Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption when calling IOCTL in automotive multimedia...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from an information disclosure when processing IOCTL requests in FastRPC...

CVE-2021-46979

In the Linux kernel, the following vulnerability has been resolved: iio: core: fix ioctl handlers removal Currently ioctl handlers are removed twice. For the first time during iiodeviceunregister then later on inside iiodeviceunregistereventset and iiobuffersfreesysfsandmask. Double free leads to...

PT-2024-5375 · Zemana · Zemana Antilogger

Name of the Vulnerable Software and Affected Versions: Zemana AntiLogger version 2.74.204.664 Description: The issue is related to the incorrect validation of a critical resource in the IOCTL Handler component of the zam64.sys and zamguard64.sys drivers in Zemana AntiLogger. This can be exploited...

CVE-2024-23439

Vba32 Antivirus v3.36.0 is vulnerable to an Arbitrary Memory Read vulnerability by triggering the 0x22201B, 0x22201F, 0x222023, 0x222027 ,0x22202B, 0x22202F, 0x22203F, 0x222057 and 0x22205B IOCTL codes of the Vba32m64.sys driver...

CVE-2024-1096

Twister Antivirus v8.17 is vulnerable to a Denial of Service vulnerability by triggering the 0x80112067, 0x801120CB 0x801120CC 0x80112044, 0x8011204B, 0x8011204F, 0x80112057, 0x8011205B, 0x8011205F, 0x80112063, 0x8011206F, 0x80112073, 0x80112077, 0x80112078, 0x8011207C and 0x80112080 IOCTL codes ...

VulnCheck KEV: CVE-2024-21338

Microsoft Windows Kernel contains an exposed IOCTL with insufficient access control vulnerability within the IOCTL input and output control dispatcher in appid.sys that allows a local attacker to achieve privilege escalation...

CVE-2024-23441

Vba32 Antivirus v3.36.0 is vulnerable to a Denial of Service vulnerability by triggering the 0x2220A7 IOCTL code of the Vba32m64.sys driver...

Topaz Antifraud wsftprm.sys security vulnerability

Topaz Antifraud is a business application from Topaz, Inc. provides defined processes, integrations and customizable rules to optimize costs and provide a secure ecosystem for your business. A security vulnerability exists in Topaz Antifraud wsftprm.sys version 2.0.0.0, which stems from a...

CVE-2023-22668

Memory Corruption in Audio while invoking IOCTLs calls from the user-space...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption in audio when calling IOCTL from user space...

PT-2023-24146 · Qualcomm · 315 5G Iot Modem Firmware +171

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in HLOS when IOCTL calls are invoked from user-space. This can potentially lead to unintended system behavior or...

PT-2023-9585 · Qualcomm · Qualcomm Snapdragon Auto

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto versions prior to WSA8835 Description: The issue is related to memory corruption that occurs when sending the persist buffer command packet from the user-space to the kernel space through the IOCTL call. This can...

The vulnerability of the kernel driver (pdfwkrnl.sys) of AMD Radeon graphics processors allows a hacker to escalate their privileges and execute arbitrary code.

The vulnerability of the kernel driver pdfwkrnl.sys of AMD Radeon graphics processors is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to enhance their privileges and execute arbitrary code by sending specially crafted IOCTL requests...

Advanced Micro Devices Windows kernel drivers vulnerable to insufficient access control on its IOCTL

Overview Multiple Windows kernel drivers provided by Advanced Micro Devices Inc. are vulnerable to insufficient access control on its IOCTL CWE-782, CVE-2023-20598. Takahiro Haruyama of VMware reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact By sending a...

AMD Radeon Security Vulnerability

AMD Radeon is a device driver and utility package for Advanced Micro Devices graphics cards and GPUs from UltraMicro Semiconductor AMD. A security vulnerability exists in the AMD Radeon Graphics driver that stems from improper privilege management and could allow an authenticated attacker to craf...

The vulnerability of embedded software in Qualcomm products is caused by a situation where hackers can influence the privacy, integrity, and accessibility of protected information.

The vulnerability of embedded Qualcomm software relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information through calls to the IOCTL munmap command...

VulnCheck KEV: CVE-2023-33107

Multiple Qualcomm chipsets contain an integer overflow vulnerability due to memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call...

The vulnerability of the IOCTL component of the AMD uProf software profiling tool allows a hacker to load an unsigned driver and execute arbitrary code.

The vulnerability of the IOCTL component of the AMD uProf software profiling tool is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker to load unsigned drivers and execute arbitrary code...

Phoenix Technologies Windows kernel driver vulnerable to insufficient access control on its IOCTL

Overview Some of the Windows kernel drivers provided by Phoenix Technologies Inc. is vulnerable to insufficient access control on its IOCTL CWE-782, CVE-2023-35841. Takahiro Haruyama of VMware reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact By sending a...