# CVEs published 2019-12-12

123 CVEs were published on December 12, 2019: 4 critical, 5 high. Days are UTC.

- [CVE-2019-16774](https://cve.now/CVE-2019-16774.md): Object injection in cookie driver (CVSS 4.4, PHPSocialNetwork phpfastcache · phpfastcache/phpfastcache)
- [CVE-2019-12420](https://cve.now/CVE-2019-12420.md): In Apache SpamAssassin before 3.4.3, a message can be crafted in a way to use excessive resources. (no CVSS, Apache SpamAssassin)
- [CVE-2018-11805](https://cve.now/CVE-2018-11805.md): In Apache SpamAssassin before 3.4.3, nefarious CF files can be configured to run system commands without any output or errors. (no CVSS, Apache SpamAssassin)
- [CVE-2019-5062](https://cve.now/CVE-2019-5062.md): An exploitable denial-of-service vulnerability exists in the 802.11w security state handling for hostapd 2.6 connected clients with valid 80 (CVSS 7.4, W1.f1)
- [CVE-2019-5061](https://cve.now/CVE-2019-5061.md): An exploitable denial-of-service vulnerability exists in the hostapd 2.6, where an attacker could trigger AP to send IAPP location updates f (CVSS 7.4, W1.f1)
- [CVE-2019-5144](https://cve.now/CVE-2019-5144.md): An exploitable heap underflow vulnerability exists in the derive\_taps\_and\_gains function in kdu\_v7ar.dll of Kakadu Software SDK 7.10.2. (CVSS 8.1, Kakadu Software)
- [CVE-2019-3951](https://cve.now/CVE-2019-3951.md): Advantech WebAccess before 8.4.3 allows unauthenticated remote attackers to execute arbitrary code or cause a denial of service (memory corr (no CVSS, Advantech WebAccess/SCADA)
- [CVE-2019-19771](https://cve.now/CVE-2019-19771.md): The lodahs package 0.0.1 for Node.js is a Trojan horse, and may have been installed by persons who mistyped the lodash package name. (no CVSS, lodahs)
- [CVE-2019-19767](https://cve.now/CVE-2019-19767.md): The Linux kernel before 5.4.2 mishandles ext4\_expand\_extra\_isize, as demonstrated by use-after-free errors in \_\_ext4\_expand\_extra\_isize and (no CVSS)
- [CVE-2019-19769](https://cve.now/CVE-2019-19769.md): In the Linux kernel 5.3.10, there is a use-after-free (read) in the perf\_trace\_lock\_acquire function (related to include/trace/events/lock.h (no CVSS)
- [CVE-2019-19770](https://cve.now/CVE-2019-19770.md): In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs\_remove function in fs/debugfs/inode.c (which is used to remove (no CVSS)
- [CVE-2019-19768](https://cve.now/CVE-2019-19768.md): In the Linux kernel 5.4.0-rc2, there is a use-after-free (read) in the \_\_blk\_add\_trace function in kernel/trace/blktrace.c (which is used to (no CVSS)
- [CVE-2019-18332](https://cve.now/CVE-2019-18332.md): A vulnerability has been identified in SPPA-T3000 Application Server (All versions \< Service Pack R8.2 SP2). (no CVSS, Siemens SPPA-T3000 Application Server)
- [CVE-2019-18333](https://cve.now/CVE-2019-18333.md): A vulnerability has been identified in SPPA-T3000 Application Server (All versions \< Service Pack R8.2 SP2). (no CVSS, Siemens SPPA-T3000 Application Server)
- [CVE-2019-18334](https://cve.now/CVE-2019-18334.md): A vulnerability has been identified in SPPA-T3000 Application Server (All versions \< Service Pack R8.2 SP2). (no CVSS, Siemens SPPA-T3000 Application Server)
- [CVE-2019-18335](https://cve.now/CVE-2019-18335.md): A vulnerability has been identified in SPPA-T3000 Application Server (All versions \< Service Pack R8.2 SP2). (no CVSS, Siemens SPPA-T3000 Application Server)
- [CVE-2019-18337](https://cve.now/CVE-2019-18337.md): A vulnerability has been identified in Control Center Server (CCS) (All versions \< V1.5.0). (CVSS 9.8, Siemens Control Center Server)
- [CVE-2019-18338](https://cve.now/CVE-2019-18338.md): A vulnerability has been identified in Control Center Server (CCS) (All versions \< V1.5.0). (CVSS 7.7, Siemens Control Center Server)
- [CVE-2019-18339](https://cve.now/CVE-2019-18339.md): A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions \< V5.0.0). (CVSS 9.8, Siemens SiNVR/SiVMS Video Server)
