CVE-2022-25722 Information Exposure in DSP Services

Information exposure in DSP services due to improper handling of freeing memory...

CVE-2022-25722

CVE-2022-25722 describes information exposure in DSP services due to improper handling of freeing memory. Affected: DSP-related components (Qualcomm/DP S services) as per CVE entry and Android Pixel bulletin referencing this CVE under Qualcomm kernel subcomponent. Root cause: improper memory mana...

CVE-2022-25722 Information Exposure in DSP Services

Information exposure in DSP services due to improper handling of freeing memory...

CVE-2022-25722: Use After Free

Information exposure in DSP services due to improper handling of freeing memory...

PT-2023-12802 · Unknown · Dsp Services

Name of the Vulnerable Software and Affected Versions: DSP services affected versions not specified Description: The issue is related to information exposure in DSP services. This occurs due to improper handling of freeing memory, which can lead to sensitive data being accessible. Recommendations...

an-website (>=22.5.13, <=22.5.18), dsp-tools (1.15.0) +5 more potentially affected by CVE-2022-40897 via setuptools (62.2.0)

setuptools PYPI version 62.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - an-website =22.5.13, =0.0.7, =0.3.8, =0.0.1, =0.0.16 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

an-website (>=22.5.13, <=22.5.18), dsp-tools (1.15.0) +5 more potentially affected by CVE-2022-40897 via setuptools (62.2.0)

setuptools PYPI version 62.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - an-website =22.5.13, =0.0.7, =0.3.8, =0.0.1, =0.0.16 Source cves: CVE-2022-40897 Source advisory: OSV:PYSEC-2022-43012...

PT-2022-36598

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.334 Description A potential memory leak issue exists in the mISDN dsp element register function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-36165

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.80 Description A potential memory leak issue exists in the mISDN dsp element register function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

unicorn:fuzz_emu_mips_32le: Index-out-of-bounds in mipsdsp_sat32_acc_q31

Project: https://github.com/unicorn-engine/unicorn.git Detailed Report: https://oss-fuzz.com/testcase?key=5269576915222528 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemumips32le Job Type: libfuzzerubsanunicorn Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Cras...

unicorn:fuzz_emu_mips_32be: Index-out-of-bounds in mipsdsp_rndrashift_short_acc

Project: https://github.com/unicorn-engine/unicorn.git Detailed Report: https://oss-fuzz.com/testcase?key=5934566332563456 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemumips32be Job Type: libfuzzerubsanunicorn Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Cras...

Linux kernel Audio DoS

The vulnerability of the SNDCTLDSPSYNC ioctl function in the Linux kernel’s audio subsystem is related to incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2022-34647 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.68 Description: A race condition exists in the ALSA pcm oss module. The issue is related to the SNDCTL DSP SYNC control. The actual impact and attack plausibility have not yet been proven. Recommendations:...

A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SNDCTL_DSP_SYNC ioctl. A privileged local user (root or member of the audio group) could use this flaw to crash the system resulting in a denial of service condition

...

DEBIAN-CVE-2022-3303

A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SNDCTLDSPSYNC ioctl. A privileged local user root or member of the audio group could use this flaw to crash the system, resulting in a denial...

AZL-11048 CVE-2022-3303 affecting package kernel for versions less than 5.15.70.1-1

A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SNDCTLDSPSYNC ioctl. A privileged local user root or member of the audio group could use this flaw to crash the system, resulting in a denial...

PT-2025-9212

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Linux kernel's ALSA pcm oss component. The issue occurs in the snd pcm oss sync function, which is called from the OSS PCM SNDCTL DSP SYNC ioctl. This...

PT-2022-4974

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition flaw was found in the Linux kernel sound subsystem due to improper locking, which could lead to a NULL pointer dereference while handling the SNDCTL DSP SYNC ioctl. This...

CVE-2021-35132

Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

Input validation

Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...