internal bug, qualcomm internal bug
CVE-2014-9866: drivers/media/platform/msm/camera_v2/sensor/csid/msm_csid.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not validate a certain parameter, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28747684 and Qualcomm internal bug CR511358.
Key phrases: gain privileges, gain privileges via a crafted application, android internal bug, qualcomm internal bug
CVE-2014-9867: drivers/media/platform/msm/camera_v2/isp/msm_isp_axi_util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not validate the number of streams, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28749629 and Qualcomm internal bug CR514702.
Key phrases: gain privileges, gain privileges via a crafted application, android internal bug, qualcomm internal bug
CVE-2014-9868: drivers/media/platform/msm/camera_v2/sensor/csiphy/msm_csiphy.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices allows attackers to gain privileges via an application that provides a crafted mask value, aka Android internal bug 28749721 and Qualcomm internal bug CR511976.
Key phrases: gain privileges, gain privileges via an application that provides a, android internal bug, qualcomm internal bug
CVE-2014-9869: drivers/media/platform/msm/camera_v2/isp/msm_isp_stats_util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not validate certain index values, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28749728 and Qualcomm internal bug CR514711.
Key phrases: gain privileges, gain privileges via a crafted application, android internal bug, qualcomm internal bug
CVE-2014-9870: The Linux kernel before 3.11 on ARM platforms, as used in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, does not properly consider user-space access to the TPIDRURW register, which allows local users to gain privileges via a crafted application, aka Android internal bug 28749743 and Qualcomm internal bug CR561044.
Key phrases: gain privileges, gain privileges via a crafted application, android internal bug, qualcomm internal bug
CVE-2014-9871: Multiple buffer overflows in drivers/media/platform/msm/camera_v2/isp/msm_isp_util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28749803 and Qualcomm internal bug CR514717.
Key phrases: gain privileges, gain privileges via a crafted application, buffer overflows, android internal bug, qualcomm internal bug
CVE-2014-9872: The diag driver in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not ensure unique identifiers in a DCI client table, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28750155 and Qualcomm internal bug CR590721.
Key phrases: gain privileges, gain privileges via a crafted application, android internal bug, qualcomm internal bug
CVE-2014-9873: Integer underflow in drivers/char/diag/diag_dci.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices allows attackers to gain privileges or obtain sensitive information via a crafted application, aka Android internal bug 28750726 and Qualcomm internal bug CR556860.
Key phrases: obtain sensitive information, gain privileges, gain privileges or obtain sensitive information via a, integer underflow, android internal bug, qualcomm internal bug
CVE-2014-9874: Buffer overflow in the Qualcomm components in Android before 2016-08-05 on Nexus 5, 5X, 6P, and 7 (2013) devices allows attackers to gain privileges via a crafted application, related to arch/arm/mach-msm/qdsp6v2/audio_utils.c and sound/soc/msm/qdsp6v2/q6asm.c, aka Android internal bug 28751152 and Qualcomm internal bug CR563086.
Key phrases: gain privileges, gain privileges via a crafted application, buffer overflow, android internal bug, qualcomm internal bug
CVE-2014-9875: drivers/char/diag/diag_dci.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application that sends short DCI request packets, aka Android internal bug 28767589 and Qualcomm internal bug CR483310.
Key phrases: gain privileges, gain privileges via a crafted application that sends, android internal bug, qualcomm internal bug
CVE-2014-9876: drivers/char/diag/diagfwd.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5, 5X, 6, 6P, and 7 (2013) devices mishandles certain integer values, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28767796 and Qualcomm internal bug CR483408.
Key phrases: gain privileges, gain privileges via a crafted application, android internal bug, qualcomm internal bug
CVE-2014-9877: drivers/media/platform/msm/camera_v2/sensor/actuator/msm_actuator.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices mishandles a user-space pointer, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28768281 and Qualcomm internal bug CR547231.
Key phrases: gain privileges, gain privileges via a crafted application, android internal bug, qualcomm internal bug
CVE-2014-9878: drivers/mmc/card/mmc_block_test.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not reject kernel-space buffer addresses, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28769208 and Qualcomm internal bug CR547479.
Key phrases: gain privileges, gain privileges via a crafted application, android internal bug, qualcomm internal bug
CVE-2014-9879: The mdss mdp3 driver in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not validate user-space data, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28769221 and Qualcomm internal bug CR524490.
Key phrases: gain privileges, gain privileges via a crafted application, android internal bug, qualcomm internal bug
CVE-2014-9880: drivers/video/msm/vidc/common/enc/venc.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices does not validate VEN_IOCTL_GET_SEQUENCE_HDR ioctl calls, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28769352 and Qualcomm internal bug CR556356.
Key phrases: gain privileges, gain privileges via a crafted application, android internal bug, qualcomm internal bug
CVE-2014-9881: drivers/media/radio/radio-iris.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices uses an incorrect integer data type, which allows attackers to gain privileges or cause a denial of service (buffer overflow) via a crafted application, aka Android internal bug 28769368 and Qualcomm internal bug CR539008.
