160 matches found
CVE-2018-11863
In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, lack of check of input received from firmware to calculate the length of WMA roam synch buffer can lead to buffer overwrite during memcpy...
CVE-2018-11843
CVE-2018-11843 affects Qualcomm WLAN host components; the issue is use-after-free caused by missing return-value checks in the WMA vdev start/response path. Documented as High severity with local attack vector in Qualcomm/Android bulletins; patches are available in the 2020-01 Android security bu...
CVE-2018-11827
In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, improper validation of array index in WMA roam synchronization handler can lead to OOB write...
Free MP3 CD Ripper 2.6 - .wma Local Buffer Overflow (SEH)
Free MP3 CD Ripper 2.6 - .wma Local Buffer Overflow SEH...
Android Qualcomm qcacld Information Disclosure Vulnerability
Android on Google Pixel and Nexus is an open source Linux-based operating system for Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handheld Alliance OHA.Qualcomm qcacld-2.0 is one of the wireless LAN drivers. Qualcomm qcacld-2.0 is one of the wireless LAN drivers. An...
Boxoft WAV to WMA Converter 1.0 - Local Buffer Overflow (SEH)
Boxoft WAV to WMA Converter 1.0 - Local Buffer Overflow SEH Exploit Title: Boxoft wav-wma Converter - Local Buffer Overflow SEH Date: 2018-07-08 Software Link: http://www.boxoft.com/wav-to-wma/ Software Version:1.0 Exploit Author: Achilles Target: Windows 7 x64 CVE: Description: A malicious .wav...
Boxoft WAV to WMA Converter 1.0 - Local Buffer Overflow (SEH)
Exploit Title: Boxoft wav-wma Converter - Local Buffer Overflow SEH Date: 2018-07-08 Software Link: http://www.boxoft.com/wav-to-wma/ Software Version:1.0 Exploit Author: Achilles Target: Windows 7 x64 CVE: Description: A malicious .wav file cause this vulnerability. Category: Local Exploit buffe...
CVE-2018-3582
Buffer overflow can occur due to improper input validation in multiple WMA event handler functions in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel...
CVE-2018-3582
CVE-2018-3582 is a buffer overflow in Qualcomm WLAN affecting Android Pixel/Nexus devices, stemming from improper input validation in WMA event handling. The vulnerability is classified as Elevation of Privilege (EoP) with a Medium impact in the Android/Qualcomm WLAN component. Connected sources ...
The vulnerability of the `wma_unified_link_peer_stats_event_handler` function in the Android WLAN operating system component from the CAF repository allows a perpetrator to execute arbitrary code.
The vulnerability of the wmaunifiedlinkpeerstatseventhandler function in the Android WLAN operating system from the CAF repository is caused by buffer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code within the context of a privileged process, using a...
The vulnerability of the `wma_unified_bcntx_status_event_handler` function in the Android WLAN operating system component from the CAF repository allows a perpetrator to execute arbitrary code.
The vulnerability of the wmaunifiedbcntxstatuseventhandler function in the Android WLAN operating system from the CAF repository involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code within a privileged proces...
Design/Logic Flaw
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 800, SD 808, SD 810, SD 820, SD 835, while...
Buffer overflow
In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in wmavdevstartresphandler, vdev id is received from firmware as part of WMIVDEVSTARTRESPEVENTID. This vdev id can be greater than max...
CVE-2017-17766
CVE-2017-17766 affects Android/Qualcomm wireless components (MSM stack) and is caused by insufficient validation of num_peers received from firmware, enabling an integer overflow in the buffer allocation size and potentially leading to a buffer overflow. Affected products include Android for MSM,...
Google Android Qualcomm Wma Privilege Elevation Vulnerability (CNVD-2018-06006)
Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA.Qualcomm Wma is one of the components of Qualcomm's Wma digital audio compression format. （Qualcomm Wma is one of...
Google Android Qualcomm Wma Privilege Elevation Vulnerability (CNVD-2018-06007)
Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA.Qualcomm Wma is one of the components of Qualcomm's Wma digital audio compression format. （Qualcomm Wma is one of...
Google Android Qualcomm WLAN elevation of privilege vulnerability (CNVD-2018-04763)
Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, and Qualcomm WLAN is one of the wireless LAN components developed by Qualcomm. An elevation of privilege vulnerability exists in the 'wmaroamsyncheventhandler' function of Qualcomm WLAN in...
MP3 WAV to CD Burner 1.4.24 - Buffer Overflow (SEH) Exploit
Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: MP3 WAV to CD Burner 1.4.24 - 'Enter User Name' Field Buffer Overflow SEH Date: 24-08-2017 Exploit Author: Anurag Srivastava Website: www.pyramidcyber.com Vulnerable Software: MP3 WAV to CD Burner Vendor...
Easy MOV Converter 1.4.24 - Local Buffer Overflow (SEH)
Easy MOV Converter 1.4.24 - Local Buffer Overflow SEH !/usr/bin/python Exploit Title : Easy MOV Converter - 'Enter User Name' Field SEH Overwrite POC Date : 12/03/2017 Exploit Author : Muhann4d Vendor Homepage : http://www.divxtodvd.net/ Software Link : http://www.divxtodvd.net/easymovconverter.e...
