592 matches found
kernel: firmware: cs_dsp: Fix OOB memory read access in KUnit test (wmfw info)
In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Fix OOB memory read access in KUnit test wmfw info KASAN reported out of bounds access - csdspmockwmfwaddinfo, because the source string length was rounded up to the allocation size...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989206)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989206 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix race at SNDCTLDSPSYNC There is a small race window at sndpcmosssync that is...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989228)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989228 advisory. In the Linux kernel, the following vulnerability has been resolved: mISDN: Fix memory leak in dsppipelinebuild dsppipelinebuild allocates dup pointer by kstrdupcfg,...
CVE-2025-47368 Buffer Over-read in DSP Service
Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing...
CVE-2025-47368
CVE-2025-47368 affects Qualcomm DSP Service (Memory corruption in MCDM IOCTL processing when dereferencing an invalid userspace address in a user buffer). The CVSS v3.1 vector indicates a Local, Low-Complexity exploit with Low Privileges Required, no user interaction, and impacts on confidentiali...
PT-2025-44932
Name of the Vulnerable Software and Affected Versions versions prior to 2025 Description A memory corruption issue exists when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing. This can lead to a buffer over-read in the DSP Service. Recommendations At the...
MAL-2025-48790 Malicious code in ads-dsp-lite-components (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ads-dsp-lite-components (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2025-47355 Out-of-bounds Write in DSP Service
Memory corruption while invoking remote procedure IOCTL calls...
CVE-2025-47355
CVE-2025-47355 is described across multiple sources as a memory corruption issue in Qualcomm chipsets caused by memory corruption when invoking remote procedure IOCTL calls. The CVE is listed in the CVE databases as an Out-of-bounds Write in the DSP Service, indicating a memory access issue at th...
CVE-2025-47355 Out-of-bounds Write in DSP Service
Memory corruption while invoking remote procedure IOCTL calls...
CVE-2025-47354 Use After Free in DSP Service
Memory corruption while allocating buffers in DSP service...
CVE-2025-47351 Integer Overflow or Wraparound in DSP Service
Memory corruption while processing user buffers...
CVE-2025-47349
CVE-2025-47349 describes memory corruption in Qualcomm chipsets when processing an escape call, related to an out-of-range pointer offset in the DSP service. The Red Hat/NVD/CVE records corroborate a memory corruption impact with high severity (local, attacker requires low privileges, no user int...
CVE-2025-47338 Untrusted Pointer Dereference in DSP Service
Memory corruption while processing escape commands from userspace...
Linux Distros Unpatched Vulnerability : CVE-2022-50426
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: remoteproc: imxdsprproc: Add mutex protection for workqueue The workqueue may execute late...
EUVD-2017-9421
Malware in sbrugna...
EUVD-2021-12353
Malware in sbrugna...