Key phrases: denial of service (buffer overflow), gain privileges, gain privileges or cause a denial of service, qualcomm internal bug
CVE-2014-9882: Buffer overflow in drivers/media/radio/radio-iris.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28769546 and Qualcomm internal bug CR552329.
Key phrases: gain privileges, gain privileges via a crafted application, buffer overflow, android internal bug, qualcomm internal bug
CVE-2014-9883: Integer overflow in drivers/char/diag/diag_dci.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices allows attackers to gain privileges or obtain sensitive information via a crafted application, aka Android internal bug 28769912 and Qualcomm internal bug CR565160.
Key phrases: obtain sensitive information, gain privileges, gain privileges or obtain sensitive information via a, integer overflow, android internal bug, qualcomm internal bug
CVE-2014-9884: drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not validate certain pointers, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28769920 and Qualcomm internal bug CR580740.
Key phrases: gain privileges, gain privileges via a crafted application, android internal bug, qualcomm internal bug
CVE-2014-9885: Format string vulnerability in drivers/thermal/qpnp-adc-tm.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices allows attackers to gain privileges via a crafted application that provides format string specifiers in a name, aka Android internal bug 28769959 and Qualcomm internal bug CR562261.
Key phrases: gain privileges, gain privileges via a crafted application that provides, format string, android internal bug, qualcomm internal bug
CVE-2014-9886: arch/arm/mach-msm/qdsp6v2/ultrasound/usf.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not properly validate input parameters, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28815575 and Qualcomm internal bug CR555030.
Key phrases: gain privileges, gain privileges via a crafted application, android internal bug, qualcomm internal bug
CVE-2014-9887: drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not validate certain length values, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28804057 and Qualcomm internal bug CR636633.
Key phrases: gain privileges, gain privileges via a crafted application, android internal bug, qualcomm internal bug
CVE-2014-9888: arch/arm/mm/dma-mapping.c in the Linux kernel before 3.13 on ARM platforms, as used in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, does not prevent executable DMA mappings, which might allow local users to gain privileges via a crafted application, aka Android internal bug 28803642 and Qualcomm internal bug CR642735.
Key phrases: gain privileges, gain privileges via a crafted application, executable dma mappings, android internal bug, qualcomm internal bug
CVE-2014-9889: drivers/media/platform/msm/camera_v2/pproc/cpp/msm_cpp.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not validate CPP frame messages, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28803645 and Qualcomm internal bug CR674712.
Key phrases: gain privileges, gain privileges via a crafted application, android internal bug, qualcomm internal bug
CVE-2014-9890: Off-by-one error in drivers/media/platform/msm/camera_v2/sensor/cci/msm_cci.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices allows attackers to gain privileges via a crafted application that sends an I2C command, aka Android internal bug 28770207 and Qualcomm internal bug CR529177.
Key phrases: gain privileges, gain privileges via a crafted application that sends, android internal bug, qualcomm internal bug
CVE-2014-9891: drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not validate certain buffer addresses, which allows attackers to gain privileges via a crafted application that makes an ioctl call, aka Android internal bug 28749283 and Qualcomm internal bug CR550061.
Key phrases: gain privileges, gain privileges via a crafted application that makes, android internal bug, qualcomm internal bug
CVE-2014-9892: The snd_compr_tstamp function in sound/core/compress_offload.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, does not properly initialize a timestamp data structure, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28770164 and Qualcomm internal bug CR568717.
Key phrases: obtain sensitive information, obtain sensitive information via a crafted application, android internal bug, qualcomm internal bug
CVE-2014-9893: drivers/video/msm/mdss/mdss_mdp_pp.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not properly determine the size of Gamut LUT data, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28747914 and Qualcomm internal bug CR542223.
Key phrases: obtain sensitive information, obtain sensitive information via a crafted application, android internal bug, qualcomm internal bug
CVE-2014-9894: drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices does not ensure that certain name strings end in a '\\\\0' character, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28749708 and Qualcomm internal bug CR545736.
Key phrases: obtain sensitive information, obtain sensitive information via a crafted application, android internal bug, qualcomm internal bug
CVE-2014-9895: drivers/media/media-device.c in the Linux kernel before 3.11, as used in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, does not properly initialize certain data structures, which allows local users to obtain sensitive information via a crafted application, aka Android internal bug 28750150 and Qualcomm internal bug CR570757, a different vulnerability than CVE-2014-1739.
Key phrases: obtain sensitive information, obtain sensitive information via a crafted application, android internal bug, qualcomm internal bug
CVE-2014-9896: drivers/char/adsprpc.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not properly validate parameters and return values, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28767593 and Qualcomm internal bug CR551795.
Key phrases: obtain sensitive information, obtain sensitive information via a crafted application, android internal bug, qualcomm internal bug
CVE-2014-9897: sound/soc/msm/qdsp6v2/msm-lsm-client.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not validate certain user-space data, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28769856 and Qualcomm internal bug CR563752.
