CVE-2024-38402

creationtimestamp| type| source ---|---|--- 2024-09-02 15:33:28+00:00| seen| https://t.me/cvedetector/4639 2024-11-07 17:04:54+00:00| seen| https://vulnerability.circl.lu/bundle/aaa30339-107b-4cb3-8a1a-3e5d8398b429 2024-12-16 05:11:23+00:00| seen|...

CVE-2024-33060

creationtimestamp| type| source ---|---|--- 2024-09-02 15:33:12+00:00| seen| https://t.me/cvedetector/4628 2024-12-16 05:11:23+00:00| seen| https://googleprojectzero.blogspot.com/2024/12/qualcomm-dsp-driver-unexpectedly-excavating-exploit.html 2024-12-16 16:32:27+00:00| seen|...

CVE-2024-33038

Memory corruption while passing untrusted/corrupted pointers from DSP to EVA...

CVE-2024-38402 Use After Free in DSP Services

Memory corruption while processing IOCTL call for getting group info...

CVE-2024-38402 Use After Free in DSP Services

Memory corruption while processing IOCTL call for getting group info...

CVE-2024-33060 Use After Free in DSP Service

Memory corruption when two threads try to map and unmap a single node simultaneously...

CVE-2024-33060 Use After Free in DSP Service

Memory corruption when two threads try to map and unmap a single node simultaneously...

CVE-2024-33038 Untrusted Pointer Dereference in Computer Vision

Memory corruption while passing untrusted/corrupted pointers from DSP to EVA...

CVE-2024-33038

CVE-2024-33038 involves memory corruption when untrusted or corrupted pointers are passed from DSP to EVA in a Qualcomm/Camera-related Computer Vision path. The issue is characterized as local, with low attack complexity and high impact on confidentiality, integrity, and availability. Public refe...

CVE-2024-33038 Untrusted Pointer Dereference in Computer Vision

Memory corruption while passing untrusted/corrupted pointers from DSP to EVA...

firmware: cs_dsp: Return error if block header overflows file

...

firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers

...

SUSE CVE-2024-42238

In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Return error if block header overflows file Return an error from csdsppowerup if a block header is longer than the amount of data left in the file. The previous code in csdspload and csdsploadcoeff would loop whi...

DEBIAN-CVE-2024-42237

In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Validate payload length before processing block Move the payload length check in csdspload and csdspcoeffload to be done before the block is processed. The check that the length of a block payload does not exceed...

DEBIAN-CVE-2024-42238

In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Return error if block header overflows file Return an error from csdsppowerup if a block header is longer than the amount of data left in the file. The previous code in csdspload and csdsploadcoeff would loop whi...

AZL-47595 CVE-2024-42237 affecting package kernel for versions less than 5.15.162.2-1

In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Validate payload length before processing block Move the payload length check in csdspload and csdspcoeffload to be done before the block is processed. The check that the length of a block payload does not exceed...

UBUNTU-CVE-2024-42237

In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Validate payload length before processing block Move the payload length check in csdspload and csdspcoeffload to be done before the block is processed. The check that the length of a block payload does not exceed...

SUSE CVE-2024-41038

In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Prevent buffer overrun when processing V2 alg headers Check that all fields of a V2 algorithm header fit into the available firmware data buffer. The wmfw V2 format introduced variable-length strings in the...

The vulnerability of the DSP microprogramming system in Qualcomm’s embedded chips allows a hacker to execute arbitrary code.

The vulnerability of the DSP microprogramming system in Qualcomm’s embedded chips lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

DEBIAN-CVE-2024-41038

In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Prevent buffer overrun when processing V2 alg headers Check that all fields of a V2 algorithm header fit into the available firmware data buffer. The wmfw V2 format introduced variable-length strings in the...