Buffer Error Vulnerability in Multiple Qualcomm Products

A Qualcomm chip is a chip from Qualcomm Incorporated USA. It is a way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc. and is often fabricated on the surface of semiconductor wafers. A buffer error vulnerability exists in several Qualcomm products, which...

Buffer Error Vulnerability in Multiple Qualcomm Products

A Qualcomm chip is a chip from Qualcomm Incorporated USA. It is a way of miniaturizing circuitry mainly semiconductor devices, but also passive components, etc. and is often fabricated on the surface of semiconductor wafers. A buffer error vulnerability exists in multiple Qualcomm products, which...

Digital Error Vulnerability in Multiple Qualcomm Products

A Qualcomm chip is a chip from Qualcomm Incorporated USA. a way to miniaturize circuitry including primarily semiconductor devices, but also passive components, etc. and is manufactured from time to time on the surface of semiconductor wafers. A numeric error vulnerability exists in multiple...

Buffer Error Vulnerability in Multiple Qualcomm Products

A Qualcomm chip is a chip from Qualcomm Incorporated USA. It is a way of miniaturizing circuitry mainly semiconductor devices, but also passive components, etc. and is often fabricated on the surface of semiconductor wafers. A buffer error vulnerability exists in several Qualcomm products, which...

Vault’s GCP Auth Method Allows Authentication Bypass

Summary A vulnerability was identified in Vault and Vault Enterprise “Vault” such that, with the GCP Auth Method configured and under certain circumstances, the values relied upon by Vault to validate Google Compute Engine GCE VMs may be manipulated and authentication bypassed. This vulnerability...

RHEL 8 : libexif (RHSA-2020:4766)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4766 advisory. The libexif packages provide a library for extracting extra information from image files. The following packages have been upgraded to a lat...

fence security update

CentOS Errata and Security Advisory CESA-2020:5003 An update for fence-agents is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

The vulnerability of the Intel Visual Compute Accelerator 2 for working with media data, related to access control deficiencies, allows attackers to enhance their privileges.

The vulnerability of the Intel Visual Compute Accelerator 2 for working with media data is related to lack of access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Intel Visual Compute Accelerator 2 for working with media data, related to access control deficiencies, allows a intruder to trigger a service failure.

The vulnerability of the Intel Visual Compute Accelerator 2 for working with media data is related to lack of access control. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2020-8677

Improper access control in the IntelR Visual Compute Accelerator 2, all versions, may allow a privileged user to potentially enable denial of service via local access...

CVE-2020-8676

Improper access control in the IntelR Visual Compute Accelerator 2, all versions, may allow a privileged user to potentially enable escalation of privilege via local access...

Improper access control

Improper access control in the IntelR Visual Compute Accelerator 2, all versions, may allow a privileged user to potentially enable denial of service via local access...

Improper access control

Improper access control in the IntelR Visual Compute Accelerator 2, all versions, may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-8677

CVE-2020-8677 affects Intel Visual Compute Accelerator 2 (all versions). It is an improper access control flaw that may let a privileged local user cause a denial of service. Intel will not provide a patch; mitigation is to limit privileged access to hosts. (Connected Intel advisory also covers C...

CVE-2020-8676

Improper access control in the IntelR Visual Compute Accelerator 2, all versions, may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-8676

The CVE-2020-8676 entry concerns Intel’s Visual Compute Accelerator 2 (VCA2) with improper access control that could allow a privileged user to escalate privileges via local access. Affected: Intel® Visual Compute Accelerator 2, all versions. Root cause: inadequate access control in the VCA2 comp...

CVE-2020-11206

Possible buffer overflow in Fastrpc while handling received parameters due to lack of validation on input parameters' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8098, MSM8998, QCM4290, QCM6125, QCS410, QCS4290, QCS610,...

CVE-2020-11184

u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDX55, SDX55M, SM4250, SM4250P,...

CVE-2020-11201

Arbitrary access to DSP memory due to improper check in loaded library for data received from CPU side' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCM6125, QCS410, QCS603, QCS605, QCS610, QCS6125, SA6145P, SA6155, SA6155P,...

CVE-2020-11130

u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SC8180X, SC8180XP, SDX55,...