- [CVE-2019-18340](https://cve.now/CVE-2019-18340.md): A vulnerability has been identified in Control Center Server (CCS) (All versions \< V1.5.0), Control Center Server (CCS) (All versions \>= V1. (CVSS 5.5, Siemens Control Center Server · Siemens SiNVR/SiVMS Video S…)
- [CVE-2019-18341](https://cve.now/CVE-2019-18341.md): A vulnerability has been identified in Control Center Server (CCS) (All versions \< V1.5.0). (CVSS 5.3, Siemens Control Center Server)
- [CVE-2019-18342](https://cve.now/CVE-2019-18342.md): A vulnerability has been identified in Control Center Server (CCS) (All versions \< V1.5.0). (CVSS 9.9, Siemens Control Center Server)
- [CVE-2019-18307](https://cve.now/CVE-2019-18307.md): A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). (no CVSS, Siemens SPPA-T3000 MS3000 Migration Server)
- [CVE-2019-18308](https://cve.now/CVE-2019-18308.md): A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). (no CVSS, Siemens SPPA-T3000 MS3000 Migration Server)
- [CVE-2019-18309](https://cve.now/CVE-2019-18309.md): A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). (no CVSS, Siemens SPPA-T3000 MS3000 Migration Server)
- [CVE-2019-18310](https://cve.now/CVE-2019-18310.md): A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). (no CVSS, Siemens SPPA-T3000 MS3000 Migration Server)
- [CVE-2019-18311](https://cve.now/CVE-2019-18311.md): A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). (no CVSS, Siemens SPPA-T3000 MS3000 Migration Server)
- [CVE-2019-18312](https://cve.now/CVE-2019-18312.md): A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). (no CVSS, Siemens SPPA-T3000 MS3000 Migration Server)
- [CVE-2019-18313](https://cve.now/CVE-2019-18313.md): A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). (no CVSS, Siemens SPPA-T3000 MS3000 Migration Server)
- [CVE-2019-18314](https://cve.now/CVE-2019-18314.md): A vulnerability has been identified in SPPA-T3000 Application Server (All versions \< Service Pack R8.2 SP2). (no CVSS, Siemens SPPA-T3000 Application Server)
- [CVE-2019-18315](https://cve.now/CVE-2019-18315.md): A vulnerability has been identified in SPPA-T3000 Application Server (All versions \< Service Pack R8.2 SP2). (no CVSS, Siemens SPPA-T3000 Application Server)
- [CVE-2019-18316](https://cve.now/CVE-2019-18316.md): A vulnerability has been identified in SPPA-T3000 Application Server (All versions \< Service Pack R8.2 SP2). (no CVSS, Siemens SPPA-T3000 Application Server)
- [CVE-2019-18317](https://cve.now/CVE-2019-18317.md): A vulnerability has been identified in SPPA-T3000 Application Server (All versions \< Service Pack R8.2 SP2). (no CVSS, Siemens SPPA-T3000 Application Server)
- [CVE-2019-18318](https://cve.now/CVE-2019-18318.md): A vulnerability has been identified in SPPA-T3000 Application Server (All versions \< Service Pack R8.2 SP2). (no CVSS, Siemens SPPA-T3000 Application Server)
- [CVE-2019-18319](https://cve.now/CVE-2019-18319.md): A vulnerability has been identified in SPPA-T3000 Application Server (All versions \< Service Pack R8.2 SP2). (no CVSS, Siemens SPPA-T3000 Application Server)
- [CVE-2019-18320](https://cve.now/CVE-2019-18320.md): A vulnerability has been identified in SPPA-T3000 Application Server (All versions \< Service Pack R8.2 SP2). (no CVSS, Siemens SPPA-T3000 Application Server)
- [CVE-2019-18321](https://cve.now/CVE-2019-18321.md): A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). (no CVSS, Siemens SPPA-T3000 MS3000 Migration Server)
- [CVE-2019-18322](https://cve.now/CVE-2019-18322.md): A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). (no CVSS, Siemens SPPA-T3000 MS3000 Migration Server)
- [CVE-2019-18323](https://cve.now/CVE-2019-18323.md): A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). (no CVSS, Siemens SPPA-T3000 MS3000 Migration Server)
- [CVE-2019-18324](https://cve.now/CVE-2019-18324.md): A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). (no CVSS, Siemens SPPA-T3000 MS3000 Migration Server)
- [CVE-2019-18325](https://cve.now/CVE-2019-18325.md): A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). (no CVSS, Siemens SPPA-T3000 MS3000 Migration Server)
- [CVE-2019-18326](https://cve.now/CVE-2019-18326.md): A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). (no CVSS, Siemens SPPA-T3000 MS3000 Migration Server)
- [CVE-2019-18327](https://cve.now/CVE-2019-18327.md): A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). (no CVSS, Siemens SPPA-T3000 MS3000 Migration Server)
- [CVE-2019-18328](https://cve.now/CVE-2019-18328.md): A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). (no CVSS, Siemens SPPA-T3000 MS3000 Migration Server)
- [CVE-2019-18329](https://cve.now/CVE-2019-18329.md): A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). (no CVSS, Siemens SPPA-T3000 MS3000 Migration Server)
- [CVE-2019-18330](https://cve.now/CVE-2019-18330.md): A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). (no CVSS, Siemens SPPA-T3000 MS3000 Migration Server)
- [CVE-2019-18331](https://cve.now/CVE-2019-18331.md): A vulnerability has been identified in SPPA-T3000 Application Server (All versions \< Service Pack R8.2 SP2). (no CVSS, Siemens SPPA-T3000 Application Server)
- [CVE-2019-18283](https://cve.now/CVE-2019-18283.md): A vulnerability has been identified in SPPA-T3000 Application Server (All versions \< Service Pack R8.2 SP2). (no CVSS, Siemens SPPA-T3000 Application Server)
- [CVE-2019-18284](https://cve.now/CVE-2019-18284.md): A vulnerability has been identified in SPPA-T3000 Application Server (All versions \< Service Pack R8.2 SP2). (no CVSS, Siemens SPPA-T3000 Application Server)
- [CVE-2019-18285](https://cve.now/CVE-2019-18285.md): A vulnerability has been identified in SPPA-T3000 Application Server (All versions \< Service Pack R8.2 SP2). (no CVSS, Siemens SPPA-T3000 Application Server)
- [CVE-2019-18286](https://cve.now/CVE-2019-18286.md): A vulnerability has been identified in SPPA-T3000 Application Server (All versions \< Service Pack R8.2 SP2). (no CVSS, Siemens SPPA-T3000 Application Server)
- [CVE-2019-18287](https://cve.now/CVE-2019-18287.md): A vulnerability has been identified in SPPA-T3000 Application Server (All versions \< Service Pack R8.2 SP2). (no CVSS, Siemens SPPA-T3000 Application Server)
- [CVE-2019-18288](https://cve.now/CVE-2019-18288.md): A vulnerability has been identified in SPPA-T3000 Application Server (All versions \< Service Pack R8.2 SP2). (no CVSS, Siemens SPPA-T3000 Application Server)
- [CVE-2019-18289](https://cve.now/CVE-2019-18289.md): A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). (no CVSS, Siemens SPPA-T3000 MS3000 Migration Server)
- [CVE-2019-18290](https://cve.now/CVE-2019-18290.md): A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). (no CVSS, Siemens SPPA-T3000 MS3000 Migration Server)
- [CVE-2019-18291](https://cve.now/CVE-2019-18291.md): A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). (no CVSS, Siemens SPPA-T3000 MS3000 Migration Server)
- [CVE-2019-18292](https://cve.now/CVE-2019-18292.md): A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). (no CVSS, Siemens SPPA-T3000 MS3000 Migration Server)
- [CVE-2019-18293](https://cve.now/CVE-2019-18293.md): A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). (no CVSS, Siemens SPPA-T3000 MS3000 Migration Server)
- [CVE-2019-18294](https://cve.now/CVE-2019-18294.md): A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). (no CVSS, Siemens SPPA-T3000 MS3000 Migration Server)
- [CVE-2019-18295](https://cve.now/CVE-2019-18295.md): A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). (no CVSS, Siemens SPPA-T3000 MS3000 Migration Server)
- [CVE-2019-18296](https://cve.now/CVE-2019-18296.md): A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). (no CVSS, Siemens SPPA-T3000 MS3000 Migration Server)
