ByteOS

Trend Micro Antivirus for Mac (Consumer)

Product

Versions

Affected

7.0 (2017) and above

Problem Types

Type	CWE ID	Description
text	N/A	Privilege Escalation

Type: text

CWE ID: N/A

Description: Privilege Escalation

References

Hyperlink	Resource
https://esupport.trendmicro.com/solution/ja-jp/1121350.aspx	x_refsource_CONFIRM
http://www.securityfocus.com/bid/105757	vdb-entry x_refsource_BID
https://esupport.trendmicro.com/en-US/home/pages/technical-support/1121296.aspx	x_refsource_CONFIRM
https://www.zerodayinitiative.com/advisories/ZDI-18-1297/	x_refsource_MISC

Hyperlink: https://esupport.trendmicro.com/solution/ja-jp/1121350.aspx

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securityfocus.com/bid/105757

Resource:

vdb-entry

x_refsource_BID

Hyperlink: https://esupport.trendmicro.com/en-US/home/pages/technical-support/1121296.aspx

Resource:

x_refsource_CONFIRM

Hyperlink: https://www.zerodayinitiative.com/advisories/ZDI-18-1297/

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://esupport.trendmicro.com/solution/ja-jp/1121350.aspx	x_refsource_CONFIRM x_transferred
http://www.securityfocus.com/bid/105757	vdb-entry x_refsource_BID x_transferred
https://esupport.trendmicro.com/en-US/home/pages/technical-support/1121296.aspx	x_refsource_CONFIRM x_transferred
https://www.zerodayinitiative.com/advisories/ZDI-18-1297/	x_refsource_MISC x_transferred

Hyperlink: https://esupport.trendmicro.com/solution/ja-jp/1121350.aspx

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.securityfocus.com/bid/105757

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: https://esupport.trendmicro.com/en-US/home/pages/technical-support/1121296.aspx

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://www.zerodayinitiative.com/advisories/ZDI-18-1297/

Resource:

x_refsource_MISC

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:security@trendmicro.com

Published At:23 Oct, 2018 | 14:29

Updated At:04 Dec, 2018 | 13:16

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	7.8	HIGH	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.0

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 7.2

Base severity: HIGH

Vector:

AV:L/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:a:trendmicro:antivirus_for_mac_2017:*:*:*:*:*:*:*:*

>>antivirus_for_mac_2017>>Versions from 7.0(inclusive) to 7.1.1124(inclusive)

cpe:2.3:a:trendmicro:antivirus_for_mac_2018:*:*:*:*:*:*:*:*

>>antivirus_for_mac_2018>>Versions from 8.0(inclusive) to 8.0.3082(inclusive)

cpe:2.3:a:trendmicro:antivirus_for_mac_2019:*:*:*:*:*:*:*:*

>>antivirus_for_mac_2019>>Versions from 9.0(inclusive) to 9.0.1356(inclusive)

Weaknesses

CWE ID	Type	Source
CWE-476	Primary	nvd@nist.gov

CWE ID: CWE-476

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/105757	security@trendmicro.com	Third Party Advisory VDB Entry
https://esupport.trendmicro.com/en-US/home/pages/technical-support/1121296.aspx	security@trendmicro.com	Vendor Advisory
https://esupport.trendmicro.com/solution/ja-jp/1121350.aspx	security@trendmicro.com	Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-18-1297/	security@trendmicro.com	Third Party Advisory VDB Entry

Hyperlink: http://www.securityfocus.com/bid/105757

Source: security@trendmicro.com

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://esupport.trendmicro.com/en-US/home/pages/technical-support/1121296.aspx

Source: security@trendmicro.com

Resource:

Vendor Advisory

Hyperlink: https://esupport.trendmicro.com/solution/ja-jp/1121350.aspx

Source: security@trendmicro.com

Resource:

Vendor Advisory

Hyperlink: https://www.zerodayinitiative.com/advisories/ZDI-18-1297/

Source: security@trendmicro.com

Resource:

Third Party Advisory

VDB Entry

Similar CVEs

127Records found

CVE-2017-0348

Matching Score-4

Assigner-NVIDIA Corporation

Matching Score-4

Assigner-NVIDIA Corporation

CVSS Score-7.8||HIGH

EPSS-0.04% / 11.54%

7 Day CHG~0.00%

Published-09 May, 2017 | 21:00

Updated-20 Apr, 2025 | 01:37

All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler where a NULL pointer dereference may lead to denial of service or potential escalation of privileges.

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2017-0323

Matching Score-4

Assigner-NVIDIA Corporation

Matching Score-4

Assigner-NVIDIA Corporation

CVSS Score-7.8||HIGH

EPSS-0.04% / 11.54%

7 Day CHG~0.00%

Published-15 Feb, 2017 | 23:00

Updated-20 Apr, 2025 | 01:37

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference caused by invalid user input may lead to denial of service or potential escalation of privileges.

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2017-0341

Matching Score-4

Assigner-NVIDIA Corporation

Matching Score-4

Assigner-NVIDIA Corporation

CVSS Score-7.8||HIGH

EPSS-0.04% / 11.54%

7 Day CHG~0.00%

Published-09 May, 2017 | 21:00

Updated-20 Apr, 2025 | 01:37

All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where user provided input can trigger an access to a pointer that has not been initialized which may lead to denial of service or potential escalation of privileges.

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2017-0349

Matching Score-4

Assigner-NVIDIA Corporation

Matching Score-4

Assigner-NVIDIA Corporation

CVSS Score-7.8||HIGH

EPSS-0.04% / 11.54%

7 Day CHG~0.00%

Published-09 May, 2017 | 21:00

Updated-20 Apr, 2025 | 01:37

All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a pointer passed from a user to the driver is not correctly validated before it is dereferenced for a write operation, may lead to denial of service or potential escalation of privileges.

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2016-8814

Matching Score-4

Assigner-NVIDIA Corporation

Matching Score-4

Assigner-NVIDIA Corporation

CVSS Score-7.8||HIGH

EPSS-0.04% / 11.54%

7 Day CHG~0.00%

Published-16 Dec, 2016 | 21:00

Updated-12 Apr, 2025 | 10:46

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where multiple pointers are used without checking for NULL, leading to denial of service or potential escalation of privileges.

Vendor-Microsoft Corporation NVIDIA Corporation

Product-windows gpu_driver Quadro, NVS, GeForce, GRID and Tesla

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2014-7826

Matching Score-4

Assigner-Red Hat, Inc.

Matching Score-4

Assigner-Red Hat, Inc.

CVSS Score-7.8||HIGH

EPSS-0.08% / 24.40%

7 Day CHG~0.00%

Published-10 Nov, 2014 | 11:00

Updated-12 Apr, 2025 | 10:46

kernel/trace/trace_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the ftrace subsystem, which allows local users to gain privileges or cause a denial of service (invalid pointer dereference) via a crafted application.

Vendor-n/a openSUSE Linux Kernel Organization, Inc SUSE

Product-suse_linux_enterprise_server linux_kernel evergreen n/a

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2016-7080

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-0.04% / 11.77%

7 Day CHG~0.00%

Published-29 Dec, 2016 | 09:02

Updated-12 Apr, 2025 | 10:46

The graphic acceleration functions in VMware Tools 9.x and 10.x before 10.0.9 on OS X allow local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors, a different vulnerability than CVE-2016-7079.

Vendor-n/a VMware (Broadcom Inc.)Apple Inc.

Product-mac_os_x tools n/a

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2016-7079

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-0.04% / 11.77%

7 Day CHG~0.00%

Published-29 Dec, 2016 | 09:02

Updated-12 Apr, 2025 | 10:46

Vendor-n/a VMware (Broadcom Inc.)Apple Inc.

Product-mac_os_x tools n/a

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2017-18298

Matching Score-4

Assigner-Qualcomm, Inc.

Matching Score-4

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.16%

7 Day CHG~0.00%

Published-23 Oct, 2018 | 13:00

Updated-05 Aug, 2024 | 21:20

Lack of Input Validation in SDMX API can lead to NULL pointer access in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660 .

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2016-4626

Matching Score-4

Assigner-Apple Inc.

Matching Score-4

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 28.50%

7 Day CHG~0.00%

Published-22 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

IOHIDFamily in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors.

Vendor-n/a Apple Inc.

