CVE-2017-18295

Possible buffer overflow if input is not null terminated in DSP Service module in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDX20...

Buffer overflow

Possible buffer overflow if input is not null terminated in DSP Service module in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDX20...

CVE-2017-18295

Possible buffer overflow if input is not null terminated in DSP Service module in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDX20...

CVE-2017-18295

CVE-2017-18295 describes a possible buffer overflow in the DSP Service module across Snapdragon platforms (Automobile, Mobile, Wear) for various Qualcomm SoCs (MDM9206/9607/9650, MSM8909W/8996AU, SD family up to SD835/SDX20). Root cause: input that is not null terminated may overflow a buffer, po...

Nameles - Open Source Entropy Based Invalid Traffic Detection And Pre-Bid Filtering

Nameles provides an easy to deploy, scalable IVT detection and filtering solution that is proven to detect at a high level of accuracy ad fraud and other types of invalid traffic such as web scraping. For a high level overview you might want to check out the website If you have any questions or...

Buffer overflow

While processing a DSP buffer in an audio driver's event handler, an index of a buffer is not checked before accessing the buffer in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel...

CVE-2018-3572

While processing a DSP buffer in an audio driver's event handler, an index of a buffer is not checked before accessing the buffer in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel...

CVE-2018-3572

While processing a DSP buffer in an audio driver's event handler, an index of a buffer is not checked before accessing the buffer in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel...

CVE-2025-34125

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/dlinkdspw110cookienoauthexec.rb 2025-10-23 21:13:04+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7...

Security Bulletin: NVIDIA Jetson TX1, Jetson TK1, Jetson TX2, and Tegra K1 L4T Security Updates for Multiple Vulnerabilities

Jetson and Tegra L4T contain vulnerabilities which may lead to denial of service, escalation of privileges, or information disclosure. Go to NVIDIA Product Security. Vulnerability Details The following sections summarize the potential vulnerabilities. Descriptions use CWE™ and risk assessments...

Linux/x86 - Audio (knock knock knock) via /dev/dsp + setreuid(0,0) + execve() Shellcode (566 bytes)

/ Audio knock knock knock via /dev/dsp + setreuid0,0 + execve shellcode. Linux x86 Author: Cody Tubbs loophole of hhp. www.hhp-programming.net / email protected 12/20/2000. F.U. to ph1xry4n. -From me and dxmd... If I ripped this, show me the source... or better yet go barrow a shovel so you can d...

Android Qualcomm QDSP6v2 Driver Information Disclosure Vulnerability (CNVD-2016-09038)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA.Qualcomm QDSP6v2 driver is one of the Qualcomm digital signal processor drivers. An information disclosure vulnerability exists in the drivers/misc/qcom/qdsp6v2/audioutils.c file in...

The vulnerability of Google Chrome browser allows a malicious actor to compromise the accessibility of protected information.

The vulnerability exists in the module/webaudio/BiquadDSPKernel.cpp of the Web Audio API implementation in Blink for Google Chrome. It stems from improper handling of parallel streams when attempting to update the coefficients of the biquad filter. Exploiting this vulnerability allows malicious...

CVE-2015-7473

runmqsc in IBM WebSphere MQ 8.x before 8.0.0.5 allows local users to bypass intended queue-manager command access restrictions by leveraging authority for +connect and +dsp...

PlayerPro DSP pack - BSD license, Native code usage, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application PlayerPro DSP pack published at the 'play' market has multiple vulnerabilities...

D-Link Cookie command injection

Added: 07/30/2015 Background D-Link produces a variety of routers, switches, and other network equipment for home users and businesses. Problem A command injection vulnerability allows remote attackers to execute arbitrary commands by sending a specially crafted cookie in an HTTP request...

Multiple Vulnerabilities in the D-Link DSP-W

The D-Link DSP w110 is an outlet that controls the power switch wirelessly. The D-Link DSP-W has multiple security vulnerabilities that could be exploited by attackers to bypass security restrictions, obtain sensitive information, and arbitrarily upload files...

D-Link DSP-W w110 v1.05b01 - Multiple Vulnerabilities

Exploit for hardware platform in category web applications Exploit Title: D-Link DSP-W Arbitrary Arbitrary file upload Date: 30/06/2015 Exploit Author: DNO Vendor Homepage: link Version: w110 v1.05b01 Tested on: linux CVE : N/A ======================================== the only 'filtering' on this...

D-Link DSP-W110 Command Execution / SQL Injection / File Upload Vulnerabilities

D-Link DSP-W110 suffers from command execution, remote file upload, and remote SQL injection vulnerabilities. D-Link DSP-W110 - multiple vulnerabilities ---- Discovered by: ---- Peter Adkins ---- Access: ---- Local network; unauthenticated access. ---- Tracking and identifiers: ---- CVE - None...

D-Link DSP-W110 Command Execution / SQL Injection / File Upload

D-Link DSP-W110 - multiple vulnerabilities ---- Discovered by: ---- Peter Adkins ---- Access: ---- Local network; unauthenticated access. ---- Tracking and identifiers: ---- CVE - None allocated. ---- Platforms / Firmware confirmed affected: ---- D-Link DSP-W110 Rev A - v1.05b01 ---- Notes: ----...