- [CVE-2019-18297](https://cve.now/CVE-2019-18297.md): A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). (no CVSS, Siemens SPPA-T3000 MS3000 Migration Server)
- [CVE-2019-18298](https://cve.now/CVE-2019-18298.md): A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). (no CVSS, Siemens SPPA-T3000 MS3000 Migration Server)
- [CVE-2019-18299](https://cve.now/CVE-2019-18299.md): A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). (no CVSS, Siemens SPPA-T3000 MS3000 Migration Server)
- [CVE-2019-18300](https://cve.now/CVE-2019-18300.md): A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). (no CVSS, Siemens SPPA-T3000 MS3000 Migration Server)
- [CVE-2019-18301](https://cve.now/CVE-2019-18301.md): A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). (no CVSS, Siemens SPPA-T3000 MS3000 Migration Server)
- [CVE-2019-18302](https://cve.now/CVE-2019-18302.md): A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). (no CVSS, Siemens SPPA-T3000 MS3000 Migration Server)
- [CVE-2019-18303](https://cve.now/CVE-2019-18303.md): A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). (no CVSS, Siemens SPPA-T3000 MS3000 Migration Server)
- [CVE-2019-18304](https://cve.now/CVE-2019-18304.md): A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). (no CVSS, Siemens SPPA-T3000 MS3000 Migration Server)
- [CVE-2019-18305](https://cve.now/CVE-2019-18305.md): A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). (no CVSS, Siemens SPPA-T3000 MS3000 Migration Server)
- [CVE-2019-18306](https://cve.now/CVE-2019-18306.md): A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). (no CVSS, Siemens SPPA-T3000 MS3000 Migration Server)
- [CVE-2019-13930](https://cve.now/CVE-2019-13930.md): A vulnerability has been identified in XHQ (All versions \< V6.0.0.2). (no CVSS, Siemens AG XHQ)
- [CVE-2019-13931](https://cve.now/CVE-2019-13931.md): A vulnerability has been identified in XHQ (All versions \< V6.0.0.2). (no CVSS, Siemens AG XHQ)
- [CVE-2019-13932](https://cve.now/CVE-2019-13932.md): A vulnerability has been identified in XHQ (All versions \< V6.0.0.2). (no CVSS, Siemens AG XHQ)
- [CVE-2019-13942](https://cve.now/CVE-2019-13942.md): A vulnerability has been identified in EN100 Ethernet module DNP3 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versi (no CVSS, Siemens AG EN100 Ethernet module DNP3 variant · Siemens… +3)
- [CVE-2019-13943](https://cve.now/CVE-2019-13943.md): A vulnerability has been identified in EN100 Ethernet module DNP3 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versi (no CVSS, Siemens AG EN100 Ethernet module DNP3 variant · Siemens… +3)
- [CVE-2019-13944](https://cve.now/CVE-2019-13944.md): A vulnerability has been identified in EN100 Ethernet module DNP3 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versi (no CVSS, Siemens AG EN100 Ethernet module DNP3 variant · Siemens… +3)
- [CVE-2019-13947](https://cve.now/CVE-2019-13947.md): A vulnerability has been identified in Control Center Server (CCS) (All versions \< V1.5.0). (CVSS 4.9, Siemens Control Center Server)
- [CVE-2019-19766](https://cve.now/CVE-2019-19766.md): The Bitwarden server through 1.32.0 has a potentially unwanted KDF. (no CVSS)
- [CVE-2019-4606](https://cve.now/CVE-2019-4606.md): IBM DB2 High Performance Unload load for LUW 6.1 and 6.5 could allow a local attacker to execute arbitrary code on the system, caused by an (CVSS 7.4, IBM DB2 High Performance Unload load for LUW)
- [CVE-2019-19198](https://cve.now/CVE-2019-19198.md): The Scoutnet Kalender plugin 1.1.0 for WordPress allows XSS. (no CVSS)
- [CVE-2019-18345](https://cve.now/CVE-2019-18345.md): A reflected XSS issue was discovered in DAViCal through 1.1.8. (no CVSS)
- [CVE-2019-17358](https://cve.now/CVE-2019-17358.md): Cacti through 1.2.7 is affected by multiple instances of lib/functions.php unsafe deserialization of user-controlled data to populate arrays (no CVSS)