Product-mac_os_x iphone_os watchos tvos n/a

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2016-4678

Matching Score-4

Assigner-Apple Inc.

Matching Score-4

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.84%

7 Day CHG~0.00%

Published-20 Feb, 2017 | 08:35

Updated-20 Apr, 2025 | 01:37

An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "AppleSMC" component. It allows local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2016-4627

Matching Score-4

Assigner-Apple Inc.

Matching Score-4

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.11% / 29.40%

7 Day CHG~0.00%

Published-22 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

IOAcceleratorFamily in Apple iOS before 9.3.3, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors.

Vendor-n/a Apple Inc.

Product-iphone_os watchos tvos n/a

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2016-3070

Matching Score-4

Assigner-Red Hat, Inc.

Matching Score-4

Assigner-Red Hat, Inc.

CVSS Score-7.8||HIGH

EPSS-0.08% / 24.63%

7 Day CHG~0.00%

Published-06 Aug, 2016 | 20:00

Updated-12 Apr, 2025 | 10:46

The trace_writeback_dirty_page implementation in include/trace/events/writeback.h in the Linux kernel before 4.4 improperly interacts with mm/migrate.c, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by triggering a certain page move.

Vendor-n/a Debian GNU/Linux Linux Kernel Organization, Inc

Product-debian_linux linux_kernel n/a

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2008-2812

Matching Score-4

Assigner-Red Hat, Inc.

Matching Score-4

Assigner-Red Hat, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.56%

7 Day CHG~0.00%

Published-09 Jul, 2008 | 00:00

Updated-07 Aug, 2024 | 09:14

The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving NULL pointer dereference of function pointers in (1) hamradio/6pack.c, (2) hamradio/mkiss.c, (3) irda/irtty-sir.c, (4) ppp_async.c, (5) ppp_synctty.c, (6) slip.c, (7) wan/x25_asy.c, and (8) wireless/strip.c in drivers/net/.

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2019-10600

Matching Score-4

Assigner-Qualcomm, Inc.

Product-mdm9150_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware ipq4019_firmware mdm9206 sdm670_firmware sdx24_firmware ipq8074 sdm636 sda845_firmware apq8098 mdm9206_firmware msm8939 qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware qca6574au_firmware sdx55_firmware ipq8064 sxr1130_firmware qca8081_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware ipq8064_firmware sda845 nicobar sa6155p_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware qcs405 ipq8074_firmware qca6574au sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware msm8939_firmware sa6155p qca8081 mdm9150 msm8937 mdm9207c_firmware mdm9207c sm8150_firmware msm8909 sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware sdm630_firmware qm215_firmware ipq4019 sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware sm8250 msm8998 sm8150 sdx20_firmware apq8017 nicobar_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Matching Score-4

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 27.23%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-04 Aug, 2024 | 22:24

Use of local variable as argument to netlink CB callback goes out of it scope when callback triggered lead to invalid stack memory in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, IPQ4019, IPQ8064, IPQ8074, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCA6574AU, QCA8081, QCS405, QCS605, QM215, SA6155P, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2018-6249

Matching Score-4

Assigner-NVIDIA Corporation

Vendor-NVIDIA Corporation Linux Kernel Organization, Inc FreeBSD Foundation Microsoft Corporation Oracle Corporation

Matching Score-4

Assigner-NVIDIA Corporation

CVSS Score-8.8||HIGH

EPSS-0.04% / 11.54%

7 Day CHG~0.00%

Published-02 Apr, 2018 | 16:00

Updated-17 Sep, 2024 | 01:17

NVIDIA GPU Display Driver contains a vulnerability in kernel mode layer handler where a NULL pointer dereference may lead to denial of service or potential escalation of privileges.

Product-freebsd solaris linux_kernel windows gpu_driver GPU Display Driver

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2018-6247

Matching Score-4

Assigner-NVIDIA Corporation

Matching Score-4

Assigner-NVIDIA Corporation

CVSS Score-8.8||HIGH

EPSS-0.04% / 11.54%

7 Day CHG~0.00%

Published-02 Apr, 2018 | 16:00

Updated-17 Sep, 2024 | 02:10

NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a NULL pointer dereference may lead to denial of service or possible escalation of privileges.

