CVE-2017-18135

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile MDM9650, MDM9655, SD 450, SD 625, SD 650/52, SD 835, SD 845, SD 850, in the Wireless Data Service WDS module, a buffer overflow can occur...

Buffer overflow

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 835, SD 845, while processing a SetParam command packet in the VR service, the extracted namelen and valuelen values ar...

CVE-2018-3591

CVE-2018-3591 affects Android on Qualcomm Snapdragon Mobile and Snapdragon Wear platforms prior to the 2018-04-05 patch level. The root cause is that the default BOOT.BF.3.0 device programmer configuration enables the SKIP_SECBOOT_CHECK_NOT_RECOMMENDED_BY_QUALCOMM flag, which exposes peek and pok...

CVE-2017-18072

CVE-2017-18072 affects Android on Qualcomm Snapdragon/mobile platforms (list of affected SoCs) where probe requests from a user’s device reveal information elements that specify supported Wi‑Fi features, creating a potential privacy risk if sniffed. The root cause is the disclosure of Wi‑Fi infor...

CVE-2017-8274: Undefined Security Weakness

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, an access control vulnerability exists in Core...

CVE-2017-14911

CVE-2017-14911 describes a critical elevation/remote-privilege issue in Qualcomm components where the XBL loader could skip authentication of device config on several Snapdragon platforms (IoT, Mobile, Auto, and various SD/SoCs). Public records identify the affected elements as Qualcomm closed‑so...

CVE-2017-14913

CVE-2017-14913 concerns a Qualcomm-closed source component vulnerability in Android prior to the 2018-01-05 patch level. The issue involves DDR address input validation that is allegedly truncated, potentially enabling remote impact over the network with no user interaction. The CVE is listed und...

CVE-2017-14915

CVE-2017-14915 describes a critical vulnerability in Android prior to 2018-01-05 affecting Qualcomm Snapdragon Mobile (SD 625, 650/52, 835). The issue arises when accessing SPCOM functions with a compromised client structure, leading to a Use-After-Free condition. The documented CVSSv3 base score...

CVE-2017-14913: Improper Input Validation

In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile MDM9206, SD 625, SD 650/52, SD 835, SD 845, DDR address input validation is being improperly truncated...

Buffer overflow

In Snapdragon Automobile, Snapdragon Wearable and Snapdragon Mobile MDM9206,MDM9607,MDM9650,SD 210/SD 212/SD 205,SD 400,SD 410/12,SD 425,SD 430,SD 450,SD 600,SD 602A,SD 615/16/SD 415,SD 617,SD 625,SD 650/52,SD 800,SD 808,SD 810,SD 820,SD 820Am,SD 835,SD 845,MSM8909W, improper input validation in...

CVE-2017-17773

In Snapdragon Automobile, Snapdragon Wearable and Snapdragon Mobile MDM9206,MDM9607,MDM9650,SD 210/SD 212/SD 205,SD 400,SD 410/12,SD 425,SD 430,SD 450,SD 600,SD 602A,SD 615/16/SD 415,SD 617,SD 625,SD 650/52,SD 800,SD 808,SD 810,SD 820,SD 820Am,SD 835,SD 845,MSM8909W, improper input validation in...

CVE-2017-14910

In Snapdragon Automobile, Snapdragon IoT and Snapdragon Mobile MDM9206 MDM9607, MDM9650, S820A, S820Am, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 835, and SD 845, a buffer overread is possible if there are no newlines in an input file...

CVE-2017-14910

In Snapdragon Automobile, Snapdragon IoT and Snapdragon Mobile MDM9206 MDM9607, MDM9650, S820A, S820Am, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 835, and SD 845, a buffer overread is possible if there are no newlines in an input file...

CVE-2017-13218

The CVE-2017-13218 entry documents a side-channel information-disclosure vulnerability caused by access to CNTVCT_EL0 in various ARM-based devices (e.g., Small Cell SoC, Snapdragon lines). Affected components include listed CPUs/SoCs (FSM9055, IPQ4019, IPQ8064, MDM9xxx, SD series, etc.) and relat...

PT-2018-5512

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions affected versions not specified FSM9055 affected versions not specified IPQ4019 affected versions not specified IPQ8064 affected versions not specified MDM9206 affected versions not specified MDM9607 affected...

npr.org XSS vulnerability

Vulnerable URL: http://www.npr.org/templates/search/index.php?dateId=0=brandy+clark=match=match=0=x%22%3E%3CsvG%20onLoad=prompt%28%22OPENBUGBOUNTY%22%29%3E Details: Description| Value ---|--- Patched:| Yes, at 08.09.2017 Latest check for patch:| 08.09.2017 18:52 GMT Vulnerability type:| XSS...

Amazon Linux: Security Advisory (ALAS-2015-625)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux AMI : openssh (ALAS-2015-625)

A flaw was found in the way OpenSSH handled PAM authentication when using privilege separation. An attacker with valid credentials on the system and able to fully compromise a non-privileged pre-authentication process using a different flaw could use this flaw to authenticate as other users. It w...

Ubuntu: Security Advisory (USN-625-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...