- [CVE-2019-19248](https://cve.now/CVE-2019-19248.md): Electronic Arts Origin through 10.5.x allows Elevation of Privilege (issue 2 of 2). (no CVSS)
- [CVE-2019-19247](https://cve.now/CVE-2019-19247.md): Electronic Arts Origin through 10.5.x allows Elevation of Privilege (issue 1 of 2). (no CVSS)
- [CVE-2019-17428](https://cve.now/CVE-2019-17428.md): An issue was discovered in Intesync Solismed 3.3sp1. (no CVSS)
- [CVE-2019-16246](https://cve.now/CVE-2019-16246.md): Intesync Solismed 3.3sp1 allows Local File Inclusion (LFI), a different vulnerability than CVE-2019-15931. (no CVSS)
- [CVE-2019-15936](https://cve.now/CVE-2019-15936.md): Intesync Solismed 3.3sp allows Insecure File Upload. (no CVSS)
- [CVE-2019-15935](https://cve.now/CVE-2019-15935.md): Intesync Solismed 3.3sp has XSS. (no CVSS)
- [CVE-2019-15934](https://cve.now/CVE-2019-15934.md): Intesync Solismed 3.3sp has CSRF. (no CVSS)
- [CVE-2019-15933](https://cve.now/CVE-2019-15933.md): Intesync Solismed 3.3sp has SQL Injection. (no CVSS)
- [CVE-2019-15932](https://cve.now/CVE-2019-15932.md): Intesync Solismed 3.3sp has Incorrect Access Control. (no CVSS)
- [CVE-2019-15931](https://cve.now/CVE-2019-15931.md): Intesync Solismed 3.3sp allows Directory Traversal, a different vulnerability than CVE-2019-16246. (no CVSS)
- [CVE-2019-15930](https://cve.now/CVE-2019-15930.md): Intesync Solismed 3.3sp allows Clickjacking. (no CVSS)
- [CVE-2019-13927](https://cve.now/CVE-2019-13927.md): A vulnerability has been identified in Desigo PX automation controllers PXC00-E.D, PXC50-E.D, PXC100-E.D, PXC200-E.D with Desigo PX Web modu (no CVSS, Siemens AG Desigo PX automation controllers PXC00-E.D, P… +1)
- [CVE-2019-13945](https://cve.now/CVE-2019-13945.md): A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. (no CVSS, Siemens AG SIMATIC S7-1200 CPU family · Siemens AG SIMA… +14)
- [CVE-2019-14849](https://cve.now/CVE-2019-14849.md): A vulnerability was found in 3scale before version 2.6, did not set the HTTPOnly attribute on the user session cookie. (CVSS 4.6, 3scale)
- [CVE-2019-2337](https://cve.now/CVE-2019-2337.md): While Skipping unknown IES, EMM is reading the buffer even if the no of bytes to read are more than message length which may cause device to (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-2338](https://cve.now/CVE-2019-2338.md): Crafted image that has a valid signature from a non-QC entity can be loaded which can read/write memory that belongs to the secure world in (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-2319](https://cve.now/CVE-2019-2319.md): HLOS could corrupt CPZ page table memory for S1 managed VMs in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Cons (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-2320](https://cve.now/CVE-2019-2320.md): Possible out of bounds write in a MT SMS/SS scenario due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapd (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-2321](https://cve.now/CVE-2019-2321.md): Incorrect length used while validating the qsee log buffer sent from HLOS which could then lead to remap conflict in Snapdragon Auto, Snapdr (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-2288](https://cve.now/CVE-2019-2288.md): Out of bound write in TZ while copying the secure dump structure on HLOS provided buffer as a part of memory dump in Snapdragon Auto, Snapdr (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-2310](https://cve.now/CVE-2019-2310.md): Out of bound read would occur while trying to read action category and action ID without validating the action length of the Rx Frame body i (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…)
