CVE-2024-38406 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Memory corruption while handling IOCTL calls in JPEG Encoder driver...

CVE-2024-38406 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Memory corruption while handling IOCTL calls in JPEG Encoder driver...

CVE-2024-33033 Use After Free in ComputerVision

Memory corruption while processing IOCTL calls to unmap the buffers...

CVE-2024-33033 Use After Free in ComputerVision

Memory corruption while processing IOCTL calls to unmap the buffers...

CVE-2024-23378

Memory corruption while invoking IOCTL calls for MSM module from the user space during audio playback and record...

CVE-2024-21455

Memory corruption when a compat IOCTL call is followed by another IOCTL call from userspace to a driver...

CVE-2024-23370

Memory corruption when a process invokes IOCTL calls from user-space to create a HAB virtual channel and another process invokes IOCTL calls to destroy the same...

CVE-2024-23378 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio

Memory corruption while invoking IOCTL calls for MSM module from the user space during audio playback and record...

CVE-2024-21455

CVE-2024-21455 is a memory corruption issue in Qualcomm’s adsprpc DSP driver exposed to user space via compat IOCTL handling. The root cause involves 32‑bit compatibility handling where a global is_compat flag is set on a file descriptor and later misinterprets a 64‑bit userland request as a 32‑b...

CVE-2024-46762 xen: privcmd: Fix possible access to a freed kirqfd instance

In the Linux kernel, the following vulnerability has been resolved: xen: privcmd: Fix possible access to a freed kirqfd instance Nothing prevents simultaneous ioctl calls to privcmdirqfdassign and privcmdirqfddeassign. If that happens, it is possible that a kirqfd created and added to the...

CVE-2024-46762 xen: privcmd: Fix possible access to a freed kirqfd instance

In the Linux kernel, the following vulnerability has been resolved: xen: privcmd: Fix possible access to a freed kirqfd instance Nothing prevents simultaneous ioctl calls to privcmdirqfdassign and privcmdirqfddeassign. If that happens, it is possible that a kirqfd created and added to the...

CVE-2024-38401

Memory corruption while processing concurrent IOCTL calls...

CVE-2024-38401 Use After Free in Qualcomm IPC

Memory corruption while processing concurrent IOCTL calls...

CVE-2024-38401

CVE-2024-38401 describes a memory corruption issue due to a use-after-free in the Qualcomm IPC component when processing concurrent IOCTL calls on Qualcomm chipsets. Affected software: Qualcomm IPC on Qualcomm chipsets (per CVE listing). Root cause: improper handling of concurrent IOCTL processin...

CVE-2024-38401 Use After Free in Qualcomm IPC

Memory corruption while processing concurrent IOCTL calls...

AZL-47361 CVE-2024-42156 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Wipe copies of clear-key structures on failure Wipe all sensitive data from stack for all IOCTLs, which convert a clear-key into a protected- or secure-key...

CVE-2024-36054

Hw64.sys in Marvin Test HW.exe before 5.0.5.0 allows unprivileged user-mode processes to arbitrarily read kernel memory and consequently gain all privileges via IOCTL 0x9c4064b8 via MmMapIoSpace and IOCTL 0x9c406490 via ZwMapViewOfSection...

CVE-2023-43514

Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP...

CVE-2023-43514 Use After Free in DSP Services

Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP...

CVE-2023-33022

CVE-2023-33022 corresponds to a memory corruption issue in the HLOS triggered by IOCTL calls from user-space, affecting Qualcomm components (including Qualcomm closed-source parts). The vulnerability is described in multiple sources as memory corruption with potential total impact on the system, ...