592 matches found
OESA-2024-2498 ffmpeg security update
FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: FFmpeg n6.1.1 is Intege...
kernel: firmware: cs_dsp: Validate payload length before processing block
In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Validate payload length before processing block Move the payload length check in csdspload and csdspcoeffload to be done before the block is processed. The check that the length of a block payload does not exceed...
kernel: firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers
A vulnerability was found in the Linux kernel in the csdsp firmware involving the V2 algorithm headers and the wmfw V2 format, which introduced variable-length strings into the algorithm block header. This means the overall header length is variable and without proper checks can result in an...
The vulnerability of Geovision GV-VS12, GV-VS11, GV-DSP LPR V3, GVLX 4, and GVLX 4 IP video server microprogramming systems arises from the failure to eliminate special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands.
The vulnerability of Geovision GV-VS12, GV-VS11, GV-DSP LPR V3, GVLX 4, and GVLX 4 microprogrammed software for IP video servers is related to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows a malicious actor ...
kernel: firmware: cs_dsp: Validate payload length before processing block
In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Validate payload length before processing block Move the payload length check in csdspload and csdspcoeffload to be done before the block is processed. The check that the length of a block payload does not exceed...
kernel: firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers
A vulnerability was found in the Linux kernel in the csdsp firmware involving the V2 algorithm headers and the wmfw V2 format, which introduced variable-length strings into the algorithm block header. This means the overall header length is variable and without proper checks can result in an...
kernel: ALSA: hda/cs_dsp_ctl: Use private_free for control cleanup
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/csdspctl: Use privatefree for control cleanup Use the control privatefree callback to free the associated data block. This ensures that the memory won't leak, whatever way the control gets destroyed. The original...
kernel: ALSA: hda: cs35l56: Fix lifetime of cs_dsp instance
A flaw was found in the Linux kernel's HDA driver before initialization. This issue occurs when a user unloads and then reloads the module, and could allow a local user to crash the system...
kernel: firmware: cs_dsp: Return error if block header overflows file
A denial of service vulnerability was found in the Linux kernel. No error was returned from the csdsppowerup function if a block header is longer than the amount of data left in the file...
CVE-2024-21455
creationtimestamp| type| source ---|---|--- 2024-11-07 17:04:54+00:00| seen| https://vulnerability.circl.lu/bundle/aaa30339-107b-4cb3-8a1a-3e5d8398b429 2024-12-16 05:11:23+00:00| seen| https://googleprojectzero.blogspot.com/2024/12/qualcomm-dsp-driver-unexpectedly-excavating-exploit.html 2024-12-...
CVE-2024-33029 Use After Free in DSP Services
Memory corruption while handling the PDR in driver for getting the remote heap maps...
CVE-2024-33029 Use After Free in DSP Services
Memory corruption while handling the PDR in driver for getting the remote heap maps...
The vulnerability of the cs_dsp_dbg() function (located in the drivers/firmware/cirrus/cs_dsp.c file of the Linux kernel) allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the csdspdbg function located in the drivers/firmware/cirrus/csdsp.c file of the Linux kernel is related to the occurrence of operations outside the buffer boundaries in memory when processing the wmfw header. Exploitation of this vulnerability could allow an attacker to...
kernel: firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files
A buffer overrun flaw exists in the Linux kernel when the strlen function is used on name fields in V1 wmfw files. This issue results in a loss of system availability...
Qualcomm Urges OEMs to Patch Critical DSP and WLAN Flaws Amid Active Exploits
Qualcomm has rolled out security updates to address nearly two dozen flaws spanning proprietary and open-source components, including one that has come under active exploitation in the wild. The high-severity vulnerability, tracked as CVE-2024-43047 CVSS score: 7.8, has been described as a...
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services while maintaining memory maps of HLOS memory...
CVE-2024-43047 Use After Free in DSP Service
Memory corruption while maintaining memory maps of HLOS memory...
CVE-2024-43047 Use After Free in DSP Service
Memory corruption while maintaining memory maps of HLOS memory...