CVEs

101,990 total · page 1756 of 2,040

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2018-13472	BlockChainsSecurity Ethertokens	Hig	0.49	7.5	0.01	Jul 9, 2018	The mint function of a smart contract implementation for CloutToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13471	BlockChainsSecurity BeyondCashToken	Hig	0.49	7.5	0.01	Jul 9, 2018	The mintToken function of a smart contract implementation for BeyondCashToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13470	EtherTokens BuyerToken	Hig	0.49	7.5	0.01	Jul 9, 2018	The mintToken function of a smart contract implementation for BuyerToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13469	IcoContract IcoContract	Hig	0.49	7.5	0.01	Jul 9, 2018	The mintToken function of a smart contract implementation for IcoContract, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13468	BlockChainsSecurity Ethertokens	Hig	0.49	7.5	0.01	Jul 9, 2018	The mintToken function of a smart contract implementation for Cavecoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13467	BlockChainsSecurity Ethertokens	Hig	0.49	7.5	0.01	Jul 9, 2018	The mintToken function of a smart contract implementation for EpiphanyCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13466	EtherTokens Crystals	Hig	0.49	7.5	0.01	Jul 9, 2018	The mintToken function of a smart contract implementation for Crystals, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13465	BlockChainsSecurity Ethertokens	Hig	0.49	7.5	0.01	Jul 9, 2018	The mintToken function of a smart contract implementation for PaulyCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13464	T-Swap-Token T-Swap-Token	Hig	0.49	7.5	0.01	Jul 9, 2018	The mintToken function of a smart contract implementation for t_swap, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13463	T-Swap-Token T-Swap-Token	Hig	0.49	7.5	0.01	Jul 9, 2018	The mintToken function of a smart contract implementation for T-Swap-Token (T-S-T), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13462	Ethereum MoonToken	Hig	0.49	7.5	0.01	Jul 9, 2018	The mintToken function of a smart contract implementation for MoonToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13445	Seacms Seacms	Hig	0.57	8.8	0.01	Jul 8, 2018	An issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add a user account via adm1n/admin_manager.php?action=add.
CVE-2018-13444	Seacms Seacms	Hig	0.57	8.8	0.01	Jul 8, 2018	An issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add an admin account via adm1n/admin_manager.php?action=save&id=2.
CVE-2018-13439	—	Hig	0.49	7.5	0.02	Jul 8, 2018	WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL.
CVE-2018-13420	Gperftools Gperftools	Hig	0.49	7.5	0.02	Jul 7, 2018	Google gperftools 2.7 has a memory leak in malloc_extension.cc, related to MallocExtension::Register and InitModule. NOTE: the software maintainer indicates that this is not a bug; it is only a false-positive report from the LeakSanitizer program
CVE-2018-11349	Mojo42 Jirafeau	Hig	0.50	8.8	0.01	Jul 7, 2018	The administration panel of Jirafeau before 3.4.1 is vulnerable to three CSRF attacks on search functionalities: search_by_name, search_by_hash, and search_link.
CVE-2016-6541	TrackR Bravo	Hig	0.57	8.8	0.01	Jul 6, 2018	TrackR Bravo device allows unauthenticated pairing, which enables unauthenticated connected applications to write to various device attributes. Updated apps, version 5.1.6 for iOS and 2.2.5 for Android, have been released by the vendor to address the vulnerabilities in…
CVE-2016-6538	TrackR Bravo	Hig	0.57	8.8	0.01	Jul 6, 2018	The TrackR Bravo mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.db file. Updated apps, version 5.1.6 for iOS and 2.2.5 for Android, have been released by the vendor to address the vulnerabilities in CVE-2016-6538,…
CVE-2018-5907	—	Hig	0.51	7.8	0.00	Jul 6, 2018	Possible buffer overflow in msm_adsp_stream_callback_put due to lack of input validation of user-provided data that leads to integer overflow in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel.
CVE-2018-5886	Code Aurora Forum (CAF) Android for MSM	Hig	0.49	7.5	0.01	Jul 6, 2018	A pointer in an ADSPRPC command is not properly validated in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android), which can lead to kernel memory being accessed.
CVE-2018-5873	Codeaurora Android Msm	Hig	0.00	7.0	0.01	Jul 6, 2018	An issue was discovered in the __ns_get_path function in fs/nsfs.c in the Linux kernel before 4.11. Due to a race condition when accessing files, a Use After Free condition can occur. This also affects all Android releases from CAF using the Linux kernel (Android for MSM,…
CVE-2018-5872	Qualcomm qca-wifi-host-cmn	Hig	0.52	8.0	0.00	Jul 6, 2018	While parsing over-the-air information elements in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, the use of an out-of-range pointer offset can occur.
