CVE-2020-25858

The QCMAPWebCLIENT binary in the Qualcomm QCMAP software suite prior to versions released in October 2020 does not validate the return value of a strstr or strchr call in the Tokenizer function. An attacker who invokes the web interface with a crafted URL can crash the process, causing denial of...

CVE-2020-25858

The QCMAPWebCLIENT binary in the Qualcomm QCMAP software suite prior to versions released in October 2020 does not validate the return value of a strstr or strchr call in the Tokenizer function. An attacker who invokes the web interface with a crafted URL can crash the process, causing denial of...

PT-2020-16247

Name of the Vulnerable Software and Affected Versions Qualcomm QCMAP software suite versions prior to October 2020 Description The QCMAP CLI utility in the Qualcomm QCMAP software suite has an issue where it uses a system call without validating the input when handling a SetGatewayUrl request. Th...