CVE-2023-33029 Use After Free in DSP Service

Memory corruption in DSP Service during a remote call from HLOS to DSP...

CVE-2023-33029

CVE-2023-33029 involves a memory corruption issue in the Qualcomm DSP Service when a remote call is made from HLOS to DSP. Reports consistently describe it as a DSP Service memory corruption vulnerability; CVSS metrics indicate local attack vector, low privileges, no user interaction, and high im...

CVE-2023-33029 Use After Free in DSP Service

Memory corruption in DSP Service during a remote call from HLOS to DSP...

Qualcomm Chip Resource Management Error Vulnerability

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc. and are often manufactured on the surface of semiconductor wafers. A resource management error vulnerability exists in the Qualcomm chip that ste...

PT-2023-24154 · Qualcomm · Qualcomm Ar8035

Name of the Vulnerable Software and Affected Versions: Qualcomm AR8035 affected versions not specified Description: The issue is related to memory corruption that occurs when invoking a callback function of the Audio Front End AFE from the Audio Digital Signal Processor ADSP. Recommendations: At...

PT-2023-9160 · Qualcomm · Qualcomm Dsp Firmware

Name of the Vulnerable Software and Affected Versions: Qualcomm DSP firmware affected versions not specified Description: The issue is related to a memory corruption problem when invoking IOCTLs calls from user space for internal memory map and unmap operations. This is connected to the use of...

Dynmx - Signature-based Detection Of Malware Features Based On Windows API Call Sequences

dynmx spoken dynamics is a signature-based detection approach for behavioural malware features based on Windows API call sequences. In a simplified way, you can think of dynmx as a sort of YARA for API call traces so called function logs originating from malware sandboxes. Hence, the data basis f...

CVE-2023-21624

Information disclosure in DSP Services while loading dynamic module...

Information disclosure

Information disclosure in DSP Services while loading dynamic module...

CVE-2023-21624 Information Exposure in DSP Services

Information disclosure in DSP Services while loading dynamic module...

CVE-2023-21624

CVE-2023-21624 is an information-disclosure vulnerability in DSP Services triggered when loading a dynamic module. The issue is documented for Qualcomm components (closed-source) and is referenced in the Android Pixel bulletin as affecting Qualcomm chipsets; affected products include Qualcomm DSP...

Samsung Mobile Devices Unspecified Vulnerability

Samsung mobile devices contain an unspecified vulnerability within DSP driver that allows attackers to load ELF libraries inside DSP...

Samsung Mobile Devices Improper Boundary Check Vulnerability

Samsung mobile devices contain an improper boundary check vulnerability within DSP driver that allows for out-of-bounds memory access...

CVE-2022-43474

Uncontrolled search path for the DSP Builder software installer before version 22.4 for IntelR FPGAs Pro Edition may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-43474

Uncontrolled search path for the DSP Builder software installer before version 22.4 for IntelR FPGAs Pro Edition may allow an authenticated user to potentially enable escalation of privilege via local access...

Privilege escalation

Uncontrolled search path for the DSP Builder software installer before version 22.4 for IntelR FPGAs Pro Edition may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-43474

Uncontrolled search path for the DSP Builder software installer before version 22.4 for IntelR FPGAs Pro Edition may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-43474

The CVE-2022-43474 issue affects the DSP Builder software installer for Intel FPGAs Pro Edition prior to version 22.4, caused by an uncontrolled search path. It could allow an authenticated local user to escalate privileges. Intel’s advisory recommends updating to version 22.4 or later to mitigat...

Intel® Quartus® Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-00632.html...

PT-2025-38453

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue in the remoteproc subsystem, specifically within the imx dsp rproc component. The vulnerability relates to improper handling of memory writes to the IR...