CVE-2018-5862	Qualcomm qcacld-3.0	Hig	0.51	7.8	0.00	Jul 6, 2018	In __wlan_hdd_cfg80211_vendor_scan() in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, when SCAN_SSIDS and QCA_WLAN_VENDOR_ATTR_SCAN_FREQUENCIES are parsed, a buffer overwrite can…
CVE-2018-5859	—	Hig	0.46	7.0	0.00	Jul 6, 2018	Due to a race condition in the MDSS MDP driver in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, a Use After Free condition can occur.
CVE-2018-5858	—	Hig	0.51	7.8	0.00	Jul 6, 2018	In the audio debugfs in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, out of bounds access can occur.
CVE-2018-5853	Google Android	Hig	0.46	7.0	0.00	Jul 6, 2018	A race condition exists in a driver in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-05-05 potentially leading to a use-after-free condition.
CVE-2018-3587	Codeaurora Android Msm	Hig	0.51	7.8	0.00	Jul 6, 2018	In a firmware memory dump feature in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android), a Use After Free condition can occur.
CVE-2018-3570	Qualcomm cpuidle driver	Hig	0.51	7.8	0.00	Jul 6, 2018	In the cpuidle driver in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel, the list_for_each macro was not used correctly which could lead to an untrusted pointer dereference.
CVE-2018-11304	—	Hig	0.51	7.8	0.00	Jul 6, 2018	Possible buffer overflow in msm_adsp_stream_callback_put due to lack of input validation of user-provided data that leads to integer overflow in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel.
CVE-2017-15851	Linux Kernel	Hig	0.51	7.8	0.00	Jul 6, 2018	Lack of copy_from_user and information leak in function "msm_ois_subdev_do_ioctl, file msm_ois.c can lead to a camera crash in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel
CVE-2018-5899	—	Hig	0.51	7.8	0.00	Jul 6, 2018	In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, whenever TDLS connection is setup, we are freeing the netbuf in ol_tx_completion_handler and after that, we are accessing it in…
CVE-2018-5898	Qualcomm MSM	Hig	0.51	7.8	0.00	Jul 6, 2018	Integer overflow can occur in msm_pcm_adsp_stream_cmd_put() function if the user supplied data "param_length" goes beyond certain limit in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
CVE-2018-5897	—	Hig	0.49	7.5	0.01	Jul 6, 2018	While reading the data from buffer in dci_process_ctrl_status() there can be buffer over-read problem if the len is not checked correctly in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
CVE-2018-5896	Qualcomm Android for MSM	Hig	0.46	7.1	0.00	Jul 6, 2018	In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, kernel panic may happen due to out-of-bound read, caused by not checking source buffer length against length of packet stream to be…
CVE-2018-5893	Qualcomm qcacld-3.0	Hig	0.51	7.8	0.00	Jul 6, 2018	While processing a message from firmware in htt_t2h_msg_handler_fast() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, a buffer overwrite can occur.
CVE-2018-5892	Qualcomm Snapdragon Mobile	Hig	0.49	7.5	0.01	Jul 6, 2018	The Touch Pal application can collect user behavior data without awareness by the user in Snapdragon Mobile and Snapdragon Wear.
CVE-2018-5891	Qualcomm Snapdragon Mobile	Hig	0.55	8.4	0.00	Jul 6, 2018	While processing modem SSR after IMS is registered, the IMS data daemon is restarted but the ipc_dataHandle is no longer available. Consequently, the DPL thread frees the internal memory for dataDHandle but the local variable pointer is not updated which can lead to a Use After…
CVE-2018-5890	—	Hig	0.51	7.8	0.00	Jul 6, 2018	If the fdt_totalsize is reported as 0 for the current device tree, it bypasses an error check for a valid device tree in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
CVE-2018-5889	Qualcomm Android for MSM	Hig	0.51	7.8	0.00	Jul 6, 2018	While processing a compressed kernel image, a buffer overflow can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
CVE-2018-5888	Qualcomm bootloader	Hig	0.51	7.8	0.00	Jul 6, 2018	While processing the system path, an out of bounds access can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
CVE-2018-5887	Qualcomm bootloader	Hig	0.51	7.8	0.00	Jul 6, 2018	While processing the USB StrSerialDescriptor array, an array index out of bounds can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
CVE-2018-5884	Qualcomm Snapdragon Mobile	Hig	0.55	8.4	0.00	Jul 6, 2018	Improper Access Control in Multimedia in Snapdragon Mobile and Snapdragon Wear, Non-standard applications without permission may acquire permission of Qualcomm-specific proprietary intents.
