CVE-2018-4092

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Kernel" component. A race condition allows attackers to bypass intended memory-read...

CVE-2018-4093

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a...

CVE-2018-4084

An issue was discovered in certain Apple products. macOS before 10.13.3 is affected. The issue involves the "Wi-Fi" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2018-4104

CVE-2018-4104 affects Apple devices running iOS < 11.3, macOS < 10.13.4, tvOS < 11.3, and watchOS

CVE-2018-4138

CVE-2018-4138 affects macOS High Sierra before 10.13.4, targeting the NVIDIA Graphics Drivers. The issue is a memory-read restriction bypass via a crafted app, enabling a local attacker to read restricted memory. Root cause is a validation/memory handling issue in the NVIDIA Graphics Drivers comp...

CVE-2018-4093

Summary: CVE-2018-4093 is a kernel-level memory-read bypass affecting Apple platforms. The vulnerability exists in the Kernel component across iOS before 11.2.5, macOS before 10.13.3, tvOS before 11.2.5, and watchOS before 4.2.2. The issue allows a crafted app to bypass memory-read restrictions a...

CVE-2018-4092

CVE-2018-4092 affects Apple OS kernels across iOS, macOS, tvOS, and watchOS. The root cause is a race condition in the Kernel that can allow a crafted app to bypass memory-read restrictions. Affected versions include iOS before 11.2.5, macOS before 10.13.3, tvOS before 11.2.5, and watchOS before ...

CVE-2018-4084

CVE-2018-4084 affects macOS High Sierra predecessors up to 10.13.2, specifically the Wi‑Fi component. The issue allows a crafted app to bypass memory-read restrictions, enabling potential access to restricted memory via a local exploit (UI interaction required). The CVSS data indicates a local at...

Important: 389-ds-base

Issue Overview: Authentication bypass due to lack of size check in slapictmemcmp function in chmalloc.c: It was found that 389-ds-base did not always handle internal hash comparison operations correctly during the authentication process. A remote, unauthenticated attacker could potentially use th...

CVE-2017-17306

Some Huawei Smartphones with software of VNS-L21AUTC555B141, VNS-L21C10B160, VNS-L21C66B160, VNS-L21C703B140 have an array out-of-bounds read vulnerability. Due to the lack verification of array, an attacker tricks a user into installing a malicious application, and the application can exploit th...

Google Android Qualcomm WLAN Information Disclosure Vulnerability (CNVD-2018-05991)

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA, with Qualcomm WLAN being one of the components used. Qualcomm WLAN is a wireless LAN component developed by Qualco...

CVE-2017-18057

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for vdev id in wmanloscancmpevthandler, which is received from firmware, leads to potential out of bounds memory read...

CVE-2017-18058

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for wowbufpktlen in wmawowwakeuphostevent which is received from firmware leads to potential out of bounds memory read...

CVE-2017-18060

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for respevent-vdevid in wmaunifiedbcntxstatuseventhandler, which is received from firmware, leads to potential out of bounds memory read...

Input validation

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for vdev id in wmascaneventcallback, which is received from firmware, leads to potential out of bounds memory read...

CVE-2017-18050

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for vdevmap in wmatbttoffsetupdateeventhandler, which is received from firmware, leads to potential buffer overwrite and out of bounds memory read...

CVE-2017-18051

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for event-vdevid in wmarcpieventhandler, which is received from firmware, leads to potential out of bounds memory read...

Input validation

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for event-vdevid in wmarcpieventhandler, which is received from firmware, leads to potential out of bounds memory read...

Input validation

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for fixparam-vdevid in wmap2ploeventhandler, which is received from firmware, leads to potential out of bounds memory read...

Input validation

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for vdev id in wmanloscancmpevthandler, which is received from firmware, leads to potential out of bounds memory read...