123 matches found
PT-2022-35335 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: A refcount leak bug was discovered in the of get ddr timings function. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations: For Linux Kernel...
PT-2022-35535 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: A refcount leak bug was discovered in the of get ddr timings function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior ...
PT-2022-35670
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.220 Description A refcount leak bug was discovered in the of get ddr timings function. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to v5.4.220, upda...
PT-2022-35914
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.331 Description A refcount leak bug was discovered in the of get ddr timings function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...
PT-2022-35852
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.296 Description A refcount leak bug was discovered in the of get ddr timings function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...
PT-2025-37503
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak bug was resolved in the of get ddr timings function within the Linux kernel. The issue occurs when iterating through child nodes and requires adding of node put to...
ddr-navi.jp Cross Site Scripting vulnerability OBB-1368889
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2018-13910
CVE-2018-13910 describes an out-of-bounds access in TZ caused by an invalid index used to check against DDR, affecting a wide range of Qualcomm Snapdragon SoCs (e.g., IPQ8074, MDM9xxx, MSM8xxx/SD platforms) and devices listed in the CVE. The root cause is an invalid index calculation that can lea...
Dynamic Data Resolver (DDR) - IDA Plugin
This blog post was authored by Holger Unterbrink Executive Summary Static reverse-engineering in IDA can often be problematic. Certain values are calculated at run time, which makes it difficult to understand what a certain basic block is doing. But, if you try to perform dynamic analysis by...
CVE-2016-10472
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820,...
CVE-2016-10472: Improper Access Control
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820,...
CVE-2017-14913
In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile MDM9206, SD 625, SD 650/52, SD 835, SD 845, DDR address input validation is being improperly truncated...
Input validation
In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile MDM9206, SD 625, SD 650/52, SD 835, SD 845, DDR address input validation is being improperly truncated...
CVE-2017-14913
CVE-2017-14913 concerns a Qualcomm-closed source component vulnerability in Android prior to the 2018-01-05 patch level. The issue involves DDR address input validation that is allegedly truncated, potentially enabling remote impact over the network with no user interaction. The CVE is listed und...
CVE-2017-14913: Improper Input Validation
In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile MDM9206, SD 625, SD 650/52, SD 835, SD 845, DDR address input validation is being improperly truncated...
CVE-2017-2698
The ddrdevfreq driver in versions earlier than GRA-UL00C00B197 has buffer overflow vulnerability. An attacker with the root privilege of the Android system can tricks a user into installing a malicious application on the smart phone, and send given parameter to smart phone to crash the system or...
Code injection
In all Android releases from CAF using the Linux kernel, a dynamically-protected DDR region could potentially get overwritten...
CVE-2016-10334
In all Android releases from CAF using the Linux kernel, a dynamically-protected DDR region could potentially get overwritten...
CVE-2016-10334
CVE-2016-10334 affects Android CAF builds using the Linux kernel; a dynamically-protected DDR region could potentially be overwritten. The available documents identify the issue and reference Android security bulletins, but do not provide specific root-cause details, affected product versions, or...
