59 matches found
CVE-2022-32592
In cpu dvfs, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07139405; Issue ID: ALPS07139405...
Out-of-bounds
In cpu dvfs, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07139405; Issue ID: ALPS07139405...
CVE-2022-32592
In cpu dvfs, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07139405; Issue ID: ALPS07139405...
CVE-2022-32592
The CVE-2022-32592 entry concerns MediaTek chipsets with a flaw in the cpu dvfs subsystem, where a missing bounds check enables an out-of-bounds write. This can allow local privilege escalation to SYSTEM with no user interaction required. The only remediation information present is Patch ID ALPS0...
PT-2022-21394
Name of the Vulnerable Software and Affected Versions cpu dvfs affected versions not specified Description The issue is related to a missing bounds check in cpu dvfs, which can lead to a possible out of bounds write. This could result in local escalation of privilege, requiring System execution...
CVE-2022-32592: Out-of-bounds Write
In cpu dvfs, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07139405; Issue ID: ALPS07139405...
Hertzbleed: A New Side-Channel Attack
Hertzbleed is a new side-channel attack that works against a variety of microprocressors. Deducing cryptographic keys by analyzing power consumption has long been an attack, but its not generally viable because measuring power consumption is often hard. This new attack measures power consumption ...
Hertzbleed exposes computers’ secret whispers
Hertzbleed is the name for a vulnerability that can be used to obtain cryptographic keys and other secret data from Intel and AMD CPUs, remotely. It works by monitoring changes in power consumption, which can be deduced by the careful timing of known workloads, thanks to a processor power saving...
New Hertzbleed Side Channel Attack Affects All Modern AMD and Intel CPUs
A newly discovered security vulnerability in modern Intel and AMD processors could let remote attackers steal encryption keys via a power side channel attack. Dubbed Hertzbleed by a group of researchers from the University of Texas, the University of Illinois Urbana-Champaign, and the University ...
PT-2022-2973
Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to observable behavioral power management throttling and errors in the dynamic frequency adjustment process of Intel processor microcode, specifically concernin...
PT-2022-2972
Name of the Vulnerable Software and Affected Versions AMD processors affected versions not specified Description A potential issue in AMD processors using frequency scaling may allow an authenticated attacker to execute a timing attack, potentially enabling information disclosure. The vulnerabili...
New Noise-Resilient Attack On Intel and AMD CPUs Makes Flush-based Attacks Effective
Modern Intel and AMD processors are susceptible to a new form of side-channel attack that makes flush-based cache attacks resilient to system noise, newly published research shared with The Hacker News has revealed. The findings are from a paper "DABANGG: Time for Fearless Flush based Cache...
CVE-2017-6278
NVIDIA Tegra kernel contains a vulnerability in the CORE DVFS Thermal driver where there is the potential to read or write a buffer using an index or pointer that references a memory location after the end of the buffer, which may lead to a denial of service or possible escalation of privileges...
CVE-2017-6278
NVIDIA Tegra kernel contains a vulnerability in the CORE DVFS Thermal driver where there is the potential to read or write a buffer using an index or pointer that references a memory location after the end of the buffer, which may lead to a denial of service or possible escalation of privileges...
Design/Logic Flaw
NVIDIA Tegra kernel contains a vulnerability in the CORE DVFS Thermal driver where there is the potential to read or write a buffer using an index or pointer that references a memory location after the end of the buffer, which may lead to a denial of service or possible escalation of privileges...
CVE-2017-6278
NVIDIA Tegra kernel contains a vulnerability in the CORE DVFS Thermal driver where there is the potential to read or write a buffer using an index or pointer that references a memory location after the end of the buffer, which may lead to a denial of service or possible escalation of privileges...
CVE-2017-6278
CVE-2017-6278 affects the NVIDIA Tegra kernel CORE DVFS Thermal driver, where a vulnerability can allow reading or writing a buffer using an index or pointer that references memory after the buffer end, potentially causing denial of service or privilege escalation. NVIDIA’s NVIDIA TX1/TX2 L4T adv...
CVE-2017-6278: Improper Restriction of Operations within the Bounds of a Memory Buffer
NVIDIA Tegra kernel contains a vulnerability in the CORE DVFS Thermal driver where there is the potential to read or write a buffer using an index or pointer that references a memory location after the end of the buffer, which may lead to a denial of service or possible escalation of privileges...
PT-2018-8327
Name of the Vulnerable Software and Affected Versions NVIDIA Tegra kernel affected versions not specified Description The issue is related to a buffer overflow in the CORE DVFS Thermal driver of the NVIDIA Tegra kernel, where an index or pointer may reference a memory location after the end of th...