CVE-2024-38402 Use After Free in DSP Services

Memory corruption while processing IOCTL call for getting group info...

CVE-2024-38402

CVE-2024-38402 is a memory corruption via a refcount leak in the Qualcomm ADSPRPC DSP driver (fastrpc_get_process_gids). The vulnerability can enable use-after-free of the group_info structure, exposing kernel memory through a non-saturating refcount that can overflow with repeated calls. Disclos...

CVE-2024-38402 Use After Free in DSP Services

Memory corruption while processing IOCTL call for getting group info...

CVE-2024-33021

Memory corruption while processing IOCTL call to set metainfo...

CVE-2024-33021 Use of Uninitialized Variable in Automotive GPU

Memory corruption while processing IOCTL call to set metainfo...

CVE-2024-33021 Use of Uninitialized Variable in Automotive GPU

Memory corruption while processing IOCTL call to set metainfo...

CVE-2024-33021

CVE-2024-33021 affects Qualcomm automotive GPU components. The issue is described as memory corruption occurring while processing an IOCTL call to set metainfo, with a Local attack vector, low privileges required, and no user interaction. The CVSS metrics indicate a HIGH impact on confidentiality...

CVE-2024-5679

CWE-787: Out-of-Bounds Write vulnerability exists that could cause local denial-of-service, or kernel memory leak when a malicious actor with local user access crafts a script/program using an IOCTL call in the Foxboro.sys driver...

CVE-2024-5680

CWE-129: Improper Validation of Array Index vulnerability exists that could cause local denial-of-service when a malicious actor with local user access crafts a script/program using an IOCTL call in the Foxboro.sys driver...

CVE-2024-5680

CWE-129: Improper Validation of Array Index vulnerability exists that could cause local denial-of-service when a malicious actor with local user access crafts a script/program using an IOCTL call in the Foxboro.sys driver...

CVE-2024-5679

CWE-787: Out-of-Bounds Write vulnerability exists that could cause local denial-of-service, or kernel memory leak when a malicious actor with local user access crafts a script/program using an IOCTL call in the Foxboro.sys driver...

CVE-2024-5679

CVE-2024-5679 is an Out-of-Bounds Write vulnerability in the Foxboro.sys driver. A local attacker with user access can craft a program/script using an IOCTL to trigger a local denial-of-service or kernel memory leak. Documented impact is local, with high severity (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:...

CVE-2024-5679

CWE-787: Out-of-Bounds Write vulnerability exists that could cause local denial-of-service, or kernel memory leak when a malicious actor with local user access crafts a script/program using an IOCTL call in the Foxboro.sys driver...

Schneider Electric EcoStruxure Foxboro DCS Input Validation Error Vulnerability

Schneider Electric EcoStruxure Foxboro DCS is an innovative fault-tolerant, highly available control component from Schneider Electric France. An input validation error vulnerability exists in Schneider Electric EcoStruxure Foxboro DCS Core Control Services version 9.8 and earlier, which stems fr...

Schneider Electric EcoStruxure Foxboro DCS Input Validation Error Vulnerability

Schneider Electric EcoStruxure Foxboro DCS is an innovative fault-tolerant, highly available control component from Schneider Electric France. An input validation error vulnerability exists in Schneider Electric EcoStruxure Foxboro DCS Core Control Services version 9.8 and prior versions, which...

CVE-2024-23372

Memory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than expected size...

RHEL 6 : polkit (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - polkit: Improper handling of user with uid INTMAX leading to authentication bypass CVE-2018-19788 - pkexe...

CVE-2024-23354

Memory corruption when the IOCTL call is interrupted by a signal...

CVE-2024-23354 Use After Free in Graphics Linux

Memory corruption when the IOCTL call is interrupted by a signal...

CVE-2024-23354

CVE-2024-23354 is a memory-corruption issue in Qualcomm chipsets triggered when an IOCTL is interrupted by a signal. Documented in Qualcomm security bulletins and reflected across sources (NVD, RH, CNNVD, OSV). The records do not specify affected models/versions or a confirmed patch; exploitation...