Lucene search
+L

68 matches found

Prion
Prion
•added 2021/07/13 6:15 a.m.•26 views

Buffer overflow

Possible buffer overflow due to improper validation of buffer length while processing fast boot commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

7.2CVSS7AI score0.00223EPSS
SaveExploits0References1
NVD
NVD
•added 2020/08/12 7:15 p.m.•29 views

CVE-2020-8905

A buffer length validation vulnerability in Asylo versions prior to 0.6.0 allows an attacker to read data they should not have access to. The 'encuntrustedrecvfrom' function generates a return value which is deserialized by 'MessageReader', and copied into three different 'extents'. The length of...

6.5CVSS4.6AI score0.00239EPSS
SaveExploits0References1
Prion
Prion
•added 2020/08/12 7:15 p.m.•21 views

Input validation

A buffer length validation vulnerability in Asylo versions prior to 0.6.0 allows an attacker to read data they should not have access to. The 'encuntrustedrecvfrom' function generates a return value which is deserialized by 'MessageReader', and copied into three different 'extents'. The length of...

4CVSS6.5AI score0.00239EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/08/12 6:20 p.m.•45 views

CVE-2020-8905 Confidential Information Disclosure vulnerability in Asylo

A buffer length validation vulnerability in Asylo versions prior to 0.6.0 allows an attacker to read data they should not have access to. The 'encuntrustedrecvfrom' function generates a return value which is deserialized by 'MessageReader', and copied into three different 'extents'. The length of...

2.8CVSS6.5AI score0.00239EPSS
SaveExploits0References1
CVE
CVE
•added 2020/08/12 6:20 p.m.•82 views

CVE-2020-8905

The CVE-2020-8905 entry concerns Asylo before 0.6.0, where a buffer-length validation flaw in enc_untrusted_recvfrom allows an attacker to force copying trusted memory into a small untrusted buffer, enabling unauthorized data access. The issue is described as a memory-read vulnerability within Me...

6.5CVSS5.1AI score0.00239EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2020/07/22 12:22 a.m.•7 views

CVE-2020-8905

A buffer length validation vulnerability in Asylo versions prior to 0.6.0 allows an attacker to read data they should not have access to. The 'encuntrustedrecvfrom' function generates a return value which is deserialized by 'MessageReader', and copied into three different 'extents'. The length of...

6.5CVSS6.8AI score0.00239EPSS
SaveExploits0References2
NVD
NVD
•added 2019/07/22 2:15 p.m.•29 views

CVE-2019-2269

Possible buffer overflow while processing the high level lim process action frame due to improper buffer length validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9650, MSM8996AU, QCS405...

9.8CVSS9.7AI score0.00738EPSS
SaveExploits0References1
Prion
Prion
•added 2019/07/22 2:15 p.m.•27 views

Buffer overflow

Possible buffer overflow while processing the high level lim process action frame due to improper buffer length validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9650, MSM8996AU, QCS405...

7.5CVSS9.5AI score0.00738EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2019/07/22 1:47 p.m.•41 views

CVE-2019-2269

Possible buffer overflow while processing the high level lim process action frame due to improper buffer length validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9650, MSM8996AU, QCS405...

9.7AI score0.00738EPSS
SaveExploits0References1
NVD
NVD
•added 2019/05/24 5:29 p.m.•31 views

CVE-2018-11924

Improper buffer length validation in WLAN function can lead to a potential integer oveflow issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM920...

7.8CVSS7.8AI score0.00198EPSS
SaveExploits0References1
Prion
Prion
•added 2019/05/24 5:29 p.m.•38 views

Integer overflow

Improper buffer length validation in WLAN function can lead to a potential integer oveflow issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM920...

4.6CVSS7.8AI score0.00198EPSS
SaveExploits0References1
CVE
CVE
•added 2019/05/24 4:32 p.m.•87 views

CVE-2018-11924

The CVE-2018-11924 description is supported by connected documents, which indicate an improper buffer length validation in WLAN functionality can cause an integer overflow in Qualcomm/Qualcomm-based Snapdragon WLAN hosts. Affected products include Snapdragon Auto/Compute/Consumer Electronics Conn...

7.8CVSS7.7AI score0.00198EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/05/24 12:00 a.m.•5 views

CVE-2018-11924: Integer Overflow or Wraparound

Improper buffer length validation in WLAN function can lead to a potential integer oveflow issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM920...

7.8CVSS6AI score0.00198EPSS
SaveExploits0References2
NVD
NVD
•added 2019/01/18 10:29 p.m.•27 views

CVE-2018-5881

Improper validation of buffer length checks in the lwm2m device management protocol can leads to a buffer overflow in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 835, SDA660, SDM630, SDM660...

8.8CVSS8.9AI score0.00427EPSS
SaveExploits0References1
NVD
NVD
•added 2018/04/18 2:29 p.m.•35 views

CVE-2015-9187

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, S...

10CVSS8.6AI score0.01185EPSS
SaveExploits0References2
Prion
Prion
•added 2018/04/18 2:29 p.m.•26 views

Input validation

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, S...

10CVSS8.2AI score0.01185EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2018/04/18 2:00 p.m.•45 views

CVE-2015-9187

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, S...

9.7AI score0.01185EPSS
SaveExploits0References2
CVE
CVE
•added 2018/04/18 2:00 p.m.•64 views

CVE-2015-9187

CVE-2015-9187 affects Android devices with Qualcomm Snapdragon SoCs (e.g., Snapdragon Automobile, Mobile, Wear lines) prior to the 2018-04-05 patch level. The issue is a lack of buffer length validation in the pvr_cmd_handler, which can lead to unauthorized access to secure memory. The NVD/Androi...

10CVSS8.5AI score0.01185EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/04/18 12:00 a.m.•3 views

CVE-2015-9187: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, S...

10CVSS8.3AI score0.01185EPSS
SaveExploits0References2
OSV
OSV
•added 2018/01/11 9:29 p.m.•43 views

CVE-2018-5335

In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the WCP dissector could crash. This was addressed in epan/dissectors/packet-wcp.c by validating the available buffer length...

6.5CVSS7.1AI score
SaveExploits0References6
Rows per page
Query Builder