CVE-2022-23432

CVE-2022-23432 records an improper input validation in the SMC_SRPMB_WSM handler of RPMB ldfw, before SMR Feb-2022 Release 1, that allows arbitrary memory writes and code execution. Affected: RPMB ldfw/SMSC SRPMB WSM handler (pre-Release 1 Feb-2022). Impact: local attacker could corrupt memory an...

CVE-2022-23428

CVE-2022-23428 : An improper boundary check in the eden_runtime HAL service before SMR Feb-2022 Release 1 allows arbitrary memory write and code execution. The vulnerability is documented across multiple sources (NVD, CNVD, Red Hat, etc.) and is associated with Google Android. Affected component:...

CVE-2022-23432: Improper Input Validation

An improper input validation in SMCSRPMBWSM handler of RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution...

PT-2022-15987

Name of the Vulnerable Software and Affected Versions eden runtime versions prior to SMR Feb-2022 Release 1 Description The issue is caused by an improper boundary check in the hal service, allowing for arbitrary memory write and code execution. Recommendations For versions prior to SMR Feb-2022...

CVE-2022-23431: Buffer Copy without Checking Size of Input

An improper boundary check in RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution...

CVE-2022-23428: Buffer Copy without Checking Size of Input

An improper boundary check in edenruntime hal service prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution...

CVE-2022-22265

An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution...

CVE-2022-22265

An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

CVE-2022-22265: Improper Check or Handling of Exceptional Conditions

An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution...

CVE-2021-38917: Undefined Security Weakness

IBM PowerVM Hypervisor FW860, FW940, and FW950 could allow an attacker that gains service access to the FSP can read and write arbitrary host system memory through a series of carefully crafted service procedures. IBM X-Force ID: 210018...

PT-2021-22321

Name of the Vulnerable Software and Affected Versions IBM PowerVM Hypervisor versions FW860, FW940, and FW950 Description The issue allows an attacker with service access to the FSP to read and write arbitrary host system memory through a series of carefully crafted service procedures...

Design/Logic Flaw

An improper boundary check in securelog of LDFW and BL31 prior to SMR Dec-2021 Release 1 allows arbitrary memory write and code execution...

CVE-2021-25518

CVE-2021-25518 affects Samsung LDFW and BL31. The issue is an improper boundary check in the secure_log before SMR Dec-2021 Release 1, enabling arbitrary memory write and code execution. Reported impact includes local access with partial confidentiality/integrity/availability implications as per ...

CVE-2021-25518: Improper Restriction of Operations within the Bounds of a Memory Buffer

An improper boundary check in securelog of LDFW and BL31 prior to SMR Dec-2021 Release 1 allows arbitrary memory write and code execution...

PT-2021-21130

Name of the Vulnerable Software and Affected Versions: OPTEE-OS CSU driver for NXP i.MX SoC devices affected versions not specified Description: The issue involves a lack of security access configuration in the OPTEE-OS CSU driver for several NXP i.MX SoC device models. This results in a TrustZon...

CVE-2021-25478

A possible stack-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execution...

Heap overflow

A possible heap-based buffer overflow vulnerability in DSP kernel driver prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execution...

CVE-2021-25475

A possible heap-based buffer overflow vulnerability in DSP kernel driver prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execution...

CVE-2021-25475

Summary of CVE-2021-25475 : The issue is a heap-based buffer overflow in the DSP kernel driver, before Samsung SMR Oct-2021 Release 1. This flaw can lead to arbitrary memory writes and code execution within the kernel context on affected Samsung devices. Affected component: DSP kernel driver. Roo...

CVE-2021-25479: Heap-based Buffer Overflow

A possible heap-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execution...