CVSS: 10.0EPSS: 0%CPEs: 10EXPL: 0CVE-2018-3589
https://notcve.org/view.php?id=CVE-2018-3589
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile MDM9650, MDM9655, SD 835, SD 845, SD 850, the vswr capture size is larger than the maximum size of a diag logPacket, which can lead to a buffer overflow when the sample buffer is copied to the logPacket buffer. En Android antes del nivel de parcheo de seguridad del 2018-04-05 en Qualcomm Snapdragon Mobile MDM9650, MDM9655, SD 835, SD 845 y SD 850, el tamaño de captura de vswr es mayor que el tamaño máximo de un logPacket diag, lo que puede conducir a un desbordamiento de búfer cuando el búfer de la muestra se copia al búfer logPacket. • http://www.securityfocus.com/bid/103671 https://source.android.com/security/bulletin/2018-04-01 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 0%CPEs: 10EXPL: 0CVE-2017-18142
https://notcve.org/view.php?id=CVE-2017-18142
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile MDM9650, MDM9655, SD 835, SD 845, SD 850, while processing the IMS SIP username, a buffer overflow can occur. En Android, antes del nivel de parche de seguridad del 2018-04-05 en Qualcomm Snapdragon Mobile MDM9650, MDM9655, SD 835, SD 845 y SD 850 podría ocurrir un desbordamiento de búfer. • http://www.securityfocus.com/bid/103671 https://source.android.com/security/bulletin/2018-04-01 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •