PT-2024-11200 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A reference leak issue has been identified in the Linux kernel, specifically in the interconnect: qcom: bcm-voter component. The problem arises from a missing of node put call in the o...

Qualcomm Chipsets 输入验证错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc., and is often manufactured on the surface of semiconductor wafers. The Qualcomm chip is vulnerable to an input validation error. An attacker...

Speculative Execution and Indirect Branch Prediction Side Channel Analysis Method

Summary: Updated Recommendations Section 04/04/2018 Today a team of security researchers disclosed several software analysis methods that, when used for malicious purposes, have the potential to improperly gather sensitive data from many types of computing devices with many different vendors’...

多款Qualcomm产品授权问题漏洞

NetBSD is an open source Unix-like operating system from the NetBSD Netbsd Foundation. A security vulnerability exists in NetBSD version 7.1. An attacker could exploit this vulnerability to cause a denial of service to a program...

Qualcomm Chipsets 输入验证错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc., and is often manufactured on the surface of semiconductor wafers. An input validation error vulnerability exists in Qualcomm chips. The...

A week in security (May 3 – 9)

Last week on Malwarebytes Labs, we discussed how Spectre attacks have come back from the dead; why Facebook banned Instragram ads by Signal; we highlighted the differences between the most popular VPN protocols; pointed out that Google is about to start automatically enrolling users in two-step...

CVE-2020-11284

Locked memory can be unlocked and modified by non secure boot loader through improper system call sequence making the memory region untrusted source of input for secure boot loader in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructur...

Qualcomm Chip Bug Opens Android Fans to Eavesdropping

A vulnerability in a 5G modem data service could allow mobile hackers to remotely target Android users by injecting malicious code into a phone’s modem – gaining the ability to execute code, access mobile users’ call histories and text messages, and eavesdrop on phone calls. That’s according to...

New Qualcomm Chip Bug Could Let Hackers Spy On Android Devices

Cybersecurity researchers have disclosed a new security vulnerability in Qualcomm's mobile station modems MSM that could potentially allow an attacker to leverage the underlying Android operating system to slip malicious code into mobile phones, undetected. "If exploited, the vulnerability would...

The vulnerability of Qualcomm’s software, related to deficiencies in access control, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Qualcomm’s software is related to deficiencies in access control. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Qualcomm 组件代码问题漏洞

The Qualcomm Component is a component of Qualcomm Incorporated USA. The intrinsic parts that provide the functionality of Qualcomm devices. A code issue vulnerability exists in the Qualcomm Component that arises from a memory corruption during buffer allocation due to dereferencing the session ct...

Qualcomm 芯片安全漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc. and is often manufactured on the surface of semiconductor wafers. A security vulnerability exists in Qualcomm chips that stems from an incorrec...

Qualcomm 组件 资源管理错误漏洞

The Qualcomm Component is a component of Qualcomm Incorporated USA. An intrinsic part that provides functionality to Qualcomm devices. A resource management error vulnerability exists in FastRPC, which stems from a missing null check that can be used after release. The following products and...

Qualcomm Chipsets 资源管理错误漏洞

The Qualcomm Component is a component of Qualcomm Incorporated USA. The intrinsic parts that provide the functionality of Qualcomm devices. A resource management error vulnerability exists in Qualcomm Chipsets, which stems from incorrect memory mapping for handling multiple processes at the same...

Qualcomm Snapdragon SOC 代码问题漏洞

The Qualcomm Snapdragon SOC Snapdragon Processor is a chip from Qualcomm Incorporated USA that is used in mobile devices to process information. A security vulnerability exists in the Qualcomm Snapdragon SOC that stems from a lack of zero-checking, resulting in null pointer access when histogram...

Qualcomm 组件 安全漏洞

The Qualcomm Component is a component of Qualcomm Incorporated USA. An intrinsic part that provides the functionality of Qualcomm devices. A security vulnerability exists in the Qualcomm Component that originates from an improper handling of the Group Management Operations Framework that could...

Qualcomm多款产品缓冲区错误漏洞

The Qualcomm MDM9640 and others are products of Qualcomm Incorporated.The MDM9640 is a central processing unit CPU.The MDM9650 is a central processing unit CPU.The MSM8996AU is a central processing unit CPU.The QCA6574AU is a central processing unit CPU.The MDM9655 is a central processing unit...

Qualcomm多款产品 安全漏洞

Qualcomm APQ8017 and others are products of Qualcomm Incorporated Qualcomm, U.S.A. The Qualcomm APQ8017 is a central processing unit CPU product.The Qualcomm APQ8009 is a central processing unit CPU product.The Qualcomm APQ8009W is a central processing unit. A security vulnerability exists in...

Qualcomm 组件缓冲区错误漏洞

The Qualcomm Component is a component of Qualcomm Incorporated USA. An intrinsic part that provides the functionality of Qualcomm devices. A security vulnerability exists in the Qualcomm Component that stems from a buffer over-read when decompressing RTCP packets, where we may read additional byt...

Qualcomm 组件输入验证错误漏洞

The Qualcomm Component is a component of Qualcomm Incorporated USA. An intrinsic part that provides the functionality of Qualcomm devices. An input validation error vulnerability exists in the Qualcomm Component that stems from a failure to validate out-of-range in the recorder due to prefix size...