CVE-2018-5876	Qualcomm Snapdragon Mobile	Hig	0.57	8.8	0.01	Jul 6, 2018	While parsing an mp4 file, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.
CVE-2018-5875	Qualcomm Snapdragon Mobile	Hig	0.57	8.8	0.01	Jul 6, 2018	While parsing an mp4 file, an integer overflow leading to a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.
CVE-2018-5874	—	Hig	0.57	8.8	0.01	Jul 6, 2018	While parsing an mp4 file, a stack-based buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.
CVE-2018-5838	—	Hig	0.51	7.8	0.00	Jul 6, 2018	Improper Validation of Array Index In the adreno OpenGL driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds access can occur in SurfaceFlinger.
CVE-2018-5835	—	Hig	0.51	7.8	0.00	Jul 6, 2018	If the seq_len is greater then CSR_MAX_RSC_LEN, a buffer overflow in __wlan_hdd_cfg80211_add_key() may occur when copying keyRSC in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
CVE-2018-5834	Code Aurora Forum (CAF) QCACLD	Hig	0.51	7.8	0.00	Jul 6, 2018	In __wlan_hdd_cfg80211_vendor_scan(), a buffer overwrite can potentially occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
CVE-2018-5832	—	Hig	0.46	7.0	0.00	Jul 6, 2018	Due to a race condition in a camera driver ioctl handler in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, a Use After Free condition can occur.
CVE-2018-5831	Qualcomm KGSL driver	Hig	0.51	7.8	0.00	Jul 6, 2018	In the KGSL driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, a reference counting error can lead to a Use After Free condition.

CVE-2018-13472HigJul 9, 2018
BlockChainsSecurity
Ethertokens
risk 0.49cvss 7.5epss 0.01
The mint function of a smart contract implementation for CloutToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13471HigJul 9, 2018
BlockChainsSecurity
BeyondCashToken
risk 0.49cvss 7.5epss 0.01
The mintToken function of a smart contract implementation for BeyondCashToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13470HigJul 9, 2018
EtherTokens
BuyerToken
risk 0.49cvss 7.5epss 0.01
The mintToken function of a smart contract implementation for BuyerToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13469HigJul 9, 2018
IcoContract
IcoContract
risk 0.49cvss 7.5epss 0.01
The mintToken function of a smart contract implementation for IcoContract, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13468HigJul 9, 2018
BlockChainsSecurity
Ethertokens
risk 0.49cvss 7.5epss 0.01
The mintToken function of a smart contract implementation for Cavecoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13467HigJul 9, 2018
BlockChainsSecurity
Ethertokens
risk 0.49cvss 7.5epss 0.01
The mintToken function of a smart contract implementation for EpiphanyCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13466HigJul 9, 2018
EtherTokens
Crystals
risk 0.49cvss 7.5epss 0.01
The mintToken function of a smart contract implementation for Crystals, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13465HigJul 9, 2018
BlockChainsSecurity
Ethertokens
risk 0.49cvss 7.5epss 0.01
The mintToken function of a smart contract implementation for PaulyCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13464HigJul 9, 2018
T-Swap-Token
T-Swap-Token
risk 0.49cvss 7.5epss 0.01
The mintToken function of a smart contract implementation for t_swap, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13463HigJul 9, 2018
T-Swap-Token
T-Swap-Token
risk 0.49cvss 7.5epss 0.01
The mintToken function of a smart contract implementation for T-Swap-Token (T-S-T), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13462HigJul 9, 2018
Ethereum
MoonToken
risk 0.49cvss 7.5epss 0.01
The mintToken function of a smart contract implementation for MoonToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13445HigJul 8, 2018
Seacms
Seacms
risk 0.57cvss 8.8epss 0.01
An issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add a user account via adm1n/admin_manager.php?action=add.
CVE-2018-13444HigJul 8, 2018
Seacms
Seacms
risk 0.57cvss 8.8epss 0.01
An issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add an admin account via adm1n/admin_manager.php?action=save&id=2.
CVE-2018-13439HigJul 8, 2018
risk 0.49cvss 7.5epss 0.02
WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL.
