CVE-2024-38417

CVE-2024-38417 concerns information disclosure during IOCTL processing in Qualcomm embedded platform microcode used in Qualcomm chipsets (notably automotive multimedia). The root cause is a memory issue (buffer over-read) when handling IO control commands, enabling potential leakage of protected ...

Android Automotive OS Update Bulletin—February 2025Stay organized with collectionsSave and categorize content based on your preferences.

The Android Automotive OS AAOS Update Bulletin contains details of security vulnerabilities affecting the Android Automotive OS platform. The full AAOS update comprises the security patch level of 2025-02-05 or later from the February 2025 Android Security Bulletin in addition to all issues in th...

PT-2025-13357 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved. The issue is related to the implementation of the dwmac5 driver, where not all safety features were enabled by default for certai...

CVE-2024-45559 Buffer Over-read in Automotive OS Platform

Transient DOS can occur when GVM sends a specific message type to the Vdev-FastRPC backend...

CVE-2024-45559 Buffer Over-read in Automotive OS Platform

Transient DOS can occur when GVM sends a specific message type to the Vdev-FastRPC backend...

CVE-2024-45555 Integer Overflow to Buffer Overflow in Automotive OS Platform

Memory corruption can occur if an already verified IFS2 image is overwritten, bypassing boot verification. This allows unauthorized programs to be injected into security-sensitive images, enabling the booting of a tampered IFS2 system image...

CVE-2024-45555 Integer Overflow to Buffer Overflow in Automotive OS Platform

Memory corruption can occur if an already verified IFS2 image is overwritten, bypassing boot verification. This allows unauthorized programs to be injected into security-sensitive images, enabling the booting of a tampered IFS2 system image...

CVE-2024-45555

CVE-2024-45555 describes a memory corruption bug that can occur if an already verified IFS2 image is overwritten, bypassing boot verification and potentially allowing a tampered IFS2 system image to boot. The available documents corroborate the vulnerability description but do not provide specifi...

CVE-2024-43064 Permissions, Privileges, and Access Controls issue in Automotive OS Platform

Uncontrolled resource consumption when a driver, an application or a SMMU client tries to access the global registers through SMMU...

CVE-2024-43064

CVE-2024-43064 concerns Qualcomm chipsets where uncontrolled resource consumption occurs when a driver, an application, or an SMMU client accesses the global registers through the SMMU. The CVE is associated with high availability impact (NVD metrics show Availability Impact = High) and elevated ...

CVE-2024-43064 Permissions, Privileges, and Access Controls issue in Automotive OS Platform

Uncontrolled resource consumption when a driver, an application or a SMMU client tries to access the global registers through SMMU...

CVE-2024-43063 Buffer Over-read in Automotive Autonomy

information disclosure while invoking the mailbox read API...

CVE-2024-43063 Buffer Over-read in Automotive Autonomy

information disclosure while invoking the mailbox read API...

CVE-2024-43063

Technical details about CVE-2024-43063 are not publicly available in the provided documents. Monitor for updates from vendors and security bulletins.

CVE-2024-23366 Buffer Over-read in Automotive Autonomy

Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size...

CVE-2024-23366 Buffer Over-read in Automotive Autonomy

Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size...

CVE-2024-23366

CVE-2024-23366 affects Qualcomm chipset mailbox handling. The issue is an information disclosure in the mailbox write API when a message from a user exceeds the mailbox size, potentially exposing data due to improper handling of oversized input. Ironically, the vulnerability is scoped to local ac...

Android Automotive OS Update Bulletin—January 2025Stay organized with collectionsSave and categorize content based on your preferences.

The Android Automotive OS AAOS Update Bulletin contains details of security vulnerabilities affecting the Android Automotive OS platform. The full AAOS update comprises the security patch level of 2025-01-05 or later from the January 2025 Android Security Bulletin in addition to all issues in thi...

STMicroelectronics SPC58 安全漏洞

The STMicroelectronics SPC58 is a family of automotive microcontrollers from STMicroelectronics, USA. A security vulnerability exists in the STMicroelectronics SPC58 that stems from susceptibility to an alternate hardware interface missing protection mechanism...

Android Automotive OS Update Bulletin—December 2024Stay organized with collectionsSave and categorize content based on your preferences.

The Android Automotive OS AAOS Update Bulletin contains details of security vulnerabilities affecting the Android Automotive OS platform. The full AAOS update comprises the security patch level of 2024-12-05 or later from the December 2024 Android Security Bulletin in addition to all issues in th...