Key phrases: obtain sensitive information, obtain sensitive information via a crafted application, android internal bug, qualcomm internal bug
CVE-2014-9898: arch/arm/mach-msm/qdsp6v2/ultrasound/usf.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not properly validate input parameters, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28814690 and Qualcomm internal bug CR554575.
Key phrases: obtain sensitive information, obtain sensitive information via a crafted application, android internal bug, qualcomm internal bug
CVE-2014-9899: drivers/usb/host/ehci-msm2.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices omits certain minimum calculations before copying data, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28803909 and Qualcomm internal bug CR547910.
Key phrases: obtain sensitive information, obtain sensitive information via a crafted application, android internal bug, qualcomm internal bug
CVE-2014-9900: The ethtool_get_wol function in net/core/ethtool.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, does not initialize a certain data structure, which allows local users to obtain sensitive information via a crafted application, aka Android internal bug 28803952 and Qualcomm internal bug CR570754.
Key phrases: obtain sensitive information, obtain sensitive information via a crafted application, android internal bug, qualcomm internal bug
CVE-2014-9901: The Qualcomm Wi-Fi driver in Android before 2016-08-05 on Nexus 7 (2013) devices makes incorrect snprintf calls, which allows remote attackers to cause a denial of service (device hang or reboot) via crafted frames, aka Android internal bug 28670333 and Qualcomm internal bug CR548711.
Key phrases: denial of service (device hang or reboot), cause a denial of service (device hang, android internal bug, qualcomm internal bug
CVE-2014-9902: Buffer overflow in CORE/SYS/legacy/src/utils/src/dot11f.c in the Qualcomm Wi-Fi driver in Android before 2016-08-05 on Nexus 7 (2013) devices allows remote attackers to execute arbitrary code via a crafted Information Element (IE) in an 802.11 management frame, aka Android internal bug 28668638 and Qualcomm internal bugs CR553937 and CR553941.
Key phrases: execute arbitrary code, execute arbitrary code via a crafted Information Element, buffer overflow, android internal bug, qualcomm internal bugs and
CVE-2014-9903: The sched_read_attr function in kernel/sched/core.c in the Linux kernel 3.14-rc before 3.14-rc4 uses an incorrect size, which allows local users to obtain sensitive information from kernel stack memory via a crafted sched_getattr system call.
Key phrases: obtain sensitive information, obtain sensitive information from kernel stack memory via, incorrect size
CVE-2014-9904: The snd_compress_check_input function in sound/core/compress_offload.c in the ALSA subsystem in the Linux kernel before 3.17 does not properly check for an integer overflow, which allows local users to cause a denial of service (insufficient memory allocation) or possibly have unspecified other impact via a crafted SNDRV_COMPRESS_SET_PARAMS ioctl call.
Key phrases: denial of service (insufficient memory allocation), cause a denial of service (insufficient memory, integer overflow, unspecified other impact, unspecified impact
CVE-2014-9905: Multiple cross-site scripting (XSS) vulnerabilities in the Web Calendar in SOGo before 2.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) title of an appointment or (2) contact fields.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via the, cross-site scripting (xss)
CVE-2014-9906: Use-after-free vulnerability in DBD::mysql before 4.029 allows attackers to cause a denial of service (program crash) or possibly execute arbitrary code via vectors related to a lost server connection.
Key phrases: execute arbitrary code, denial of service (program crash), cause a denial of service (program crash, use-after-free
CVE-2014-9907: coders/dds.c in ImageMagick allows remote attackers to cause a denial of service via a crafted DDS file.
Key phrases: cause a denial of service via a crafted
CVE-2014-9908: A Denial of Service vulnerability exists in Google Android 4.4.4, 5.0.2, and 5.1.1, which allows malicious users to block Bluetooh access (Android Bug ID A-28672558).
Key phrases: block Bluetooh access (Android Bug ID A-28672558, denial of service
CVE-2014-9909: An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31676542. References: B-RB#26684.
Key phrases: execute arbitrary code, elevation of privilege, elevation privilege
CVE-2014-9910: An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31746399. References: B-RB#26710.
Key phrases: execute arbitrary code, elevation of privilege, elevation privilege
CVE-2014-9911: Stack-based buffer overflow in the ures_getByKeyWithFallback function in common/uresbund.cpp in International Components for Unicode (ICU) before 54.1 for C/C++ allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted uloc_getDisplayName call.
Key phrases: cause a denial of service or possibly have, stack-based buffer overflow, unspecified other impact, stack based buffer overflow, unspecified impact
CVE-2014-9912: The get_icu_disp_value_src_php function in ext/intl/locale/locale_methods.c in PHP before 5.3.29, 5.4.x before 5.4.30, and 5.5.x before 5.5.14 does not properly restrict calls to the ICU uresbund.cpp component, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a locale_get_display_name call with a long first argument.
Key phrases: denial of service (buffer overflow), cause a denial of service (buffer overflow, unspecified other impact, unspecified impact
CVE-2014-9913: Buffer overflow in the list_files function in list.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service (crash) via vectors related to the compression method.
Key phrases: denial of service (crash), cause a denial of service (crash), buffer overflow