- [CVE-2019-10571](https://cve.now/CVE-2019-10571.md): Snapshot of IB can lead to invalid address access due to missing check for size in the related function in Snapdragon Auto, Snapdragon Compu (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-10592](https://cve.now/CVE-2019-10592.md): Possible integer overflow while multiplying two integers of 32 bit in QDCM API of get display modes as there is no check on the maximum mode (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-10618](https://cve.now/CVE-2019-10618.md): Driver may access an invalid address while processing IO control due to lack of check of address validation in Snapdragon Connectivity in QC (no CVSS, Qualcomm Snapdragon Connectivity)
- [CVE-2019-10555](https://cve.now/CVE-2019-10555.md): Buffer overflow can occur due to usage of wrong datatype and missing length check before copying into buffer in Snapdragon Auto, Snapdragon (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-10559](https://cve.now/CVE-2019-10559.md): Accessing data buffer beyond the available data while parsing ogg clip can lead to null-pointer dereference and then memory corruption in Sn (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-10520](https://cve.now/CVE-2019-10520.md): An unprivileged application can allocate GPU memory by calling memory allocation ioctl function and can exhaust all the memory which results (no CVSS, Qualcomm Snapdragon Mobile, Snapdragon Voice & Music)
- [CVE-2019-10530](https://cve.now/CVE-2019-10530.md): Lack of check of data truncation on user supplied data in kernel leads to buffer overflow in Snapdragon Auto, Snapdragon Consumer IOT, Snapd (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…)
- [CVE-2019-10545](https://cve.now/CVE-2019-10545.md): Null pointer dereference issue in kernel due to missing check related to LLC support in GPU in Snapdragon Auto, Snapdragon Consumer Electron (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…)
- [CVE-2019-10494](https://cve.now/CVE-2019-10494.md): Race condition between the camera functions due to lack of resource lock which will lead to memory corruption and UAF issue in Snapdragon Au (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…)
- [CVE-2019-10511](https://cve.now/CVE-2019-10511.md): Possibility of memory overflow while decoding GSNDCP compressed mode PDU in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Sn (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-10485](https://cve.now/CVE-2019-10485.md): Infinite loop while decoding compressed data can lead to overrun condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-10493](https://cve.now/CVE-2019-10493.md): Position determination accuracy may be degraded due to wrongly decoded information in Snapdragon Auto, Snapdragon Compute, Snapdragon Consum (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-10484](https://cve.now/CVE-2019-10484.md): Use after free issue occurs when command destructors access dynamically allocated response buffer which is already deallocated during previo (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-19748](https://cve.now/CVE-2019-19748.md): The Work Time Calendar app before 4.7.1 for Jira allows XSS. (no CVSS)
- [CVE-2019-19746](https://cve.now/CVE-2019-19746.md): make\_arrow in arrow.c in Xfig fig2dev 3.2.7b allows a segmentation fault and out-of-bounds write because of an integer overflow via a large (no CVSS)
- [CVE-2019-19740](https://cve.now/CVE-2019-19740.md): Octeth Oempro 4.7 and 4.8 allow SQL injection. (no CVSS)
- [CVE-2017-18640](https://cve.now/CVE-2017-18640.md): The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564. (no CVSS, org.yaml:snakeyaml)
- [CVE-2019-19726](https://cve.now/CVE-2019-19726.md): OpenBSD through 6.6 allows local users to escalate to root because a check for LD\_LIBRARY\_PATH in setuid programs can be defeated by setting (no CVSS)
- [CVE-2019-19750](https://cve.now/CVE-2019-19750.md): minerstat msOS before 2019-10-23 does not have a unique SSH key for each instance of the product. (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-12-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.