741 matches found
CVE-2024-53033 Untrusted Pointer Dereference in DSP_Services
Memory corruption while doing Escape call when user provides valid kernel address in the place of valid user buffer address...
CVE-2024-45580 Use After Free in DSP Service
Memory corruption while handling multuple IOCTL calls from userspace for remote invocation...
CVE-2024-45580 Use After Free in DSP Service
Memory corruption while handling multuple IOCTL calls from userspace for remote invocation...
CVE-2022-49733 ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC
In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix race at SNDCTLDSPSYNC There is a small race window at sndpcmosssync that is called from OSS PCM SNDCTLDSPSYNC ioctl; namely the function calls sndpcmossmakeready at first, then takes the paramslock mutex for t...
CVE-2022-49733 ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC
In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix race at SNDCTLDSPSYNC There is a small race window at sndpcmosssync that is called from OSS PCM SNDCTLDSPSYNC ioctl; namely the function calls sndpcmossmakeready at first, then takes the paramslock mutex for t...
Linux Kernel Heap Buffer Overflow DoS
The vulnerability of the functions csdspcoeffparsestring, csdspcoeffparseint, csdspcoeffparsecoeff, and csdspParsecoeff drivers/firmware/cirrus/csdsp.c in the Linux operating system’s kernel is related to the execution of operations outside of memory buffers. Exploiting this vulnerability can all...
CVE-2021-35077
Possible use after free scenario in compute offloads to DSP while multiple calls spawn a dynamic process in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...
CVE-2021-35132
Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...
CVE-2021-35126
Memory corruption in DSP service due to improper validation of input parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...
CVE-2022-27813
Motorola MTM5000 series firmwares lack properly configured memory protection of pages shared between the OMAP-L138 ARM and DSP cores. The SoC provides two memory protection units, MPU1 and MPU2, to enforce the trust boundary between the two cores. Since both units are left unconfigured by the...
CVE-2024-33038
Memory corruption while passing untrusted/corrupted pointers from DSP to EVA...
PT-2025-54644
Уязвимость службы DSP Digital Signal Processor микропрограммного обеспечения встраиваемых плат Qualcomm связана с ненадёжным разыменованием указателя. Эксплуатация уязвимости может позволить нарушителю получить полный контроль над устройством...
PT-2025-1611
Name of the Vulnerable Software and Affected Versions Export Import Menus plugin for WordPress versions up to, and including, 1.9.1 Description The issue arises from a missing capability check on the dsp export import menus function, allowing unauthorized access to data. This enables...
CVE-2024-45553 Use After Free in DSP Services
Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it for a process-specific task, issues may arise...
CVE-2024-45553
CVE-2024-45553 describes a memory corruption vulnerability in Qualcomm components where process-specific maps are added to a global list. The issue can manifest if a map is removed from the global list while another thread is using it for a process-specific task. The canonical description across ...
CVE-2024-45550
CVE-2024-45550 involves memory corruption when an IOCTL-calling application executes all MCDM driver IOCTL calls on Qualcomm chipsets. The affected component is the MCDM driver IOCTL interface; root cause is memory corruption triggered by IOCTL invocation patterns. Reported impact includes high c...
CVE-2024-33061 Buffer Over-read in DSP Service
Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process...
CVE-2024-33061 Buffer Over-read in DSP Service
Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process...
CVE-2024-49848
creationtimestamp| type| source ---|---|--- 2024-12-16 05:11:23+00:00| seen| https://googleprojectzero.blogspot.com/2024/12/qualcomm-dsp-driver-unexpectedly-excavating-exploit.html 2024-12-16 16:32:28+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113663459141722483 2024-12-16...
The Qualcomm DSP Driver - Unexpectedly Excavating an Exploit
Posted by Seth Jenkins, Google Project Zero This blog post provides a technical analysis of exploit artifacts provided to us by Google's Threat Analysis Group TAG from Amnesty International. Amnesty’s report on these exploits is available here. Thanks to both Amnesty International and Google's...