CVE-2024-45542

CVE-2024-45542 affects Qualcomm WLAN chipsets; memory corruption occurs when an IOCTL from user space writes board data to the WLAN driver. The issue is triggered via a local attack (AV:L, AC:L, PR:L) with no user interaction, and it impacts confidentiality, integrity, and availability (C:H, I:H,...

CVE-2024-45542 Stack-based Buffer Overflow in WLAN Windows Host

Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver...

CVE-2024-45541 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host

Memory corruption when IOCTL call is invoked from user-space to read board data...

CVE-2024-45541 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host

Memory corruption when IOCTL call is invoked from user-space to read board data...

CVE-2024-45541

CVE-2024-45541 affects Qualcomm chipsets where a memory corruption occurs when an IOCTL is invoked from user-space to read board data. The vulnerability is triggered through a local IOCTL path (low privileges, no user interaction) and results in memory corruption on the target device. CVSS metric...

CVE-2024-33061

CVE-2024-33061 describes an information disclosure affecting Qualcomm chipsets, caused by processing an IOCTL call used to release a trusted VM process or to open a channel without initializing the process. The vulnerability is disclosed as a local issue with high confidentiality impact and low a...

CVE-2024-33061 Buffer Over-read in DSP Service

Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process...

CVE-2024-33061 Buffer Over-read in DSP Service

Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process...

CVE-2024-53933

The com.callerscreen.colorphone.themes.callflash aka Color Call Theme & Call Screen application through 1.0.7 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the...

CVE-2024-53933

The com.callerscreen.colorphone.themes.callflash (also known as Color Call Theme & Call Screen ) application for Android, version 1.0.7 and earlier , contains a vulnerability that allows any application to place phone calls without user interaction. This is achieved by sending a crafted intent to...

CVE-2024-53932

The com.remi.colorphone.callscreen.calltheme.callerscreen aka Color Phone: Call Screen Theme application through 21.1.9 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the...

CVE-2024-53935

The com.callos14.callscreen.colorphone aka iCall OS17 - Color Phone Flash application through 4.3 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.callos14.callscreen.colorphone.DialerActivity component...

CVE-2024-53932

The Color Phone: Call Screen Theme application (com.remi.colorphone.callscreen.calltheme.callerscreen) for Android versions through 21.1.9 contains a vulnerability that allows unauthorized phone calls. An attacker can place calls without user interaction by sending a crafted intent to the com.rem...

CVE-2024-53936

The com.asianmobile.callcolor aka Color Phone Call Screen App application through 24 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.asianmobile.callcolor.ui.component.call.CallActivity component...

CVE-2024-53934

The com.windymob.callscreen.ringtone.callcolor.colorphone aka Color Phone Call Screen Themes application through 1.1.2 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.frovis.androidbase.call.DialerActivi...

CVE-2024-53932

The com.remi.colorphone.callscreen.calltheme.callerscreen aka Color Phone: Call Screen Theme application through 21.1.9 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the...

CVE-2024-33061: Buffer Over-read

Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process...

Linux Heap Buffer Overflow DoS

The vulnerability of the modtimer and kvfreecallrcu functions in the Linux operating system is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2025-2701

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Compute affected versions not specified Description The issue is related to memory corruption that occurs when an IOCTL call is invoked from user-space to write board data to the WLAN driver. This can lead to potential...

CVE-2024-53936: Undefined Security Weakness

The com.asianmobile.callcolor aka Color Phone Call Screen App application through 24 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.asianmobile.callcolor.ui.component.call.CallActivity component...