CVE-2026-20480

In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10960023 Note: For MT6880, MT6890, MT6980D, MT6988, MT6990 /...

EUVD-2026-52082

In Audio HAL, there is a possible system becoming unresponsive due to a race condition. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10960026 Note: For MT6880, MT6890, MT6990, MT6988 / AUTO00851250...

CVE-2026-20492

A race condition in the Audio HAL component can cause a system to become unresponsive, leading to a local denial of service . Exploitation requires User execution privileges , but no user interaction is required. The vulnerability affects specific hardware, with remediation provided via Patch ID ...

CVE-2026-20480

A heap buffer overflow in the Audio HAL component allows for a possible out of bounds write . This vulnerability can lead to a local denial of service and requires User execution privileges to exploit, though no user interaction is necessary. Affected hardware includes models MT6880, MT6890, MT69...

EUVD-2026-52067

In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10981454 Note: For MT6880, MT6890, MT6988, MT6990 / AUTO00851293...

PT-2026-67168

In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10960023 Note: For MT6880, MT6890, MT6980D, MT6988, MT6990 /...

EUVD-2026-34802

Improper access control in MediaTek Audio HAL prior to SMR Jun-2026 Release 1 allows local attackers to trigger privileged functions...

Microsoft High Definition Audio Bus Driver HDAudBus_DMA multiple irp complete requests vulnerability

Talos Vulnerability Report TALOS-2024-2008 Microsoft High Definition Audio Bus Driver HDAudBusDMA multiple irp complete requests vulnerability September 12, 2024 CVE Number CVE-2024-45383 SUMMARY A mishandling of IRP requests vulnerability exists in the HDAudBusDMA interface of Microsoft High...

CVE-2022-20256

In the Audio HAL, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-222572821...

CVE-2022-23429

An improper boundary check in audio hal service prior to SMR Feb-2022 Release 1 allows attackers to read invalid memory and it leads to application crash...

CVE-2020-0356

In the Audio HAL, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-143787559...

CVE-2020-13361

CVE-2020-13361 affects QEMU: es1370_transfer_audio in hw/audio/es1370.c does not properly validate the frame count, allowing guest OS users to trigger an out-of-bounds access during an es1370_write() on QEMU 5.0.0 and earlier. The issue is documented across multiple advisories and vendor response...

The vulnerability of the Audio Hardware Abstraction Layer interface of the Media Framework component in the Android operating system allows a hacker to increase their privileges.

The vulnerability of the Audio Hardware Abstraction Layer HAL component of the Android operating system’s Media Framework is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

Google Android Media framework audio hal elevation of privilege vulnerability

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Media framework audio hal in Android. An attacker can exploit this vulnerability to gain elevated privileges...

CVE-2017-0812

An elevation of privilege vulnerability in the Android media framework audio hal. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62873231...

UBUNTU-CVE-2017-0812

An elevation of privilege vulnerability in the Android media framework audio hal. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62873231...

HP-UX 10.x/11.x Aserver PATH Vulnerability

No description provided by source. source : http://www.securityfocus.com/bid/1929/info Aserver is a server program that ships with HP-UX versions 10.x and above that is used to interface client applications with the audio hardware. Because it talks to hardware, it is installed setuid root by...

HP-UX 10.x11.x - Aserver PATH

HP-UX 10.x11.x - Aserver PATH source: https://www.securityfocus.com/bid/1929/info Aserver is a server program that ships with HP-UX versions 10.x and above that is used to interface client applications with the audio hardware. Because it talks to hardware, it is installed setuid root by default...