PT-2025-3002 · Unknown · Com.Callos14.Callscreen.Colorphone

Name of the Vulnerable Software and Affected Versions: com.callos14.callscreen.colorphone also known as iCall OS17 - Color Phone Flash versions 4.3 and earlier Description: The issue allows any application to place phone calls without user interaction by sending a crafted intent via the...

PT-2025-2702 · Qualcomm · Snapdragon +9

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption during the processing of FIPS encryption or decryption IOCTL calls invoked from user-space. This can lead to...

PT-2025-3001 · Unknown · Com.Windymob.Callscreen.Ringtone.Callcolor.Colorphone +1

Name of the Vulnerable Software and Affected Versions: com.windymob.callscreen.ringtone.callcolor.colorphone aka Color Phone Call Screen Themes versions 1.1.2 and earlier Description: The issue allows any application to place phone calls without user interaction by sending a crafted intent via th...

CVE-2024-53931

The com.glitter.caller.screen aka iCaller, Caller Theme & Dialer application through 1.1 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.glitter.caller.screen.DialerActivity component...

CVE-2024-53934

The CVE-2024-53934 issue affects the Color Phone Call Screen Themes app (com.windymob.callscreen.ringtone.callcolor.colorphone) up to version 1.1.2 for Android. A crafted intent to the DialerActivity component (com.frovis.androidbase.call.DialerActivity) enables any other app, with no permissions...

PT-2026-4948

Name of the Vulnerable Software and Affected Versions OpenSSL versions 1.1.1 through 3.6 OpenSSL version 1.0.2 is not affected Description The issue relates to the handling of non-block-aligned input lengths when using the low-level OCB API directly with AES-NI or other hardware-accelerated code...

PT-2025-36310

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the get user function related to user read access. Due to the implementation of read access support, read access interruptions are not triggered at...

CVE-2024-46972

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions...

CVE-2024-46973

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions...

CVE-2024-46973 Exploitable kernel use-after-free on psServerMMUContext due to reference count mismanagement

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions...

CVE-2024-46973

CVE-2024-46973 affects Imagination Technologies PowerVR-GPU driver. The issue is a use-after-free in the kernel triggered by improper GPU system calls (reference-count mismanagement on psServerMMUContext), exploitable by a non-privileged user with local access. Impact is local privilege escalatio...

CVE-2024-46973 Exploitable kernel use-after-free on psServerMMUContext due to reference count mismanagement

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions...

PT-2024-32310 · Imagination Technologies · Graphics Ddk

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue allows software installed and run as a non-privileged user to conduct improper GPU system calls, potentially triggering use-after-free kernel...

Imagination GPU Driver 安全漏洞

Imagination GPU Driver is a graphics driver from Imagination. A security vulnerability exists in Imagination GPU Driver version 1.15 RTM, which originates from software run by an unprivileged user that can trigger a use-after-release kernel exception by executing incorrect GPU system calls...

CVE-2024-56607

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix atomic calls in ath12kmacopsetbitratemask When I try to manually set bitrates: iw wlan0 set bitrates legacy-2.4 1 I get sleeping from invalid context error, see below. Fix that by switching to use recently...

UBUNTU-CVE-2024-56607

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix atomic calls in ath12kmacopsetbitratemask When I try to manually set bitrates: iw wlan0 set bitrates legacy-2.4 1 I get sleeping from invalid context error, see below. Fix that by switching to use recently...

CVE-2024-56607 wifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask()

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix atomic calls in ath12kmacopsetbitratemask When I try to manually set bitrates: iw wlan0 set bitrates legacy-2.4 1 I get sleeping from invalid context error, see below. Fix that by switching to use recently...

CVE-2024-56607

CVE-2024-56607 concerns the Linux kernel wireless stack, specifically the ath12k driver’s bitrate masking path. The issue stems from a sleep in a function path that can be invoked from atomic/context-sensitive code when a user or cfg80211 path sets legacy bitrates, yielding a sleeping wake-up sta...

CVE-2024-56607

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix atomic calls in ath12kmacopsetbitratemask When I try to manually set bitrates: iw wlan0 set bitrates legacy-2.4 1 I get sleeping from invalid context error, see below. Fix that by switching to use recently...

DEBIAN-CVE-2024-56533

In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: Use sndcardfreewhenclosed at disconnection The USB disconnect callback is supposed to be short and not too-long waiting. OTOH, the current code uses sndcardfree at disconnection, but this waits for the close of all...