CVE-2023-53434 remoteproc: imx_dsp_rproc: Add custom memory copy implementation for i.MX DSP Cores

In the Linux kernel, the following vulnerability has been resolved: remoteproc: imxdsprproc: Add custom memory copy implementation for i.MX DSP Cores The IRAM is part of the HiFi DSP. According to hardware specification only 32-bits write are allowed otherwise we get a Kernel panic. Therefore add...

CVE-2023-53434

In the Linux kernel, CVE-2023-53434 concerns remoteproc: imx_dsp_rproc. The fix adds a custom memory copy implementation (and memset) for the i.MX DSP cores because the HiFi DSP IRAM requires 32‑bit writes; violating this can trigger a Kernel panic. The vulnerability is mitigated by the patched m...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an incorrect handling of memory copy operations in the i.MX DSP kernel, which could lead to a kernel crash...

firmware: cs_dsp: Fix OOB memory read access in KUnit test (ctl cache)

...

firmware: cs_dsp: Fix OOB memory read access in KUnit test (wmfw info)

...

firmware: cs_dsp: Fix OOB memory read access in KUnit test

...

Linux Distros Unpatched Vulnerability : CVE-2017-17081

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The gmcmmx function in libavcodec/x86/mpegvideodsp.c in FFmpeg 2.3 and 3.4 does not properly validate widths and heights, which allows remote attackers to cause...

CVE-2025-27069 Untrusted Pointer Dereference in DSP Service

Memory corruption while processing DDI command calls...

CVE-2025-27069

CVE-2025-27069 is a memory corruption issue described as untrusted pointer dereference in the DSP service when processing DDI commands. Public docs indicate Qualcomm chipsets/DSP service as the affected component, with a CVSS v3.1 vector (LOCAL attack, LOW complexity, LOW privileges, no user inte...

CVE-2025-27069 Untrusted Pointer Dereference in DSP Service

Memory corruption while processing DDI command calls...

CVE-2025-27067 Improper Validation of Array Index in DSP Service

Memory corruption while processing DDI call with invalid buffer...

CVE-2025-27067 Improper Validation of Array Index in DSP Service

Memory corruption while processing DDI call with invalid buffer...

CVE-2025-27067

CVE-2025-27067 is described as memory corruption that occurs while processing a DDI call with an invalid buffer. The entry is linked to Qualcomm chipsets (DSP service) and is scored CVSS v3.1: Local attack, Low attack complexity, Privileges required, no user interaction, with high impact on confi...

D-Link DSP-W215 安全漏洞

D-Link DSP-W215 is a smart plug product from China AUO D-Link. A security vulnerability exists in the D-Link DSP-W215 version 1.02, which stems from the mycgi.cgi component improperly handling HTTP POST requests, which could lead to a stack buffer overflow and remote code execution...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the csdspmockbinbinaddnameorinfo function in the drivers/firmware/cirrus/test/csdspMockBin.c module of the Linux kernel is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

CVE-2025-34125

An unauthenticated command injection vulnerability exists in the cookie handling process of the lighttpd web server on D-Link DSP-W110A1 firmware version 1.05B01. This occurs when specially crafted cookie values are processed, allowing remote attackers to execute arbitrary commands on the...

CVE-2025-34125 D-Link DSP-W110A1 Cookie Command Injection

An unauthenticated command injection vulnerability exists in the cookie handling process of the lighttpd web server on D-Link DSP-W110A1 firmware version 1.05B01. This occurs when specially crafted cookie values are processed, allowing remote attackers to execute arbitrary commands on the...

CVE-2025-34125 D-Link DSP-W110A1 Cookie Command Injection

An unauthenticated command injection vulnerability exists in the cookie handling process of the lighttpd web server on D-Link DSP-W110A1 firmware version 1.05B01. This occurs when specially crafted cookie values are processed, allowing remote attackers to execute arbitrary commands on the...

CVE-2025-34125

CVE-2025-34125 describes an unauthenticated command injection in the D-Link DSP-W110A1 cookie handling of the lighttpd web server, affecting firmware 1.05B01. The root cause is processing of specially crafted cookie values that allows remote attackers to execute arbitrary commands on the underlyi...

PT-2025-29887 · D Link +2 · D-Link Dsp-W110A1 +2

Name of the Vulnerable Software and Affected Versions: D-Link DSP-W110A1 version 1.05B01 Description: An unauthenticated command injection vulnerability exists in the cookie handling process of the lighttpd web server. This occurs when specially crafted cookie values are processed, allowing remot...