635 matches found
CVE-2024-45542 Stack-based Buffer Overflow in WLAN Windows Host
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver...
CVE-2024-45542
CVE-2024-45542 affects Qualcomm WLAN chipsets; memory corruption occurs when an IOCTL from user space writes board data to the WLAN driver. The issue is triggered via a local attack (AV:L, AC:L, PR:L) with no user interaction, and it impacts confidentiality, integrity, and availability (C:H, I:H,...
CVE-2024-45541 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host
Memory corruption when IOCTL call is invoked from user-space to read board data...
CVE-2024-45541 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host
Memory corruption when IOCTL call is invoked from user-space to read board data...
CVE-2024-45541
CVE-2024-45541 affects Qualcomm chipsets where a memory corruption occurs when an IOCTL is invoked from user-space to read board data. The vulnerability is triggered through a local IOCTL path (low privileges, no user interaction) and results in memory corruption on the target device. CVSS metric...
CVE-2024-33061 Buffer Over-read in DSP Service
Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process...
CVE-2024-33061
CVE-2024-33061 describes an information disclosure affecting Qualcomm chipsets, caused by processing an IOCTL call used to release a trusted VM process or to open a channel without initializing the process. The vulnerability is disclosed as a local issue with high confidentiality impact and low a...
CVE-2024-33061 Buffer Over-read in DSP Service
Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process...
AZL-54143 CVE-2024-53112 affecting package kernel for versions less than 5.15.176.3-1
In the Linux kernel, the following vulnerability has been resolved: ocfs2: uncache inode which has failed entering the group Syzbot has reported the following BUG: kernel BUG at fs/ocfs2/uptodate.c:509! ... Call Trace: ? diebody+0x5f/0xb0 ? die+0x9e/0xc0 ? dotrap+0x15a/0x3a0 ?...
CVE-2024-53086 drm/xe: Drop VM dma-resv lock on xe_sync_in_fence_get failure in exec IOCTL
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Drop VM dma-resv lock on xesyncinfenceget failure in exec IOCTL Upon failure all locks need to be dropped before returning to the user. cherry picked from commit 7d1a4258e602ffdce529f56686925034c1b3b095...
kernel: drm/amdgpu: use-after-free vulnerability
A failure flaw was found in the Linux kernel’s AMDGPU driver in how a user sends ioctl with an invalid address and size when using the AMD GPU. This flaw allows a local user to crash the system...
CVE-2024-38407
Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver...
Qualcomm Chipsets 安全漏洞
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption that occurs when an IOCTL call is invoked from the usage space of an HGSL memory node...
kernel: tty: Fix out-of-bound vmalloc access in imageblit
A vulnerability was found in the Linux kernel's tty subsystem within the imageblit function when a userspace program performs an ioctl operation with the FBIOPUTVSCREENINFO command, passing a fbvarscreeninfo structure with limited fields. If the structure’s values remain unchanged from a previous...
CVE-2024-23376
Memory corruption while sending the persist buffer command packet from the user-space to the kernel space through the IOCTL call...
CVE-2024-23376
CVE-2024-23376 involves memory corruption while sending the persist buffer IOCTL from user-space to kernel space in Qualcomm-related components (notably Qualcomm Snapdragon Auto). The issue is described as a memory corruption (also characterized as a use-after-free in some feeds) affecting the pe...
CVE-2024-23376 Use After Free in ComputerVision
Memory corruption while sending the persist buffer command packet from the user-space to the kernel space through the IOCTL call...
CVE-2024-23376 Use After Free in ComputerVision
Memory corruption while sending the persist buffer command packet from the user-space to the kernel space through the IOCTL call...