CVE-2018-13420HigJul 7, 2018
Gperftools
Gperftools
risk 0.49cvss 7.5epss 0.02
Google gperftools 2.7 has a memory leak in malloc_extension.cc, related to MallocExtension::Register and InitModule. NOTE: the software maintainer indicates that this is not a bug; it is only a false-positive report from the LeakSanitizer program
CVE-2018-11349HigJul 7, 2018
Mojo42
Jirafeau
risk 0.50cvss 8.8epss 0.01
The administration panel of Jirafeau before 3.4.1 is vulnerable to three CSRF attacks on search functionalities: search_by_name, search_by_hash, and search_link.
CVE-2016-6541HigJul 6, 2018
TrackR
Bravo
risk 0.57cvss 8.8epss 0.01
TrackR Bravo device allows unauthenticated pairing, which enables unauthenticated connected applications to write to various device attributes. Updated apps, version 5.1.6 for iOS and 2.2.5 for Android, have been released by the vendor to address the vulnerabilities in…
CVE-2016-6538HigJul 6, 2018
TrackR
Bravo
risk 0.57cvss 8.8epss 0.01
The TrackR Bravo mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.db file. Updated apps, version 5.1.6 for iOS and 2.2.5 for Android, have been released by the vendor to address the vulnerabilities in CVE-2016-6538,…
CVE-2018-5907HigJul 6, 2018
risk 0.51cvss 7.8epss 0.00
Possible buffer overflow in msm_adsp_stream_callback_put due to lack of input validation of user-provided data that leads to integer overflow in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel.
CVE-2018-5886HigJul 6, 2018
Code Aurora Forum (CAF)
Android for MSM
risk 0.49cvss 7.5epss 0.01
A pointer in an ADSPRPC command is not properly validated in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android), which can lead to kernel memory being accessed.
CVE-2018-5873HigJul 6, 2018
Codeaurora
Android Msm
risk 0.00cvss 7.0epss 0.01
An issue was discovered in the __ns_get_path function in fs/nsfs.c in the Linux kernel before 4.11. Due to a race condition when accessing files, a Use After Free condition can occur. This also affects all Android releases from CAF using the Linux kernel (Android for MSM,…
CVE-2018-5872HigJul 6, 2018
Qualcomm
qca-wifi-host-cmn
risk 0.52cvss 8.0epss 0.00
While parsing over-the-air information elements in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, the use of an out-of-range pointer offset can occur.
CVE-2018-5862HigJul 6, 2018
Qualcomm
qcacld-3.0
risk 0.51cvss 7.8epss 0.00
In __wlan_hdd_cfg80211_vendor_scan() in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, when SCAN_SSIDS and QCA_WLAN_VENDOR_ATTR_SCAN_FREQUENCIES are parsed, a buffer overwrite can…
CVE-2018-5859HigJul 6, 2018
risk 0.46cvss 7.0epss 0.00
Due to a race condition in the MDSS MDP driver in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, a Use After Free condition can occur.
CVE-2018-5858HigJul 6, 2018
risk 0.51cvss 7.8epss 0.00
In the audio debugfs in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, out of bounds access can occur.
CVE-2018-5853HigJul 6, 2018
Google
Android
risk 0.46cvss 7.0epss 0.00
A race condition exists in a driver in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-05-05 potentially leading to a use-after-free condition.
CVE-2018-3587HigJul 6, 2018
Codeaurora
Android Msm
risk 0.51cvss 7.8epss 0.00
In a firmware memory dump feature in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android), a Use After Free condition can occur.
CVE-2018-3570HigJul 6, 2018
Qualcomm
cpuidle driver
risk 0.51cvss 7.8epss 0.00
In the cpuidle driver in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel, the list_for_each macro was not used correctly which could lead to an untrusted pointer dereference.
CVE-2018-11304HigJul 6, 2018
risk 0.51cvss 7.8epss 0.00
Possible buffer overflow in msm_adsp_stream_callback_put due to lack of input validation of user-provided data that leads to integer overflow in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel.
