127 matches found
The vulnerability of the AMD CPU ROM microprogramming system’s loader allows a perpetrator to compromise the confidentiality and integrity of the protected information.
The vulnerability of AMD CPU ROM microprogramming software’s loader is related to errors in checking the cryptographic signature. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...
ASB-A-372931317
In PhysmemValidateParam of physmemextmemlinux.c, there is a possible write on read-only memory due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-43705
CVE-2024-43705 affects Imagination Technologies PowerVR-GPU (Imagination GPU Driver). The issue stems from a vulnerability in the GPU kernel driver where PVRSRVBridgePhysmemWrapExtMem can write to arbitrary read-only system files mapped into application memory, allowing a non-privileged user to p...
CVE-2024-43705 GPU DDK - Security: Exploitable PVRSRVBridgePhysmemWrapExtMem may lead to overwrite read-only file/memory (e.g. libc.so)
Software installed and run as a non-privileged user can trigger the GPU kernel driver to write to arbitrary read-only system files that have been mapped into application memory...
The vulnerability of AMD’s microprogrammed software for processors lies in the violation of data protection mechanisms, allowing attackers to circumvent the SPI ROM protection mechanism.
The vulnerability of AMD’s microprogrammed software lies in the bypass of the data protection mechanism. Exploiting this vulnerability allows an attacker to circumvent the SPI ROM protection mechanism by modifying the data...
CVE-2024-54494
A race condition was addressed with additional validation. This issue is fixed in iPadOS 17.7.3, watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. An attacker may be able to create a read-only memory mapping that can be...
SUSE CVE-2024-42068
In the Linux kernel, the following vulnerability has been resolved: bpf: Take return from setmemoryro into account with bpfproglockro setmemoryro can fail, leaving memory unprotected. Check its return and take it into account as an error...
Exploit for Race Condition in Linux Linux_Kernel
CVE-2022-2590, Dirty COW restricted to shmem linux kernel ver...
Exploit for CVE-2024-32258
Overview - CVE ID: CVE-2024-32258https://vulners.com/...
kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination
An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privileges on the system...
kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination
An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privileges on the system...
kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination
An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privileges on the system...
kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination
An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privileges on the system...
CVE-2023-20521
TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service...
kernel: cpufreq: qcom: fix writes in read-only memory region
In the Linux kernel, the following vulnerability has been resolved: cpufreq: qcom: fix writes in read-only memory region This commit fixes a kernel oops because of a write in some read-only memory: 9.068287 Unable to handle kernel write to read-only memory at virtual address ffff800009240ad8...
Intel BIOS firmware buffer error vulnerability
Intel BIOS firmware is a set of programs from Intel Corporation that are solidified onto a ROM chip on the motherboard inside a computer. A security vulnerability exists in the Intel BIOS firmware that stems from improper buffer limiting. An attacker could exploit the vulnerability to obtain...
ARM Mali GPU Kernel Driver < r32p0 / < r36p0 Improper Memory Access (CVE-2022-22706)
The version of the Mali GPU Kernel Driver installed on the remote system is prior to r32p0 running on Midgard architecture or prior to r36p0 running on Bifrost or Valhall architecture. It is, therefore affected by an improper memory access vulnerability. A non-privileged user can get a write acce...
Arm Mali GPU Kernel Driver Unspecified Vulnerability
Arm Mali GPU Kernel Driver contains an unspecified vulnerability that allows a non-privileged user to achieve write access to read-only memory pages...
