GSD-2022-1001260 ASoC: codecs: wc938x: fix accessing array out of bounds for enum type

ASoC: codecs: wc938x: fix accessing array out of bounds for enum type This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

PT-2022-29533

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to accessing an array out of bounds for an enum type in the ASoC codecs wc938x driver. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2022-29536

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.11 through v5.17.1 Description The issue is related to accessing an array out of bounds for an enum type in the ASoC: codecs: va-macro component. The actual impact and attack plausibility have not yet been proven...

PT-2022-30150

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to accessing an array out of bounds for an enum type in the ASoC: codecs: wc938x module. The actual impact and attack plausibility have not yet been proven. Recommendatio...

PT-2022-29842

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue concerns accessing an array out of bounds for an enum type in the ASoC: codecs: wc938x component. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2022-29537

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.17.1 Description The issue is related to accessing an array out of bounds for an enum type in the ASoC: codecs: rx-macro component. The actual impact and attack plausibility have not yet been proven...

PT-2022-30154

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.15.32 Description The issue is related to accessing compander for aux in the ASoC: codecs: rx-macro component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-29844

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.16.18 Description The issue is related to accessing compander for aux in the ASoC: codecs: rx-macro. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-30153

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to accessing an array out of bounds for an enum type in the ASoC: codecs: rx-macro component. The actual impact and attack plausibility have not yet been proven...

PT-2022-29535

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.17.1 Description The issue is related to accessing compander for aux in the ASoC: codecs: rx-macro. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-29843

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.16.18 Description The issue is related to accessing an array out of bounds for an enum type in the ASoC: codecs: rx-macro component. The actual impact and attack plausibility have not yet been proven...

Google Android Buffer Overflow Vulnerability (CNVD-2022-31836)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a buffer overflow vulnerability that originates from too much data in Media Framework Media Codecs. A remote attacker could exploit the vulnerability to access sensitive information...

Microsoft Windows Codecs Library 输入验证错误漏洞

Microsoft HEVC Video Extensions is a video extension application from Microsoft USA. The application enables computers and devices to read High Efficiency Video Coding or HEVC videos. A remote code execution vulnerability exists in Microsoft HEVC Video Extensions, which can be exploited by an...

Google Android 资源管理错误漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a buffer overflow vulnerability that originates from too much data in Media Framework Media Codecs. A remote attacker could exploit the vulnerability to access sensitive information...

Patch Tuesday - March 2022

Microsoft's March 2022 updates include fixes for 92 CVEs including 21 from the Chromium project, which is used by their Edge web browser. None of them have been seen exploited in the wild, but three have been previously disclosed. CVE-2022-24512, affecting .NET and Visual Studio, and...

Microsoft Windows Codecs Library Multiple Vulnerabilities (March 2022)

The Windows 'HEVC Video Extensions' or 'HEVC from Device Manufacturer' app installed on the remote host is affected by multiple code execution vulnerabilities. An attacker who successfully exploits these vulnerabilities could execute arbitrary code. Exploitation of the vulnerability requires that...

GSD-2022-1000677 ASoC: codecs: wcd938x: fix incorrect used of portid

ASoC: codecs: wcd938x: fix incorrect used of portid This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.8 by commit...

GSD-2022-1000590 ASoC: codecs: wcd938x: fix incorrect used of portid

ASoC: codecs: wcd938x: fix incorrect used of portid This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.22 by commit...

PT-2022-37943

Уязвимость функций wcd938x tx mode get, wcd938x rx hph mode get модуля sound/soc/codecs/wcd938x.c поддержки звука SoC ядра операционной системы Linux связана с чтением за границами буфера. Эксплуатация уязвимости может позволить нарушителю получить доступ к защищаемой информации или вызвать отказ...

PT-2022-37945

Уязвимость функции rx macro get hph pwr mode модуля sound/soc/codecs/lpass-rx-macro.c поддержки звука SoC ядра операционной системы Linux связана с чтением за границами буфера. Эксплуатация уязвимости может позволить нарушителю получить доступ к защищаемой информации или вызвать отказ в обслужива...