CVE-2022-27834: Time-of-check Time-of-use (TOCTOU) Race Condition

Use after free vulnerability in dspcontextunloadgraph function of DSP driver prior to SMR Apr-2022 Release 1 allows attackers to perform malicious actions...

PT-2022-18622

Name of the Vulnerable Software and Affected Versions DSP driver versions prior to SMR Apr-2022 Release 1 Description The issue is related to improper input validation in the DSP driver, which allows an out-of-bounds write by integer overflow. Recommendations For versions prior to SMR Apr-2022...

多款Qualcomm产品输入验证错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc., and is from time to time fabricated on the surface of semiconductor wafers. An input validation error vulnerability exists in multiple Qualcom...

PT-2022-7475

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the dsp pipeline build function in the mISDN component of the Linux kernel. It involves the allocation of a dup pointer by kstrdupcfg, which is then updated by...

CVE-2021-35077

Possible use after free scenario in compute offloads to DSP while multiple calls spawn a dynamic process in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

Design/Logic Flaw

Possible use after free scenario in compute offloads to DSP while multiple calls spawn a dynamic process in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-35077

CVE-2021-35077 describes a use-after-free in Qualcomm Snapdragon DSP offload handling when multiple calls spawn a dynamic process, affecting Snapdragon Auto/Compute/Connectivity/Industrial IOT/Mobile. The Red Hat entry confirms a possible use-after-free in compute offloads to DSP within Snapdrago...

CVE-2021-35077: Use After Free

Possible use after free scenario in compute offloads to DSP while multiple calls spawn a dynamic process in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2022-21205

Improper restriction of XML external entity reference in DSP Builder Pro for IntelR QuartusR Prime Pro Edition before version 21.3 may allow an unauthenticated user to potentially enable information disclosure via network access...

CVE-2022-21205

Improper restriction of XML external entity reference in DSP Builder Pro for IntelR QuartusR Prime Pro Edition before version 21.3 may allow an unauthenticated user to potentially enable information disclosure via network access...

Xxe

Improper restriction of XML external entity reference in DSP Builder Pro for IntelR QuartusR Prime Pro Edition before version 21.3 may allow an unauthenticated user to potentially enable information disclosure via network access...

CVE-2022-21205

Improper restriction of XML external entity reference in DSP Builder Pro for IntelR QuartusR Prime Pro Edition before version 21.3 may allow an unauthenticated user to potentially enable information disclosure via network access...

CVE-2022-21205: Improper Restriction of XML External Entity Reference

Improper restriction of XML external entity reference in DSP Builder Pro for IntelR QuartusR Prime Pro Edition before version 21.3 may allow an unauthenticated user to potentially enable information disclosure via network access...

PT-2022-14923

Name of the Vulnerable Software and Affected Versions DSP Builder Pro for IntelR QuartusR Prime Pro Edition versions prior to 21.3 Description The issue is related to an improper restriction of XML external entity reference, which may allow an unauthenticated user to potentially enable informatio...

PT-2021-11924 · Aom · Aom

Name of the Vulnerable Software and Affected Versions: AOM version 2.0.1 Description: The issue is related to a segmentation violation in the component aom dsp/x86/obmc sad avx2.c. Recommendations: For AOM version 2.0.1, consider restricting access to the vulnerable component aom dsp/x86/obmc sad...

[SECURITY] Fedora 34 Update: sdrpp-1.0.4-3.fc34

SDR++ is a cross-platform and open source SDR software with the aim of being bloat free and simple to use. Features - Wide hardware support both through SoapySDR and dedicated modules - SIMD accelerated DSP - Full waterfall update when possible. Makes browsing signals easier and more pleasant...

[SECURITY] Fedora 35 Update: sdrpp-1.0.4-3.fc35

SDR++ is a cross-platform and open source SDR software with the aim of being bloat free and simple to use. Features - Wide hardware support both through SoapySDR and dedicated modules - SIMD accelerated DSP - Full waterfall update when possible. Makes browsing signals easier and more pleasant...

Fedora: Security Advisory for sdrpp (FEDORA-2021-f8ba4a690e)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Mediatek audio buffer overflow vulnerability

Mediatek audio is an audio component of a chip from China's MediaTek Mediatek. A security vulnerability exists in the Mediatek audio DSP that stems from a possible out-of-bounds write in the audio DSP due to incorrect boundary checking. An attacker could exploit the vulnerability to cause a local...

CVE-2021-0661

In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05844413; Issue ID: ALPS05844413...