CVE-2024-43822 ASoc: PCM6240: Return directly after a failed devm_kzalloc() in pcmdevice_i2c_probe()

In the Linux kernel, the following vulnerability has been resolved: ASoc: PCM6240: Return directly after a failed devmkzalloc in pcmdevicei2cprobe The value “-ENOMEM” was assigned to the local variable “ret” in one if branch after a devmkzalloc call failed at the beginning. This error code will...

ASoC: SOF: ipc4-topology: Fix input format query of process modules without base extension

...

kernel: Linux kernel: Denial of Service in ASoC wcd938x codec due to improper error handling

A flaw was found in the Linux kernel's ASoC wcd938x codec component. This vulnerability stems from improper error handling during the initialization of the Multi-Band Headset Controller MBHC. A local attacker with low privileges could exploit this by triggering a specific sequence of events,...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a denial of service issue in the audio when calling the callback function of the ASM driver...

CVE-2023-30667

Improper access control in Audio system service prior to SMR Jul-2023 Release 1 allows attacker to send broadcast with system privilege...

CVE-2023-30667

Improper access control in Audio system service prior to SMR Jul-2023 Release 1 allows attacker to send broadcast with system privilege...

Improper access control

Improper access control in Audio system service prior to SMR Jul-2023 Release 1 allows attacker to send broadcast with system privilege...

CVE-2023-30667

Improper access control in Audio system service prior to SMR Jul-2023 Release 1 allows attacker to send broadcast with system privilege...

CVE-2023-30667

CVE-2023-30667 describes an improper access control in the Audio system service on Samsung devices prior to the SMR Jul-2023 Release 1, enabling a local attacker to broadcast with system privileges. Affected component is the Audio system service; root cause is access control weakness allowing ele...

kernel: Linux kernel: Denial of Service in ASoC Mediatek due to refcount leak

A flaw was found in the Linux kernel. A local user could exploit a refcount leak in the Audio System on Chip ASoC Mediatek component, specifically within the mt8183mt6358ts3a227max98357devprobe function. This vulnerability could lead to a Denial of Service DoS due to resource exhaustion...

SUSE CVE-2009-2670

The audio system in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to java.lang.System properties by 1 untrusted applets and 2 Java Web Start applications, which allows context-dependent attackers to obtain sensiti...

The vulnerability of the CRAS component of the Google Chrome browser, which allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the CRAS component of the Google Chrome browser involves writing data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code using special techniques...

Roon 安全漏洞

Roon is a software component of Roon Labs' Digital Audio System. A security vulnerability exists in Roon Lab, which can be exploited by an attacker to gain access to resources that are inaccessible without proper authentication...

Roon 命令注入漏洞

Roon is a software component of Roon Labs' Digital Audio System. A command injection vulnerability exists in Roon that could allow a remote attacker to run arbitrary commands...

Privilege Escalation

JRE audio system is vulnerable to privilege escalation. A flaw was found in the JRE audio system. An untrusted applet or application could use this flaw to gain read access to restricted System properties...

Gentoo Security Advisory GLSA 201406-22

Gentoo Linux Local Security Checks GLSA 201406-22 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

GLSA-201406-22 : Network Audio System: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201406-22 Network Audio System: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Network Audio System. Please review the CVE identifiers referenced below for details. Impact : A context-dependent attacker...

Network Audio System: Multiple vulnerabilities

Background Network Audio System is a network transparent, client/server audio transport system. Description Multiple vulnerabilities have been discovered in Network Audio System. Please review the CVE identifiers referenced below for details. Impact A context-dependent attacker could possibly...

Network Audio System security vulnerabilities

Code execution, Denial of service...

CVE-2013-4258

Format string vulnerability in the osLogMsg function in server/os/aulog.c in Network Audio System NAS 1.9.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in unspecified vectors, related to syslog...