CVE-2017-15851HigJul 6, 2018
Linux
Kernel
risk 0.51cvss 7.8epss 0.00
Lack of copy_from_user and information leak in function "msm_ois_subdev_do_ioctl, file msm_ois.c can lead to a camera crash in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel
CVE-2018-5899HigJul 6, 2018
risk 0.51cvss 7.8epss 0.00
In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, whenever TDLS connection is setup, we are freeing the netbuf in ol_tx_completion_handler and after that, we are accessing it in…
CVE-2018-5898HigJul 6, 2018
Qualcomm
MSM
risk 0.51cvss 7.8epss 0.00
Integer overflow can occur in msm_pcm_adsp_stream_cmd_put() function if the user supplied data "param_length" goes beyond certain limit in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
CVE-2018-5897HigJul 6, 2018
risk 0.49cvss 7.5epss 0.01
While reading the data from buffer in dci_process_ctrl_status() there can be buffer over-read problem if the len is not checked correctly in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
CVE-2018-5896HigJul 6, 2018
Qualcomm
Android for MSM
risk 0.46cvss 7.1epss 0.00
In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, kernel panic may happen due to out-of-bound read, caused by not checking source buffer length against length of packet stream to be…
CVE-2018-5893HigJul 6, 2018
Qualcomm
qcacld-3.0
risk 0.51cvss 7.8epss 0.00
While processing a message from firmware in htt_t2h_msg_handler_fast() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, a buffer overwrite can occur.
CVE-2018-5892HigJul 6, 2018
Qualcomm
Snapdragon Mobile
risk 0.49cvss 7.5epss 0.01
The Touch Pal application can collect user behavior data without awareness by the user in Snapdragon Mobile and Snapdragon Wear.
CVE-2018-5891HigJul 6, 2018
Qualcomm
Snapdragon Mobile
risk 0.55cvss 8.4epss 0.00
While processing modem SSR after IMS is registered, the IMS data daemon is restarted but the ipc_dataHandle is no longer available. Consequently, the DPL thread frees the internal memory for dataDHandle but the local variable pointer is not updated which can lead to a Use After…
CVE-2018-5890HigJul 6, 2018
risk 0.51cvss 7.8epss 0.00
If the fdt_totalsize is reported as 0 for the current device tree, it bypasses an error check for a valid device tree in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
CVE-2018-5889HigJul 6, 2018
Qualcomm
Android for MSM
risk 0.51cvss 7.8epss 0.00
While processing a compressed kernel image, a buffer overflow can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
CVE-2018-5888HigJul 6, 2018
Qualcomm
bootloader
risk 0.51cvss 7.8epss 0.00
While processing the system path, an out of bounds access can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
CVE-2018-5887HigJul 6, 2018
Qualcomm
bootloader
risk 0.51cvss 7.8epss 0.00
While processing the USB StrSerialDescriptor array, an array index out of bounds can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
CVE-2018-5884HigJul 6, 2018
Qualcomm
Snapdragon Mobile
risk 0.55cvss 8.4epss 0.00
Improper Access Control in Multimedia in Snapdragon Mobile and Snapdragon Wear, Non-standard applications without permission may acquire permission of Qualcomm-specific proprietary intents.
CVE-2018-5876HigJul 6, 2018
Qualcomm
Snapdragon Mobile
risk 0.57cvss 8.8epss 0.01
While parsing an mp4 file, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.
CVE-2018-5875HigJul 6, 2018
Qualcomm
Snapdragon Mobile
risk 0.57cvss 8.8epss 0.01
While parsing an mp4 file, an integer overflow leading to a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.
CVE-2018-5874HigJul 6, 2018
risk 0.57cvss 8.8epss 0.01
While parsing an mp4 file, a stack-based buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.
CVE-2018-5838HigJul 6, 2018
risk 0.51cvss 7.8epss 0.00
Improper Validation of Array Index In the adreno OpenGL driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds access can occur in SurfaceFlinger.
CVE-2018-5835HigJul 6, 2018
risk 0.51cvss 7.8epss 0.00
If the seq_len is greater then CSR_MAX_RSC_LEN, a buffer overflow in __wlan_hdd_cfg80211_add_key() may occur when copying keyRSC in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
CVE-2018-5834HigJul 6, 2018
Code Aurora Forum (CAF)
QCACLD
risk 0.51cvss 7.8epss 0.00
In __wlan_hdd_cfg80211_vendor_scan(), a buffer overwrite can potentially occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
CVE-2018-5832HigJul 6, 2018
risk 0.46cvss 7.0epss 0.00
Due to a race condition in a camera driver ioctl handler in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, a Use After Free condition can occur.
CVE-2018-5831HigJul 6, 2018
Qualcomm
KGSL driver
risk 0.51cvss 7.8epss 0.00
In the KGSL driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, a reference counting error can lead to a Use After Free condition.