Huawei honor 6x driver buffer overflow vulnerability

Huawei honor 6x is a smartphone from Chinese company Huawei Huawei. A buffer overflow vulnerability exists in the driver in previous versions of the Huawei honor 6x Berlin-L21HNC432B360, which stems from the program's failure to adequately detect parameters. An attacker can exploit the...

The vulnerability of the Intel Graphics Driver component in the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the Intel Graphics Driver for the Mac OS X operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context or cause a service failure memory...

CVE-2017-1000363

Linux drivers/char/lp.c Out-of-Bounds Write. Due to a missing bounds check, and the fact that parportptr integer is static, a 'secure boot' kernel command line adversary can happen due to bootloader vulns, e.g. Google Nexus 6's CVE-2016-10277, where due to a vulnerability the adversary has partia...

Huawei Mobile Wi-Fi Driver Denial of Service Vulnerability

The Huawei Honor 5C and P9 Lite are both smartphone products from the Chinese company Huawei Huawei. A denial of service vulnerability exists in the Huawei mobile Wi-Fi driver. An attacker may trick users into installing a malicious application that reboots the system due to accessing an invalid...

The vulnerability of the Qualcomm ADSP RPC driver of the Android operating system allows a hacker to execute arbitrary code.

The vulnerability of the Qualcomm ADSP RPC driver in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Google Pixel Qualcomm Sound Codec Driver Elevation of Privilege Vulnerability

Google Pixel is a smartphone from the American company Google Google. An elevation of privilege vulnerability exists in the Google Pixel Qualcomm Sound Codec Driver. An attacker can exploit the vulnerability to execute arbitrary code using elevated kernel privileges...

The vulnerability of the driver for the microprogramming software of the Cisco TelePresence Multipoint Control Unit allows a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of the driver for the Microprogramming Software of the Cisco TelePresence Multipoint Control Unit is related to improper checking of packet sizes during the assembly of IPv4 and IPv6 fragments. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or...

CVE-2016-10292

A denial of service vulnerability in the Qualcomm Wi-Fi driver could enable a proximate attacker to cause a denial of service in the Wi-Fi subsystem. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID:...

Privilege escalation

An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process...

NVIDIA Windows GPU Display Driver Local Elevation of Privilege Vulnerability (CNVD-2017-07440)

NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. A local elevation of privilege vulnerability exists in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape in the NVIDIA Windows GPU Display Driver. An attacker could use th...

CVE-2017-0349

All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where a pointer passed from a user to the driver is not correctly validated before it is dereferenced for a write operation, may lead to denial of service ...

CVE-2017-0352

All versions of the NVIDIA GPU Display Driver contain a vulnerability in the GPU firmware where incorrect access control may allow CPU access sensitive GPU control registers, leading to an escalation of privileges...

The vulnerability of the Linux operating system, which allows a perpetrator to trigger a service failure or cause other effects

The vulnerability in the driver drivers/media/usb/dvb-usb/dw2102.c of the Linux operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor, operating locally, to improperly interact with the CONFIGVMAPSTACK...

Intel Hardware Accelerated Execution Manager Elevation of Privilege Vulnerability

Intel Hardware Accelerated Execution Manager is a hardware-accelerated execution manager based on Intel's virtualization technology from Intel USA. A privilege extraction vulnerability exists in the IntelHAXM.sys driver in Intel Hardware Accelerated Execution Manager versions prior to 6.0.6. A...

CVE-2017-8066

drivers/net/can/usb/gsusb.c in the Linux kernel 4.9.x and 4.10.x before 4.10.2 interacts incorrectly with the CONFIGVMAPSTACK option, which allows local users to cause a denial of service system crash or memory corruption or possibly have unspecified other impact by leveraging use of more than on...

CVE-2017-8061

drivers/media/usb/dvb-usb/dvb-usb-firmware.c in the Linux kernel 4.9.x and 4.10.x before 4.10.7 interacts incorrectly with the CONFIGVMAPSTACK option, which allows local users to cause a denial of service system crash or memory corruption or possibly have unspecified other impact by leveraging us...

Linux kernel denial of service vulnerability (CNVD-2017-05874)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A denial of service vulnerability exists in the drivers/char/virtioconsole.c file in Linux kernel versions 4.10.x prior to 4.10.12 and 4.9.x due to the program failing to...

Important: Red Hat Security Advisory: qemu-kvm-rhev security update

An update for qemu-kvm-rhev is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 Icehouse for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Google Android NVIDIA I2C HID Driver Elevation of Privilege Vulnerability

Google Android is a mobile operating system based on the Linux open kernel. An elevation of privilege vulnerability exists in the Google Android NVIDIA I2C HID Driver. An attacker can exploit this vulnerability to execute arbitrary code in the kernel context...

Heap overflow

Touchscreen driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L026.10.1 has a heap overflow vulnerability, which allows attackers to crash the system or escalate user privilege...