502 matches found
kernel: ASoC: pxa: fix null-pointer dereference in filter()
A flaw was found in the Linux kernel ASoC pxa audio driver. The function filter used kasprintf to allocate a formatted string but did not check whether the allocation succeeded before passing the result to strcmp. If memory allocation fails and kasprintf returns NULL, this results in a NULL point...
CVE-2023-20670
In audio, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07648710; Issue ID: ALPS07648710...
SUSE CVE-2008-5033
The chipcommand function in drivers/media/video/tvaudio.c in the Linux kernel 2.6.25.x before 2.6.25.19, 2.6.26.x before 2.6.26.7, and 2.6.27.x before 2.6.27.3 allows attackers to cause a denial of service NULL function pointer dereference and OOPS via unknown vectors...
CVE-2022-34405
An improper access control vulnerability was identified in the Realtek audio driver. A local authenticated malicious user may potentially exploit this vulnerability by waiting for an administrator to launch the application and attach to the process to elevate privileges on the system...
Dell Client 安全漏洞
The Dell Client platforms are a client platform from Dell USA. A security vulnerability exists in Dell Client, which stems from an incorrect access control vulnerability in the Realtek audio driver, where a malicious, locally authenticated user may be able to elevate system privileges by waiting...
CVE-2022-34405
An improper access control vulnerability was identified in the Realtek audio driver. A local authenticated malicious user may potentially exploit this vulnerability by waiting for an administrator to launch the application and attach to the process to elevate privileges on the system...
CVE-2022-34405
An improper access control vulnerability was identified in the Realtek audio driver. A local authenticated malicious user may potentially exploit this vulnerability by waiting for an administrator to launch the application and attach to the process to elevate privileges on the system...
CVE-2022-34405
Summary: CVE-2022-34405 describes an improper access control in the Realtek audio driver that could allow privilege escalation. A local authenticated user could exploit this by waiting for an administrator to launch an application and then attach to the process to gain elevated privileges. The is...
PT-2023-13383 · Realtek · Realtek Audio Driver
Name of the Vulnerable Software and Affected Versions: Realtek audio driver affected versions not specified Description: An improper access control issue was identified. A local authenticated malicious user may potentially exploit this by waiting for an administrator to launch the application and...
Realtek High-Definition Audio Driver Vulnerability - Lenovo Support US
No description provided...
CVE-2019-19705
Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before 6.0.8882.1 and 20KH and 20KG before 6.0.8907.1 and on many other Lenovo and non-Lenovo products, mishandles DLL preloading...
Design/Logic Flaw
Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before 6.0.8882.1 and 20KH and 20KG before 6.0.8907.1 and on many other Lenovo and non-Lenovo products, mishandles DLL preloading...
Realtek HD Audio Driver December 2022 Security Update
HP has been informed of a potential security vulnerability identified in some Realtek® High-Definition Audio Windows drivers which might allow denial of service system crash. Realtek has released updated drivers to mitigate the potential vulnerability. Realtek released updates to mitigate the...
CVE-2022-39134
In audio driver, there is a use after free due to a race condition. This could lead to local denial of service in kernel...
CVE-2022-39134
In audio driver, there is a use after free due to a race condition. This could lead to local denial of service in kernel...
Race condition
In audio driver, there is a use after free due to a race condition. This could lead to local denial of service in kernel...
CVE-2022-39134
CVE-2022-39134 is described in the sources as a use-after-free vulnerability caused by a race condition in the audio driver, leading to local denial of service in the kernel. Public documents confirm the issue exists and affect kernel/audio pathways, with a CVSS v3.1 score of 4.7 (Medium) reflect...
PT-2022-24758 · Unknown · Audio Driver
Name of the Vulnerable Software and Affected Versions: Audio driver affected versions not specified Description: The issue is related to a use after free due to a race condition in the audio driver. This could lead to a local denial of service in the kernel. Recommendations: At the moment, there ...