Product-windows gpu_driver GPU Display Driver

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2018-6250

Matching Score-4

Assigner-NVIDIA Corporation

Matching Score-4

Assigner-NVIDIA Corporation

CVSS Score-8.8||HIGH

EPSS-0.04% / 11.54%

7 Day CHG~0.00%

Published-02 Apr, 2018 | 16:00

Updated-16 Sep, 2024 | 23:31

NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a NULL pointer dereference occurs which may lead to denial of service or possible escalation of privileges.

Product-windows gpu_driver GPU Display Driver

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2018-3570

Matching Score-4

Assigner-Qualcomm, Inc.

Matching Score-4

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 2.40%

7 Day CHG~0.00%

Published-06 Jul, 2018 | 19:00

Updated-16 Sep, 2024 | 16:27

In the cpuidle driver in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel, the list_for_each macro was not used correctly which could lead to an untrusted pointer dereference.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2018-18883

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-8.8||HIGH

EPSS-0.18% / 39.68%

7 Day CHG~0.00%

Published-01 Nov, 2018 | 00:00

Updated-05 Aug, 2024 | 11:23

An issue was discovered in Xen 4.9.x through 4.11.x, on Intel x86 platforms, allowing x86 HVM and PVH guests to cause a host OS denial of service (NULL pointer dereference) or possibly have unspecified other impact because nested VT-x is not properly restricted.

Vendor-n/a Xen Project

Product-xen n/a

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2017-15846

Matching Score-4

Assigner-Qualcomm, Inc.

Matching Score-4

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 2.40%

7 Day CHG~0.00%

Published-30 Mar, 2018 | 21:00

Updated-17 Sep, 2024 | 00:21

In the video_ioctl2() function in the camera driver in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-09-16, an untrusted pointer dereference may potentially occur.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2020-35499

Matching Score-4

Assigner-Red Hat, Inc.

Matching Score-4

Assigner-Red Hat, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.12% / 31.68%

7 Day CHG~0.00%

Published-19 Feb, 2021 | 19:49

Updated-04 Aug, 2024 | 17:02

A NULL pointer dereference flaw in Linux kernel versions prior to 5.11 may be seen if sco_sock_getsockopt function in net/bluetooth/sco.c do not have a sanity check for a socket connection, when using BT_SNDMTU/BT_RCVMTU for SCO sockets. This could allow a local attacker with a special user privilege to crash the system (DOS) or leak kernel internal information.

Vendor-n/a Linux Kernel Organization, Inc

Product-linux_kernel kernel

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2021-35075

Matching Score-4

Assigner-Qualcomm, Inc.

Product-qca9377_firmware wcn3991_firmware sm6375 wsa8830 wcn3991 sa6150p_firmware qca8337_firmware sa8145p_firmware wcd9380_firmware sd780g qca8337 wcn6856_firmware sd888 sdx65 wsa8835 qca6574 wcd9380 sa8150p_firmware sd888_5g qca6595au_firmware wcd9370 qca6574a wcn6855_firmware qca6174a sm7325p wcd9335_firmware qca9377 wcn6750 wcn3998 wcd9385_firmware qca6574_firmware sd_8_gen1_5g_firmware sm6375_firmware wsa8815 sm7325p_firmware wcn6850 sm7315_firmware qca6574a_firmware qca6574au_firmware qca6595au qca8081_firmware sdx12_firmware wcd9375_firmware wcn3998_firmware sm7315 qca6391 wcn6740_firmware sd778g sa6155p_firmware sdx65_firmware qcs6490 qcm6490_firmware sd480_firmware wcn6851_firmware wcn3988_firmware qca6574au sa6145p_firmware sa8155p_firmware sd778g_firmware sa8195p wsa8810_firmware sd480 wsa8810 wcn6855 wcn6851 wcd9335 sa6155p qca8081 wcn6856 sa6145p qca6174a_firmware wcd9385 qca6696_firmware qcs6490_firmware sa8145p wcn6740 qca6696 qca6391_firmware ar8035 wcd9375 sd780g_firmware wcd9370_firmware sa8150p sa6150p sd888_firmware sa8155p wsa8830_firmware qcm6490 sd888_5g_firmware wcn3988 wcn6850_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware sdx12 sm8475 wcn6750_firmware ar8035_firmware Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Matching Score-4

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.09% / 27.23%

7 Day CHG~0.00%

Published-11 Feb, 2022 | 10:40

Updated-04 Aug, 2024 | 00:33

Possible null pointer dereference due to lack of WDOG structure validation during registration in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2021-30272

Matching Score-4

Assigner-Qualcomm, Inc.

