CVE-2023-48697 Azure RTOS USBX Remote Code Execution Vulnerability

Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to memory buffer and pointer vulnerabilities in Azure RTOS USBX. The affected components include functions/processes in...

PT-2023-24172 · Qualcomm · Snapdragon +125

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in the Audio component when running an invalid audio recording from ADSP. No information is provided about the...

PT-2023-24171 · Qualcomm · Snapdragon +54

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue involves memory corruption in the Audio component when an SSR event is triggered after music playback has been stopped. Recommendations: At the moment, there is no...

PT-2023-24162 · Qualcomm · Snapdragon +133

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue involves memory corruption in the audio component when a callback function in the driver is invoked from the ADSP. Recommendations: At the moment, there is no information...

PT-2023-24164 · Audio · Audio

Name of the Vulnerable Software and Affected Versions: Audio affected versions not specified Description: The issue is related to memory corruption in the Audio component when processing VOC packet data from ADSP. Recommendations: At the moment, there is no information about a newer version that...

PT-2023-13818 · Qualcomm · Snapdragon +12

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to memory corruption due to improper validation of an array index in the Audio component. No information is provided about the...

PT-2023-18317 · Audio · Audio

Name of the Vulnerable Software and Affected Versions: Audio affected versions not specified Description: The issue is related to memory corruption in the Audio component during a playback session when audio effects are enabled. Recommendations: At the moment, there is no information about a newe...

PT-2023-18318 · Qualcomm · Snapdragon +30

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in the audio component when validating and mapping metadata. There is no information about the estimated number of...

PT-2023-4460 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 116.0.5845.96 Description: The issue is related to a use after free vulnerability in the Audio component of Google Chrome, which can be exploited by a remote attacker using a specially crafted HTML page. This c...

PT-2023-18333 · Qualcomm · Snapdragon +51

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in the audio component when concurrent tunnel playback or audio tunnel recording sessions are running. This can...

PT-2023-18302 · Audio · Audio

Name of the Vulnerable Software and Affected Versions: Audio affected versions not specified Description: The issue is related to memory corruption in the Audio component when processing sva model serializer using a memory size passed by the HIDL client. Recommendations: At the moment, there is n...

PT-2023-13255 · Qualcomm · Snapdragon +8

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to memory corruption in the Audio component due to an incorrect type cast during audio use-cases. Recommendations: At the moment, there is no information about ...

PT-2023-34928 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.11 Description: The issue is related to a potential null pointer dereference in the sof-audio component of the Linux Kernel. The problem arises when the swidget is not checked for NULL on sink failure in th...

PT-2023-13259 · Qualcomm · Snapdragon +40

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in the Audio component due to the use of an out-of-range pointer offset. This occurs when initiating a voice call...

Denial Of Service (DoS)

chromium is vulnerable to denial of service. The vulnerability exists due to the use after free in the Audio component in the library, allowing an attacker to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension...

CVE-2022-4179

Use after free in Audio in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. Chromium security severity: High...

The vulnerability of the Audio component in Qualcomm’s embedded software allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Audio microprogramming component in Qualcomm’s embedded chips is related to a numerical overflow during the playback of WMA format files. Exploiting this vulnerability can allow an attacker to cause system failures or execute arbitrary code...

PT-2022-4766 · Qualcomm · Snapdragon Connectivity +8

Name of the Vulnerable Software and Affected Versions: Qualcomm embedded platform software affected versions not specified Snapdragon Auto affected versions not specified Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Consumer...

Huawei Emui Out-of-Bounds Access Vulnerability

Huawei Emui is an Android-based mobile operating system developed by Huawei, a Chinese company. An out-of-bounds access vulnerability exists in Huawei EMUI version 12.0.0, which stems from the system's lax input parameter validation in the audio component. An attacker can exploit the vulnerabilit...

Huawei Emui 缓冲区错误漏洞

Huawei Emui is an Android-based mobile operating system developed by Huawei, a Chinese company. An out-of-bounds access vulnerability exists in Huawei EMUI version 12.0.0, which stems from the system's lax input parameter validation in the audio component. An attacker can exploit the vulnerabilit...