23602 matches found
CVE-2024-49844
The CVE-2024-49844 entry concerns memory corruption when triggering commands in the PlayReady Trusted application on Qualcomm chipsets. Affected component: PlayReady Trusted application (memory handling during command processing). Reported impact per sources: memory corruption with potential for ...
CVE-2024-49844 Improper Input Validation in Automotive
Memory corruption while triggering commands in the PlayReady Trusted application...
CVE-2024-49830 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio
Memory corruption while processing an IOCTL call to set mixer controls...
CVE-2024-49830
CVE-2024-49830 describes memory corruption that occurs when processing an IOCTL call to set mixer controls on Qualcomm chipsets. The vulnerability affects the mixer-control handling path (IOCTL processing) and is supported by multiple feeds (NVD/RH/CVE list) with CVSSv3.1 base scores indicating h...
CVE-2024-49830 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio
Memory corruption while processing an IOCTL call to set mixer controls...
CVE-2024-49829
CVE-2024-49829 describes a memory corruption in Qualcomm chipsets during contextual user dumps caused by inadequate checks on buffer length. Connected sources attribute the issue to the camera subsystem (buffer copy without checking size) with local attacker requirements (local access, low comple...
CVE-2024-45581 Out-of-bounds Write in Audio
Memory corruption while sound model registration for voice activation with audio kernel driver...
CVE-2024-45581 Out-of-bounds Write in Audio
Memory corruption while sound model registration for voice activation with audio kernel driver...
CVE-2024-45576
CVE-2024-45576 is described as memory corruption during processing of a command buffer in the OPE module on Qualcomm chipsets. The CVSS 3.1 vector indicates a local attack with low privileges and no user interaction, yielding high impact to confidentiality, integrity, and availability. Public-enc...
CVE-2024-45574
CVE-2024-45574 affects Qualcomm chipsets and involves a vulnerability in the Camera kernel where memory is corrupted during array access due to an invalid index from invalid command data. The root cause is an index validation issue within the Camera kernel processing path, leading to memory corru...
CVE-2024-45570 Use of Out-of-range Pointer Offset in Camera Driver
Memory corruption may occur during IO configuration processing when the IO port count is invalid...
CVE-2024-45568
CVE-2024-45568 affects Qualcomm camera-kernel drivers. Root cause: improper bounds checking during command handling leading to memory corruption. Documented impact includes high confidentiality, integrity, and availability risks; local attack vector with low complexity (Privileges: LOW) and no us...
CVE-2024-45568 Buffer Over-read in Camera Driver
Memory corruption due to improper bounds check while command handling in camera-kernel driver...
CVE-2024-45566 Use After Free in Camera Driver
Memory corruption during concurrent buffer access due to modification of the reference count...
CVE-2024-45565 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver
Memory corruption when blob structure is modified by user-space after kernel verification...
CVE-2024-45562 Use After Free in HLOS
Memory corruption during concurrent access to server info object due to unprotected critical field...
CVE-2025-46592
Null pointer dereference vulnerability in the USB HDI driver module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-4333
CVE-2025-4333 affects feng_ha_ha/megagao ssm-erp and production_ssm up to 0.0.1. The vulnerability is in FileServiceImpl.java, function uploadFile, where manipulation of the uploadFile argument enables unrestricted file uploads. Exploitation is possible remotely and has been disclosed publicly. P...