Product-qca9377_firmware fsm10055 mdm9640_firmware sm6250p_firmware sa6150p_firmware qcs610 qcn5550 qca8337 ipq8173_firmware sdx65 qcn5124 qca4024_firmware wcn3950_firmware ipq8078a ipq5028_firmware sa8150p_firmware qcs2290 qca6595au_firmware sa6155 qcn5064 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware sa415m wcn3950 qcn6024_firmware sd720g ipq8076a mdm9206_firmware qsw8573_firmware mdm9628 sm6375_firmware sd460_firmware sm7315_firmware qca6428 qca6574au_firmware qcn5164_firmware ipq8071 wcd9375_firmware qca8081_firmware sa6155_firmware sdx12_firmware msm8909w apq8009w_firmware qca6438_firmware ipq8070_firmware qca9367_firmware ipq8078a_firmware mdm8207 wcn3999 qrb5165_firmware ipq5028 ipq8072_firmware sa8155_firmware qca4004_firmware ipq6010 sd662_firmware qcs405 sc8280xp_firmware wcd9306_firmware qcn6132 sd765g fsm10056_firmware qca6436 wcn6851 sa6155p qcs603_firmware qca9888_firmware qcn6122 qca6696_firmware sd870_firmware sd750g qca1062 qcn5154_firmware wcn3910_firmware sd_8cx sa8150p mdm9207_firmware qca4004 wsa8830_firmware sd865_5g_firmware wcn3988 qca6438 sa8195p_firmware qcn5121 qcn5022_firmware qcn7606_firmware wcn6750_firmware wcn3610 mdm9640 qca6428_firmware ipq5018_firmware sm6375 wcn3991 qca8337_firmware sda429w_firmware wcd9380_firmware ipq8072a sdm429w wcd9330 msm8996au_firmware ipq8076a_firmware ipq8078 qca6564au sdx55m_firmware ipq8173 wcn6856_firmware qcn5164 qca6574 csr8811_firmware wcd9380 qcn5054_firmware qcs410 qcn5024 sd690_5g_firmware sdx24_firmware qca8072_firmware qcn9012_firmware qcn5052_firmware ipq6018_firmware qsw8573 qcs605 wcn6850 sd7c pmp8074_firmware wcn3910 qca6584_firmware mdm9650_firmware qca6426_firmware qca9984 ipq6028 qcn9024 pmp8074 sd730 qcn5550_firmware wcd9330_firmware sdx55m wcn6740_firmware qcn5064_firmware sd678_firmware ar8031_firmware ipq8078_firmware qcn5054 qrb5165 wcn6851_firmware qcs603 ipq8070 qcn9024_firmware ipq8174_firmware apq8009w qca6564a_firmware qcm4290_firmware sd480 sd870 wcn6855 qcn7605_firmware qcn5121_firmware sd210_firmware qcs610_firmware sa6145p ipq6018 sdxr1 ar8031 apq8096au qcs405_firmware sa8145p mdm8207_firmware mdm9205_firmware qca6391_firmware qca4024 wcd9370_firmware sd780g_firmware sdx55 sd888_firmware sc8280xp qcn5021_firmware sa8155p csra6640 sd675 ar8035_firmware qcm2290 qcn7606 qcn5024_firmware wcn3991_firmware mdm9150_firmware wsa8830 sd678 qcn9070 sa8145p_firmware qca1062_firmware qcs2290_firmware fsm10056 sd7c_firmware csrb31024 mdm9628_firmware mdm9650 csra6620 fsm10055_firmware qcn9072 qcs4290 sd765g_firmware qca6390_firmware sd690_5g ipq6000 sd730_firmware wcd9370 sd675_firmware ipq8072 qcn5152_firmware qca6564 qca6426 qca6584au_firmware qrb5165n_firmware qcn9000_firmware qca9984_firmware qca9377 sm8450 ipq5018 sdw2500_firmware sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware qcn7605 ipq8074a sd662 qcn5124_firmware qca1064 sa8155 qca6584 qcn5122_firmware sdx55_firmware qca6595au qcn6023_firmware wcn3999_firmware sm7250p_firmware wcn3610_firmware qca6436_firmware qrb5165n mdm9207 ipq5010 wcd9306 qca6584au