Lucene search
+L

8785 matches found

Vulnrichment
Vulnrichment
•added 2025/01/06 10:33 a.m.•25 views

CVE-2024-33055 Use After Free in Computer Vision

Memory corruption while invoking IOCTL calls to unmap the DMA buffers...

6.7CVSS7.1AI score0.00102EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/06 10:33 a.m.•93 views

CVE-2024-33055

CVE-2024-33055 describes memory corruption occurring when invoking IOCTL calls to unmap DMA buffers in Qualcomm chipsets. Connected sources confirm the issue affects memory handling in the DMA buffer unmapping path and classify the impact at the memory-corruption level; several advisories referen...

7.8CVSS6.8AI score0.00102EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/01/06 10:33 a.m.•17 views

CVE-2024-33041 Use of Out-of-range Pointer Offset in Computer Vision

Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls,...

6.7CVSS7.2AI score0.0013EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/06 10:33 a.m.•88 views

CVE-2024-33041

CVE-2024-33041 concerns memory corruption in Qualcomm chipsets caused by missing input parameter validation for the fence frame IOCTL calls (specifically the number of fences). The root cause is a validation gap in the fence framework IOCTL path, leading to potential memory corruption with high i...

7.8CVSS6.8AI score0.0013EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/01/06 10:33 a.m.•76 views

CVE-2024-33041 Use of Out-of-range Pointer Offset in Computer Vision

Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls,...

6.7CVSS0.0013EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/06 12:00 a.m.•5 views

PT-2025-2703

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue involves memory corruption while processing an IOCTL call invoked from user-space to verify non-extension FIPS encryption and decryption...

7.8CVSS0.0007EPSS
SaveExploits0References7
CVE
CVE
•added 2025/01/06 12:00 a.m.•86 views

CVE-2024-55407

The ITE IO Access v1.0.0.0 software by ITE Tech. Inc contains a vulnerability in the DeviceloControl function. An attacker can perform arbitrary port read and write actions by supplying crafted IOCTL requests , potentially leading to unauthorized data modification or access. As a temporary workar...

7.8CVSS7AI score0.00214EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/06 12:00 a.m.•36 views

PT-2025-2408 · Qualcomm · Snapdragon +36

Name of the Vulnerable Software and Affected Versions: No specific software or affected versions are mentioned in the provided descriptions. Description: The issue involves memory corruption that occurs when invoking IOCTL calls to unmap DMA buffers. This can lead to memory corruption. No...

7.8CVSS7.2AI score0.00102EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/06 12:00 a.m.•8 views

CVE-2024-45548: Buffer Over-read

Memory corruption while processing FIPS encryption or decryption validation functionality IOCTL call...

7.8CVSS6AI score0.00086EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/06 12:00 a.m.•9 views

CVE-2024-45546: Buffer Over-read

Memory corruption while processing FIPS encryption or decryption IOCTL call invoked from user-space...

7.8CVSS6AI score0.00086EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/06 12:00 a.m.•4 views

CVE-2024-45550: Improper Validation of Array Index

Memory corruption occurs when invoking any IOCTL-calling application that executes all MCDM driver IOCTL calls...

7.8CVSS6AI score0.00103EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/06 12:00 a.m.•10 views

CVE-2024-45542: Stack-based Buffer Overflow

Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver...

7.8CVSS6AI score0.00131EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/06 12:00 a.m.•11 views

CVE-2024-45541: Buffer Copy without Checking Size of Input

Memory corruption when IOCTL call is invoked from user-space to read board data...

7.8CVSS6AI score0.00109EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/06 12:00 a.m.•9 views

CVE-2024-33061: Buffer Over-read

Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process...

6.8CVSS5.8AI score0.00101EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/06 12:00 a.m.•8 views

CVE-2024-33055: Use After Free

Memory corruption while invoking IOCTL calls to unmap the DMA buffers...

7.8CVSS6AI score0.00102EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/06 12:00 a.m.•7 views

CVE-2024-33059: Use After Free

Memory corruption while processing frame command IOCTL calls...

7.8CVSS6AI score0.0013EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/06 12:00 a.m.•7 views

CVE-2024-33041: Use of Out-of-range Pointer Offset

Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls,...

7.8CVSS6AI score0.0013EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/06 12:00 a.m.•9 views

CVE-2024-55408: Missing Authorization

An improper access control vulnerability in the AsusSAIO.sys driver may lead to the misuse of software functionality utilizing the driver when crafted IOCTL requests are supplied...

5.3CVSS5.8AI score0.00243EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/06 12:00 a.m.•9 views

CVE-2024-55407: Improper Validation of Specified Quantity in Input

An issue in the DeviceloControl function of ITE Tech. Inc ITE IO Access v1.0.0.0 allows attackers to perform arbitrary port read and write actions via supplying crafted IOCTL requests...

7.8CVSS6AI score0.00214EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/01/06 12:00 a.m.•7 views

PT-2025-2701

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Compute affected versions not specified Description The issue is related to memory corruption that occurs when an IOCTL call is invoked from user-space to write board data to the WLAN driver. This can lead to potential...

7.8CVSS0.00131EPSS
SaveExploits0References8
Rows per page
Query Builder