8785 matches found
CVE-2024-38418
CVE-2024-38418 describes memory corruption occurring when parsing the memory map information in IOCTL calls, affecting Qualcomm chipsets (notably camera/Linux components). The vulnerability stems from parsing memory map data inside an IOCTL path, enabling local exploitation with low privileges an...
CVE-2024-38412 Use After Free in Computer Vision
Memory corruption while invoking IOCTL calls from user-space to kernel-space to handle session errors...
CVE-2024-38412 Use After Free in Computer Vision
Memory corruption while invoking IOCTL calls from user-space to kernel-space to handle session errors...
CVE-2024-38412
CVE-2024-38412 is a memory-corruption issue linked to IOCTL handling of session errors in Qualcomm chipsets. Multiple connected sources confirm a kernel-space/ user-space IOCTL path as the root cause, with local access required and high impact to confidentiality, integrity, and availability per C...
CVE-2024-38411 Use After Free in Computer Vision
Memory corruption while registering a buffer from user-space to kernel-space using IOCTL calls...
CVE-2024-38411
CVE-2024-38411 involves memory corruption that occurs when registering a buffer from user-space to kernel-space via an IOCTL call on Qualcomm chipsets. The issue is linked to buffer management during the registration flow, including the path that adds the buffer to in-kernel lists and attempts to...
CVE-2024-38411 Use After Free in Computer Vision
Memory corruption while registering a buffer from user-space to kernel-space using IOCTL calls...
PT-2025-2508
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption that occurs when registering a buffer from user-space to kernel-space using IOCTL calls. This can lead to unspecifi...
CVE-2024-49843: Improper Validation of Array Index
Memory corruption while processing IOCTL from user space to handle GPU AHB bus error...
CVE-2024-49840: Use of Out-of-range Pointer Offset
Memory corruption while Invoking IOCTL calls from user-space to validate FIPS encryption or decryption functionality...
PT-2025-2870
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue involves memory corruption when invoking IOCTL calls from user-space to validate FIPS encryption or decryption functionality. This can occur whe...
CVE-2024-45584: Untrusted Pointer Dereference
Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace...
CVE-2024-45561: Buffer Over-read
Memory corruption while handling IOCTL call from user-space to set latency level...
CVE-2024-38418: Time-of-check Time-of-use (TOCTOU) Race Condition
Memory corruption while parsing the memory map info in IOCTL calls...
CVE-2024-38411: Use After Free
Memory corruption while registering a buffer from user-space to kernel-space using IOCTL calls...
CVE-2024-38412: Use After Free
Memory corruption while invoking IOCTL calls from user-space to kernel-space to handle session errors...
PT-2025-2711
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption that occurs while handling an IOCTL call from user-space to set the latency level. This suggests a problem with how...
PT-2025-14331
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified, specifically in the "pmcmd ioctl" function within the acrn hypervisor. The issue arises from the use of kmalloc for memory...
PT-2025-9005
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue arises from the ioctl and sysfs handlers unconditionally calling the -enable callback, which can lead to NULL dereference...
