Imagination GPU Driver 安全漏洞

The Imagination GPU Driver is a graphics driver from Imagination. A security vulnerability exists in the Imagination GPU Driver that originates from kernel software installed and running in the Guest VM that may leverage memory shared with the GPU firmware to write data outside of the Guest's...

PT-2025-18425

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the ath12k wifi module. The issue occurs when the ath12k pci remove function fails to free allocated firmware...

UBUNTU-CVE-2024-40979

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix kernel crash during resume Currently during resume, QMI target memory is not properly handled, resulting in kernel crash in case DMA remap is not supported: BUG: Bad page state in process kworker/u16:54 pfn:36e8...

Nuki Bridge 安全漏洞

Nuki Bridge is a smart lock control software from Nuki. A security vulnerability exists in Nuki Bridge v1.x prior to v1.22.0 and v2.x prior to v2.13.2, and Nuki Keypad v1.9.2 prior to v1.9.2, which stems from an attacker being able to use debugging functionality to control the execution of code o...

PT-2024-12275

Name of the Vulnerable Software and Affected Versions SEV Firmware affected versions not specified Description The issue is related to the failure to initialize memory in SEV Firmware, which may allow a privileged attacker to access stale data from other guests. Recommendations At the moment, the...

CVE-2023-28559 Buffer Copy Without Checking Size of Input in WLAN HAL

Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload...

PT-2023-21830 · Qualcomm · Qualcomm Fastconnect 6800

Name of the Vulnerable Software and Affected Versions: Qualcomm FastConnect 6800 affected versions not specified Description: The issue is related to memory corruption in WLAN Firmware when parsing received GTK Keys in GTK KDE. This can potentially lead to security concerns. The severity of this...

PT-2023-18478 · Qualcomm · Qm215 Firmware +220

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in the WLAN HOST when processing a WLAN FW request to allocate memory. Recommendations: At the moment, there is no...

CVE-2021-26356

A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read to memory potentially resulting in S3 data corruption and information disclosure...

Insyde InsydeH2O 安全漏洞

Insyde InsydeH2O is a C source from Insyde Software Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the legacy BIOS Basic Input/Output System.Insyde InsydeH2O suffers from a memory corruption vulnerability. InsydeH2O is vulnerable to memory corruptio...

CVE-2021-28695

IOMMU page mapping issues on x86 This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Both AMD and Intel allow ACPI tables to specify regions of memory which should be left untranslated, which typically means these addresse...

edk2: remote buffer overflow in IScsiHexToBin function in NetworkPkg/IScsiDxe

A flaw was found in edk2. Missing checks in the IScsiHexToBin function in NetworkPkg/IScsiDxe lead to a buffer overflow allowing a remote attacker, who can inject himself in the communication between edk2 and the iSCSI target, to write arbitrary data to any address in the edk2 firmware and...

Race condition

In a firmware memory dump feature in all Android releases from CAF using the Linux kernel Android for MSM, Firefox OS for MSM, QRD Android, a Use After Free condition can occur...

CVE-2018-3587

In a firmware memory dump feature in all Android releases from CAF using the Linux kernel Android for MSM, Firefox OS for MSM, QRD Android, a Use After Free condition can occur...

CVE-2018-3587

In a firmware memory dump feature in all Android releases from CAF using the Linux kernel Android for MSM, Firefox OS for MSM, QRD Android, a Use After Free condition can occur...