CVE-2019-10503

Out-of-bounds access can occur in camera driver due to improper validation of array index in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017,...

Input validation

Out-of-bounds access can occur in camera driver due to improper validation of array index in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017,...

Double free

Possible double free issue in kernel while handling the camera sensor and its sub modules power sequence in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and...

CVE-2019-2266

The CVE-2019-2266 entry concerns a possible double-free issue in the kernel when handling camera sensor power sequencing across Snapdragon-based platforms (e.g., APQ8053, IPQ4019/8064, MDM92xx, SDM84x/SDX2x, etc.). The Red Hat/NVD/CVE records describe the vulnerability as a kernel-level double-fr...

CVE-2019-2266

Possible double free issue in kernel while handling the camera sensor and its sub modules power sequence in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and...

CVE-2019-10503

CVE-2019-10503 describes an out-of-bounds access in the Qualcomm Snapdragon camera driver caused by improper validation of an array index across multiple Snapdragon platforms (APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9…, SDM660, SDX20, etc.). Root cause: insufficient validation leading t...

CVE-2013-3313: Insufficiently Protected Credentials

The Loftek Nexus 543 IP Camera stores passwords in cleartext, which allows remote attackers to obtain sensitive information via an HTTP GET request to checkusers.cgi. NOTE: cleartext passwords can also be obtained from proc/kcore when leveraging the directory traversal vulnerability in...

CVE-2013-3314: Exposure of Sensitive Information to an Unauthorized Actor

The Loftek Nexus 543 IP Camera allows remote attackers to obtain 1 IP addresses via a request to getrealip.cgi or 2 firmware versions ui and system, timestamp, serial number, p2p port number, and wifi status via a request to getstatus.cgi...

CVE-2019-2266: Double Free

Possible double free issue in kernel while handling the camera sensor and its sub modules power sequence in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and...

CVE-2019-10503: Improper Validation of Array Index

Out-of-bounds access can occur in camera driver due to improper validation of array index in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017,...

PT-2019-6912

Name of the Vulnerable Software and Affected Versions Loftek Nexus 543 IP Camera affected versions not specified Description The issue allows remote attackers to obtain sensitive information, including IP addresses, firmware versions, timestamp, serial number, p2p port number, and wifi status. Th...

PT-2019-6909

Name of the Vulnerable Software and Affected Versions Loftek Nexus 543 IP Camera affected versions not specified Description The issue allows remote attackers to read arbitrary files by using a .. dot dot in the URL of an HTTP GET request, indicating a directory traversal vulnerability...

PT-2019-6911

Name of the Vulnerable Software and Affected Versions Loftek Nexus 543 IP Camera affected versions not specified Description The issue allows remote attackers to obtain sensitive information, including cleartext passwords, via an HTTP GET request to the "check users.cgi" API endpoint. This can al...

PT-2019-11896

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, QCN7605, SDA660, SDM450,...

CVE-2013-3311: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Loftek Nexus 543 IP Camera allows remote attackers to read arbitrary files via a .. dot dot in the URL of an HTTP GET request...

PT-2019-16344

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions affected versions not specified Description The issue is related to a possible double free problem in the kernel when handling the power sequence of the camera sensor and its sub-modules. This affects various...

CVE-2013-3312: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Loftek Nexus 543 IP Camera allow remote attackers to hijack the authentication of unspecified victims for requests that change 1 passwords or 2 firewall configuration, as demonstrated by a request to setusers.cgi...

PT-2019-6910

Name of the Vulnerable Software and Affected Versions Loftek Nexus 543 IP Camera affected versions not specified Description The issue affects the Loftek Nexus 543 IP Camera, where multiple cross-site request forgery CSRF vulnerabilities exist. These vulnerabilities allow remote attackers to hija...

Flaw authorizes attackers to spy on users through Android camera

By Sudais If exploited; the vulnerability can do much more against Android users especially those using Google & Samsung phones. Here's what it can do: This is a post from HackRead.com Read the original post: Flaw authorizes attackers to spy on users through Android camera...

New Flaw Lets Rogue Android Apps Access Camera Without Permission

An alarming security vulnerability has been discovered in several models of Android smartphones manufactured by Google, Samsung, and others that could allow malicious apps to secretly take pictures and record videos — even when they don't have specific device permissions to do so. You must alread...