CVE-2021-38787: Integer Overflow or Wraparound

There is an integer overflow in the ION driver "/dev/ion" of Allwinner R818 SoC Android Q SDK V1.0 that could use the ioctl cmd "COMPATIONIOCSUNXIFLUSHRANGE" to cause a system crash denial of service...

PT-2022-10776

Name of the Vulnerable Software and Affected Versions Allwinner R818 SoC Android Q SDK V1.0 Description The issue is an integer overflow in the ION driver "/dev/ion" that could cause a system crash, resulting in a denial of service. This can be triggered using the ioctl cmd COMPAT ION IOC SUNXI...

Allwinner Technology R818 输入验证错误漏洞

The Allwinner Technology R818 is a quad-core intelligent voice with screen chip from Allwinner Technology Zhuhai, China. The Allwinner Technology R818 suffers from an input validation error vulnerability that originates from an integer overflow in the ION driver dev ION of the Android Q SDK V1.0,...

CVE-2021-0929

In iondmabufendcpuaccess and related functions of ion.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

DEBIAN-CVE-2021-0929

In iondmabufendcpuaccess and related functions of ion.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

UBUNTU-CVE-2021-0929

In iondmabufendcpuaccess and related functions of ion.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

Google Android Kernel Component Elevation of Privilege Vulnerability (CNVD-2021-101426)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA. an elevation of privilege vulnerability exists in the Google Android Kernel component ION, which could be exploited by an attacker to cause a local elevation of privilege without...

ION Wallstreet Suite TRM 信任管理问题漏洞

Ion Wallstreet Suite Trm is an enterprise tms solution from Ion UK. It is used to help finance teams at the world's top companies manage their financial and risk operations efficiently and securely. A trust management issue vulnerability exists in ION Wallstreet Suite TRM version 7.4.83 64-bit,...

CVE-2021-25458

NULL pointer dereference vulnerability in ION driver prior to SMR Sep-2021 Release 1 allows attackers to cause memory corruption...

CVE-2021-25458

NULL pointer dereference vulnerability in ION driver prior to SMR Sep-2021 Release 1 allows attackers to cause memory corruption...

Null pointer dereference

NULL pointer dereference vulnerability in ION driver prior to SMR Sep-2021 Release 1 allows attackers to cause memory corruption...

CVE-2021-25458

NULL pointer dereference vulnerability in ION driver prior to SMR Sep-2021 Release 1 allows attackers to cause memory corruption...

CVE-2021-25458

NULL pointer dereference vulnerability in ION driver prior to SMR Sep-2021 Release 1 allows attackers to cause memory corruption...

CVE-2021-25458

CVE-2021-25458 describes a NULL pointer dereference in the ION driver prior to Samsung SMR Sep-2021 Release 1, leading to memory corruption. Affected component: ION driver; root cause relates to a NULL pointer dereference. Impact (per sources): local attacker could trigger memory corruption with ...

CVE-2021-25458: NULL Pointer Dereference

NULL pointer dereference vulnerability in ION driver prior to SMR Sep-2021 Release 1 allows attackers to cause memory corruption...

PT-2021-16648

Name of the Vulnerable Software and Affected Versions: ION driver versions prior to SMR Sep-2021 Release 1 Description: A NULL pointer dereference issue in the ION driver allows attackers to cause memory corruption. Recommendations: For versions prior to SMR Sep-2021 Release 1, update to SMR...

The vulnerability of the microprogrammed power measurement devices and energy meters from PowerLogic, models ION8650, ION8800, ION7650, ION7700/73xx, and ION83xx/84xx/85xx/8600, arises from the execution of operations beyond the buffer boundaries in memory. This allows an attacker to trigger a system reboot.

The vulnerability of the microprogrammed power measurement devices and energy meters from PowerLogic, models ION8650, ION8800, ION7650, ION7700/73xx, and ION83xx/84xx/85xx/8600, lies in the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an...

Critical Security Bug Can Knock Smart Meters Offline

Critical security vulnerabilities in Schneider Electric smart meters could allow an attacker a path to remote code execution RCE, or to reboot the meter causing a denial-of-service DoS condition on the device. Schneider Electric’s PowerLogic ION/PM smart meter product line, like other smart meter...

CVE-2021-22713

A CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability exists in PowerLogic ION8650, ION8800, ION7650, ION7700/73xx, and ION83xx/84xx/85xx/8600 see security notifcation for affected versions, which could cause the meter to reboot...

PT-2021-3889

Name of the Vulnerable Software and Affected Versions PowerLogic ION8650, ION8800, ION7650, ION7700/73xx, and ION83xx/84xx/85xx/8600 affected versions not specified Description The issue is related to a buffer overflow in the memory, which could allow a remote attacker to cause the device to...