739 matches found
D-Link DSP-W110A1 安全漏洞
The D-Link DSP-W110A1 is a Wi-Fi smart routing device. The D-Link DSP-W110A1 suffers from a command injection vulnerability that stems from incorrectly filtering input parameters, which can be exploited by an attacker to submit a special request and execute arbitrary commands...
CVE-2025-34125: Improper Neutralization of Special Elements used in an OS Command
An unauthenticated command injection vulnerability exists in the cookie handling process of the lighttpd web server on D-Link DSP-W110A1 firmware version 1.05B01. This occurs when specially crafted cookie values are processed, allowing remote attackers to execute arbitrary commands on the...
SUSE CVE-2025-38329
In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Fix OOB memory read access in KUnit test wmfw info KASAN reported out of bounds access - csdspmockwmfwaddinfo, because the source string length was rounded up to the allocation size...
UBUNTU-CVE-2025-38329
In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Fix OOB memory read access in KUnit test wmfw info KASAN reported out of bounds access - csdspmockwmfwaddinfo, because the source string length was rounded up to the allocation size...
UBUNTU-CVE-2025-38330
In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Fix OOB memory read access in KUnit test ctl cache KASAN reported out of bounds access - csdspctlcacheinitmultipleoffsets. The code uses mockcoefftemplate.lengthbytes 4 bytes for register value allocations. But...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an out-of-bounds memory read in the csdspmockbinaddnameorinfo function...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an out-of-bounds memory read in the csdsp firmware test, which could lead to a crash...
PT-2025-29051
Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: The Linux kernel contains a flaw within the cs dsp firmware component. A KUnit test revealed an out-of-bounds OOB memory read access due to incorrect string length handling during the...
PT-2025-29052
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw in the cs dsp firmware related to out-of-bounds memory access during a KUnit test ctl cache. The issue occurs in the cs dsp ctl cache init multiple...
CVE-2025-27056 Use After Free in DSP Service
Memory corruption during sub-system restart while processing clean-up to free up resources...
CVE-2025-27056 Use After Free in DSP Service
Memory corruption during sub-system restart while processing clean-up to free up resources...
CVE-2025-21486
CVE-2025-21486 describes a memory corruption in Qualcomm components during dynamic process creation when the client passes only the address and length of the shell binary. The CVSSv3.1 vector indicates local access, low attack complexity and privileges, no user interaction, with high impact to co...
CVE-2025-21486 Untrusted Pointer Dereference in DSP Service
Memory corruption during dynamic process creation call when client is only passing address and length of shell binary...
CVE-2025-21486 Untrusted Pointer Dereference in DSP Service
Memory corruption during dynamic process creation call when client is only passing address and length of shell binary...
CVE-2025-21485 Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service
Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC...
CVE-2025-21485 Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service
Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC...
CVE-2025-21485
CVE-2025-21485 is a memory corruption vulnerability in Qualcomm FastRPC, triggered while processing INIT and multimode IOCTL calls. Affects Qualcomm chipsets with FastRPC kernel interfaces; CVSS-like data from the published entry indicates local access, low attack complexity, and high impact acro...
CVE-2023-33063
Memory corruption in DSP Services during a remote call from HLOS to DSP...