CVE-2017-18153

CVE-2017-18153 describes a race condition in a driver that can cause a use-after-free. Connected sources identify Qualcomm WLAN components (notably the Qcacld-2.0 subsystem) as affected, with the underlying issue described as memory reuse after release. The vulnerability is locally exploitable an...

CVE-2017-18153 Use After Free in WLAN

A race condition exists in a driver potentially leading to a use-after-free condition...

CVE-2017-17772 Multiple buffer overread vulnerabilities in WLAN

In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation...

CVE-2017-17772 Multiple buffer overread vulnerabilities in WLAN

In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation...

CVE-2017-15832 Buffer overwrite due to improper input validation in WLAN host

Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW...

CVE-2017-11076 Use of Out-of-range Pointer Offset in Video

On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder...

CVE-2017-11076 Use of Out-of-range Pointer Offset in Video

On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder...

Security Bulletin: Apache uimaj-core.jar security vulnerability CVE-2017-15691

Summary Apache uimaj-core.jar security vulnerability CVE-2017-15691 in FileNet Content Manager FNCM Content Search Services CSS/Enterprise Content Management Text Search ECMTS. CSS/ECMTS is affected and is potentially vulnerable. Vulnerability Details CVEID:CVE-2017-15691 DESCRIPTION: Apache uima...

CVE-2017-9711

Certain unprivileged processes are able to perform IOCTL calls...

CVE-2017-9711

creationtimestamp| type| source ---|---|--- 2024-11-22 09:17:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113525852779467099...

CVE-2017-9711 Permissions, Privileges, and Access Controls in Data

Certain unprivileged processes are able to perform IOCTL calls...

CVE-2017-13315

In writeToParcel and createFromParcel of DcParamObject.java, there is a permission bypass due to a write size mismatch. This could lead to an elevation of privileges where the user can start an activity with system privileges, with no additional execution privileges needed. User interaction is no...

CVE-2017-13315

In writeToParcel and createFromParcel of DcParamObject.java, there is a permission bypass due to a write size mismatch. This could lead to an elevation of privileges where the user can start an activity with system privileges, with no additional execution privileges needed. User interaction is no...

Security Bulletin: Several Security Vulnerabilities were discovered in IBM Security Directory Suite

Summary Several Security Vulnerabilities in the IBM Security Directory Integrator and Eclipse Jetty were addressed in the IBM Security Directory Suite. Vulnerability Details CVEID:CVE-2022-32759 DESCRIPTION: IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0...

CVE-2017-18590

creationtimestamp| type| source ---|---|--- 2024-11-16 21:58:16+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2017/CVE-2017-18590.yaml...

CVE-2017-13314

In setAllowOnlyVpnForUids of NetworkManagementService.java, there is a possible security settings bypass due to a missing permission check. This could lead to local escalation of privilege allowing users to access non-VPN networks, when they are supposed to be restricted to the VPN networks, with...

CVE-2017-13310

In createFromParcel of ViewPager.java, there is a possible read/write serialization issue leading to a permissions bypass. This could lead to local escalation of privilege where an app can start an activity with system privileges with no additional execution privileges needed. User interaction is...

CVE-2017-13314

creationtimestamp| type| source ---|---|--- 2024-11-15 22:04:34+00:00| seen| https://infosec.exchange/users/cve/statuses/113489233335718513 2024-11-16 00:10:04+00:00| seen| https://t.me/cvedetector/11198...

CVE-2017-13313

CVE-2017-13313 affects the Android Media framework (ESQueue.cpp, ElementaryStreamQueue::dequeueAccessUnitMPEG4Video). The issue is an infinite loop caused by an incorrect bounds check, leading to remote denial of service with no additional privileges required. Availability impact is DoS; exploita...

CVE-2017-13311

creationtimestamp| type| source ---|---|--- 2024-11-15 21:47:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113489167507386471 2024-11-16 00:10:02+00:00| seen| https://t.me/cvedetector/11195...