CVE-2026-21373 Buffer Over-read in Camera

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing...

CVE-2026-21372 Heap-Based Buffer Overflow in Power Management IC

Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations...

CVE-2026-21372

CVE-2026-21372 describes memory corruption/heap-based overflow in a Power Management IC when handling IOCTLs with invalid buffer sizes during memcpy. The vulnerability is detailed across sources as a memory corruption issue triggered by malformed IOCTL buffer lengths, with impact on confidentiali...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a series of chipset developed by Qualcomm Incorporation. There is a security vulnerability in Qualcomm Chipsets, which stems from memory corruption that occurs during the preprocessing of IOCTL requests in JPEG drivers...

PT-2026-30647

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver...

PT-2026-30645

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a series of chipset developed by Qualcomm Incorporated in the United States. There is a security vulnerability in Qualcomm Chipsets, which stems from the lack of size verification when accessing the output buffer during the IOCTL processing of the camera sensor driver. This...

Qualcomm Chipsets 资源管理错误漏洞

Qualcomm Chipsets are a series of chipset developed by Qualcomm Incorporated in the United States. Qualcomm Chipsets have a resource management vulnerability that stems from the use of the deprecated DMABUF IOCTL to manage video memory, which may lead to memory corruption...

PT-2026-30636

Memory corruption while preprocessing IOCTL request in JPEG driver...

PT-2026-30642

Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations...

CVE-2025-54602

An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Improper synchronization on a global variable leads to a use-after-free. An attacker can trigger a race condition by invoking ...

PT-2026-30646

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver...

The vulnerability of the ASUS Business System Control Interface arises from the improper assignment of permissions for critical resources, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of the ASUS Business System Control Interface is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by sending a specially crafted IOCTL request...

SUSE CVE-2026-23295

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix dead lock for suspend and resume When an application issues a query IOCTL while auto suspend is running, a deadlock can occur. The query path holds devlock and then calls pmruntimeresumeandget, which waits for...

CVE-2026-23295

A flaw was found in the Linux kernel's accel/amdxdna driver. A local application can trigger a deadlock by issuing a query IOCTL Input/Output Control while the system's auto suspend feature is active. This can lead to a Denial of Service DoS, making the system unresponsive...

CVE-2026-23295

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix dead lock for suspend and resume When an application issues a query IOCTL while auto suspend is running, a deadlock can occur. The query path holds devlock and then calls pmruntimeresumeandget, which waits for...

Siemens SIMATIC S7-1500 Out-of-bounds Read (CVE-2025-38111)

In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of-bounds read/write access When using publicly available tools like 'mdio-tools' to read/write data from/to network interface and its PHY via mdiobus, there is no verification of parameters passed ...

CVE-2026-22163

Requires malware code to misuse the DDK kernel module IOCTL interface. Such code can use the interface in an unsupported way that allows subversion of the GPU to perform writes to arbitrary physical memory pages. The product utilises a shared resource in a concurrent manner but does not attempt t...

CVE-2026-22163 GPU DDK - Unsafe writing of MMU PT entries on systems with 32-bit host CPU

Requires malware code to misuse the DDK kernel module IOCTL interface. Such code can use the interface in an unsupported way that allows subversion of the GPU to perform writes to arbitrary physical memory pages. The product utilises a shared resource in a concurrent manner but does not attempt t...

PT-2026-26692

Requires malware code to misuse the DDK kernel module IOCTL interface. Such code can use the interface in an unsupported way that allows subversion of the GPU to perform writes to arbitrary physical memory pages. The product utilises a shared resource in a concurrent manner but does not attempt t...