EUVD-2020-18492

Malware in sbrugna...

CVE-2020-25858

The QCMAPWebCLIENT binary in the Qualcomm QCMAP software suite prior to versions released in October 2020 does not validate the return value of a strstr or strchr call in the Tokenizer function. An attacker who invokes the web interface with a crafted URL can crash the process, causing denial of...

CVE-2020-25859

The QCMAPCLI utility in the Qualcomm QCMAP software suite prior to versions released in October 2020 uses a system call without validating the input, while handling a SetGatewayUrl request. A local attacker with shell access can pass shell metacharacters and run arbitrary commands. If QCMAPCLI ca...

CVE-2020-25859

The QCMAPCLI utility in the Qualcomm QCMAP software suite prior to versions released in October 2020 uses a system call without validating the input, while handling a SetGatewayUrl request. A local attacker with shell access can pass shell metacharacters and run arbitrary commands. If QCMAPCLI ca...

CVE-2020-25859: Improper Neutralization of Special Elements used in an OS Command

The QCMAPCLI utility in the Qualcomm QCMAP software suite prior to versions released in October 2020 uses a system call without validating the input, while handling a SetGatewayUrl request. A local attacker with shell access can pass shell metacharacters and run arbitrary commands. If QCMAPCLI ca...

PT-2020-16247

Name of the Vulnerable Software and Affected Versions Qualcomm QCMAP software suite versions prior to October 2020 Description The QCMAP CLI utility in the Qualcomm QCMAP software suite has an issue where it uses a system call without validating the input when handling a SetGatewayUrl request. Th...

CVE-2020-25858: NULL Pointer Dereference

The QCMAPWebCLIENT binary in the Qualcomm QCMAP software suite prior to versions released in October 2020 does not validate the return value of a strstr or strchr call in the Tokenizer function. An attacker who invokes the web interface with a crafted URL can crash the process, causing denial of...

PT-2020-16246

Name of the Vulnerable Software and Affected Versions Qualcomm QCMAP software suite versions prior to October 2020 Description The issue concerns the QCMAP Web CLIENT binary in the Qualcomm QCMAP software suite. It does not validate the return value of a strstr or strchr call in the Tokenizer...