CVE-2026-64237

In CVE-2026-64237, the Linux kernel vulnerability concerns elan_i2c firmware handling. The issue arises when the firmware file size is not verified to contain the expected number of pages and the signature at the blob end, risking out-of-bounds reads when accessing firmware data. Affected compone...

EUVD-2026-48646

In the Linux kernel, the following vulnerability has been resolved: Input: elani2c - validate firmware size before use Ensure that the firmware file is large enough to contain the expected number of pages and the signature which resides at the end of the firmware blob before accessing them to...

CVE-2026-53203

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Add buffer overflow check in MS getinfoioctl Add validation that the info size returned from the metric stream info query is not exceeded when checked against the allocated buffer size. If the firmware returns a size...

CVE-2026-53203

CVE-2026-53203 affects the Linux kernel’s accel/ivpu component. A buffer overflow can occur when the firmware returns a metric-stream info size larger than the allocated buffer during get_info_ioctl; if this happens, the operation could copy beyond the buffer. Remediation implemented in the publi...

PT-2026-52299

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the accel/ivpu component where the get info ioctl function fails to validate the info size returned from the metric stream info query against the allocated buffer size...

CVE-2025-27030

information disclosure while invoking calibration data from user space to update firmware size...

CVE-2025-27030

information disclosure while invoking calibration data from user space to update firmware size...

CVE-2025-27030 Buffer Over-read in Audio

information disclosure while invoking calibration data from user space to update firmware size...

CVE-2025-27030 Buffer Over-read in Audio

information disclosure while invoking calibration data from user space to update firmware size...

CVE-2025-27030

CVE-2025-27030 is described as an information disclosure in Qualcomm audio components, tied to Pixel Watch security bulletin coverage. The connected Pixel Watch bulletin lists this CVE under the Qualcomm components table with the vulnerability type as Audio and notes a patch level requirement of ...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a series of chipsets from Qualcomm, an American company. A security vulnerability exists in Qualcomm Chipsets that stems from a potential information leak when calibration data is called from user space to update firmware size...

AZL-74682 CVE-2025-39787 affecting package kernel for versions less than 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: mdtloader: Ensure we don't read past the ELF header When the MDT loader is used in remoteproc, the ELF header is sanitized beforehand, but that's not necessary the case for other clients. Validate the size of the...

UBUNTU-CVE-2025-39787

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: mdtloader: Ensure we don't read past the ELF header When the MDT loader is used in remoteproc, the ELF header is sanitized beforehand, but that's not necessary the case for other clients. Validate the size of the...

CVE-2025-39787 soc: qcom: mdt_loader: Ensure we don't read past the ELF header

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: mdtloader: Ensure we don't read past the ELF header When the MDT loader is used in remoteproc, the ELF header is sanitized beforehand, but that's not necessary the case for other clients. Validate the size of the...

DEBIAN-CVE-2025-39710

In the Linux kernel, the following vulnerability has been resolved: media: venus: Add a check for packet size after reading from shared memory Add a check to ensure that the packet size does not exceed the number of available words after reading the packet header from shared memory. This ensures...

CVE-2025-39710

In the Linux kernel, the following vulnerability has been resolved: media: venus: Add a check for packet size after reading from shared memory Add a check to ensure that the packet size does not exceed the number of available words after reading the packet header from shared memory. This ensures...

CVE-2025-39710

CVE-2025-39710: In the Linux kernel, the Venus media driver adds a packet-size validation after reading the header from shared memory to ensure the reported size cannot exceed the number of available words. This fixes potential out-of-bounds memory accesses by firmware-provided sizes. The fix tar...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the ims-pcu input module not validating the firmware record size, which could lead to memory corruption...

kernel: ASoC: Intel: avs: Fix potential RX buffer overflow

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix potential RX buffer overflow If an event caused firmware to return invalid RX size for LARGECONFIGGET, memcpyfromio could end up copying too many bytes. Fix by utilizing mint...

The vulnerability of the Android operating system, caused by integer overflows, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Android operating system arises from a numerical overflow during the calculation of the firmware size. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...