CVE-2018-5914

Improper input validation in TZ led to array out of bound in TZ function while accessing the peripheral details using the incoming data in Snapdragon Mobile, Snapdragon Wear version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 835, SDA660...

openSUSE: Security Advisory for kernel (openSUSE-SU-2018:2407-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 6.5 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2018-9506

In avrcmsgcback of avrcapi.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7...

Out-of-bounds

In avrcmsgcback of avrcapi.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7...

CVE-2018-9506

CVE-2018-9506: In avrc_msg_cback of avrc_api.cc there is an out-of-bounds read due to a missing bounds check, enabling remote information disclosure over Bluetooth with no extra privileges. Affected: Android versions listed in the NVD entry (7.0–9.0). The connected documents confirm the root caus...

CVE-2018-9506

In avrcmsgcback of avrcapi.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7...

EulerOS 2.0 SP2 : kernel (EulerOS-SA-2018-1296)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A an integer overflow vulnerability was discovered in the Linux kernel, from version 3.4 through 4.15, in the...

Design/Logic Flaw

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, lack of check on the length of array while accessing can lead to an out of bound read in WLAN HOST function...

CVE-2018-11883

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, in policy mgr unit test if mode parameter in wlan function is given an out of bound value it can cause an out of bound access while accessing the PCL table...

CVE-2018-11891

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, lack of check on the length of array while accessing can lead to an out of bound read in WLAN HOST function...

CVE-2018-11883

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, in policy mgr unit test if mode parameter in wlan function is given an out of bound value it can cause an out of bound access while accessing the PCL table...

CVE-2018-11891

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, lack of check on the length of array while accessing can lead to an out of bound read in WLAN HOST function...

CVE-2018-11891

CVE-2018-11891 is a high-severity issue affecting Qualcomm WLAN HOST code linked to CAF Android/Linux WLAN components. The vulnerability stems from a missing bounds check on array length in the WLAN HOST path, potentially enabling an out-of-bounds read in affected devices. Connected sources corro...

CVE-2018-11883

CVE-2018-11883 affects CAF-based Android WLAN implementations (Android for MSM, Firefox OS for MSM, QRD Android) running in the Linux kernel. The issue arises in the policy manager unit test: if the mode parameter in the WLAN function is out of bounds, it can trigger an out-of-bounds access when ...

CVE-2018-11851

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, lack of check on input received to calculate the buffer length can lead to out of bound write to kernel stack...

CVE-2018-11851

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, lack of check on input received to calculate the buffer length can lead to out of bound write to kernel stack...

CVE-2018-11851

CVE-2018-11851 relates to a buffer-length calculation input validation flaw in CAF Qualcomm WLAN driver components, causing a possible out-of-bounds write to kernel stack. The vulnerability is documented as a local, impactful issue with high severity (NVD CVSS v2/3 vectors indicate LOCAL access, ...

EulerOS Virtualization 2.5.0 : dhcp (EulerOS-SA-2018-1250)

According to the versions of the dhcp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An out-of-bound memory access flaw was found in the way dhclient processed a DHCP response packet. A malicious DHCP server could...

Apache Syncope Remote Code Execution Vulnerability (CNVD-2018-18784)

Apache Syncope is the United States Apache Apache Software Foundation's set of open source digital identity management system for use in enterprise environments. The system supports identity management, role configuration and more. Apache Syncope uses XSLT to export report data to various formats...