CVE-2022-25168

CVE-2022-25168 affects Apache Hadoop's FileUtil.unTar(File, File) API, which does not escape the input file name before passing it to the shell. This enables command injection. In Hadoop, this vulnerability has been identified in the InMemoryAliasMap.bootstrap transfer path (local user context), ...

CVE-2017-18136

CVE-2017-18136 concerns a Use After Free condition in the Android omx aac component affecting Qualcomm platforms (Snapdragon Automobile, Mobile, Wear; various SD/MDM chips). The issue is triggered in the omx aac component and may potentially allow a remote attacker to exploit it, with the CVSS in...

CVE-2018-18136

This CVE entry is rejected/not used as stated in the description.