sd778g qca6564au_firmware sa6155p_firmware sm6225 ipq8174 sd429 sa515m_firmware qcs6490 sdxr2_5g qcn5052 qca9367 mdm9607_firmware sa415m_firmware wcn3988_firmware qcn9074 sd205 sd429_firmware sa6145p_firmware sd778g_firmware sm6250 sa8195p apq8017_firmware sm8450_firmware sd765_firmware qca8081 qcn6023 ipq8071a qca6174a_firmware ipq8071a_firmware qcs4290_firmware wcd9385 qcs6490_firmware qca6390 wcd9375 sd750g_firmware ar8035 csr8811 sm6250_firmware qcn9100_firmware sda429w sd210 wcn3620_firmware ipq5010_firmware ipq8074a_firmware sd888_5g_firmware sdx20_firmware qcm6490 wcn6850_firmware wsa8835_firmware wcn3620 apq8017 qcx315 qca6564a qca8072 qcm2290_firmware qcn9000 sd_675 sd780g sd865_5g sdx24 sm8450p_firmware qcn9012 sd888 msm8909w_firmware qcx315_firmware qcn6122_firmware msm8996au sdm429w_firmware sd665_firmware wsa8835 sd888_5g sm6250p qcn5154 qca8075_firmware qca6574a ipq6005_firmware mdm9206 wcn6855_firmware qca9889 qca6174a sm7325p qcn6132_firmware qca9888 ipq8074 wcn6750 ipq8070a_firmware ipq8076_firmware mdm9205 sa515m qca6574_firmware sm7325p_firmware sd665 ipq8076 sd765 qca6574a_firmware qcn5021 qcn5152 sd768g_firmware sd850_firmware sm7315 sd460 qca6391 sdxr1_firmware ipq6005 qcn9100 sdx65_firmware qcm4290 csrb31024_firmware qcm6490_firmware qcn9070_firmware sdx20 sd480_firmware ipq6028_firmware ipq8072a_firmware sm6225_firmware ipq8074_firmware qca6574au qca9889_firmware sa8155p_firmware mdm9607 qcn5122 sd205_firmware sm8450p mdm9150 wcn6856 qcn5022 qca6564_firmware sd768g ipq6010_firmware qca1064_firmware wcn6740 qca6696 sdw2500 sa6150p qca8075 qcn9022_firmware apq8096au_firmware qcn6024 qcn9022 ipq8070a qcn9072_firmware sm7250p ipq6000_firmware sd720g_firmware sdx12 ipq8071_firmware qcs410_firmware qcn9074_firmware sd850 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Matching Score-4

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.03% / 7.22%

7 Day CHG~0.00%

Published-03 Jan, 2022 | 07:25

Updated-03 Aug, 2024 | 22:24

Possible null pointer dereference in thread cache operation handler due to lack of validation of user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2017-6178

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-0.11% / 30.75%

7 Day CHG~0.00%

Published-20 Mar, 2017 | 16:00

Updated-20 Apr, 2025 | 01:37

The IofCallDriver function in USBPcap 1.1.0.0 allows local users to gain privileges via a crafted 0x00090028 IOCTL call, which triggers a NULL pointer dereference.

Vendor-usbpcap_project n/a

Product-usbpcap n/a

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2017-0351

Matching Score-4

Assigner-NVIDIA Corporation

Matching Score-4

Assigner-NVIDIA Corporation

CVSS Score-7.8||HIGH

EPSS-0.04% / 11.54%

7 Day CHG~0.00%

Published-09 May, 2017 | 21:00

Updated-20 Apr, 2025 | 01:37

All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference caused by invalid user input may lead to denial of service or potential escalation of privileges.

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2016-8813

Matching Score-4

Assigner-NVIDIA Corporation