936 matches found
GSD-2022-1002848 ALSA: usb-audio: Cancel pending work at closing a MIDI substream
ALSA: usb-audio: Cancel pending work at closing a MIDI substream This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...
PT-2022-31690
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to the ALSA usb-audio component, specifically concerning the handling of MIDI substreams. When closing a MIDI substream, pending work is not properly canceled, which may...
PT-2022-31903
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description A potential issue exists in the Linux Kernel related to the usb-audio component, specifically with the handling of MIDI substreams. The actual impact and attack plausibility have not yet bee...
PT-2022-31111
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue is related to the ALSA usb-audio component, specifically concerning the handling of MIDI substreams. When closing a MIDI substream, pending work is not properly canceled, which may...
PT-2022-31423
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue is related to the ALSA usb-audio component, specifically concerning the handling of MIDI substreams. When closing a MIDI substream, pending work is not properly canceled, which may...
PT-2025-8478
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition in the Linux kernel's ALSA: usb-audio component could allow access to a rawmidi runtime object that is being released. This issue occurs when closing a USB MIDI output...
Apple macOS Monterey 缓冲区错误漏洞
Apple macOS Monterey is the 18th major release of Apple's macOS for the Macintosh desktop operating system. Apple macOS Monterey versions prior to 12.3 suffer from a buffer error vulnerability that stems from a boundary error when processing a file in GarageBand MIDI. A remote attacker could crea...
About the security content of GarageBand 10.4.6
About the security content of GarageBand 10.4.6 This document describes the security content of GarageBand 10.4.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases ar...
About the security content of Logic Pro X 10.7.3
About the security content of Logic Pro X 10.7.3 This document describes the security content of Logic Pro X 10.7.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...
About the security content of Logic Pro 10.7.3
About the security content of Logic Pro 10.7.3 This document describes the security content of Logic Pro 10.7.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...
Exploit for CVE-2016-2384
This repository contains proof-of-concept PoC exploits for various vulnerabilities in the Linux kernel. The exploits target different vulnerabilities, including CVE-2016-2384, CVE-2016-9793, and CVE-2017-1000112. CVE-2016-2384 is a use-after-free vulnerability in the usb-midi driver, which allows...
ASB-A-190286685
In WTInterpolateNoLoop of easwtengine.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...
Privilege Escalation
kernel is vulnerable to privilege escalation. The vulnerability exists through sending ioctl commands to midi devices that could trigger a use-after-free issue where a write to this specific memory while freed...
kernel: use-after-free in kernel midi subsystem
A flaw was found in the Linux kernel’s implementation of MIDI, where an attacker with a local account and the permissions to issue ioctl commands to midi devices could trigger a use-after-free issue. A write to this specific memory while freed and before use causes the flow of execution to change...
ALSA-2021:1578 Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Integer overflow in IntelR Graphics Drivers CVE-2020-12362 kernel: memory leak in sofsetgetlargectrldata function in sound/soc/sof/ipc.c CVE-2019-18811 kernel: use-after-free caused by a...
Linux kernel MIDI Privilege Escalation
The vulnerability of the Linux operating system’s MIDI kernel implementation relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
EulerOS 2.0 SP5 : kernel (EulerOS-SA-2021-1684)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - mwifiexcmd80211adhocstart in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might allow remote attackers to...
USN-4807-1: WildMIDI vulnerabilities
It was discovered that WildMIDI incorrectly handled certain MID files. A remote attacker could possibly use this issue to cause a denial of service...
EulerOS Virtualization for ARM 64 3.0.2.0 : kernel (EulerOS-SA-2021-1386)
According to the versions of the kernel packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13...
OESA-2021-1087 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In drivers/target/targetcorexcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SCSI target code can be used by remote attackers to read or write files via directory traversal in an XCOPY reques...