UBUNTU-CVE-2019-15221

An issue was discovered in the Linux kernel before 5.1.17. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/pcm.c driver...

PT-2019-3103 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.2.8 Description: The issue is related to a NULL pointer dereference in the sound/usb/helper.c motu microbookii driver of the Linux kernel. This can be caused by a malicious USB device. Exploitation of this iss...

The vulnerability of the snd_card_cs46xx_probe driver in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the sndcardcs46xxprobe handler in the Linux kernel’s sound/pci/cs46xx/snd-cs46xx.ko module is related to the assignment of a null pointer in the implementation. Exploiting this vulnerability can allow an attacker to cause a system failure when connecting a Cirrus Logic Sound...

DEBIAN-CVE-2018-19824

In the Linux kernel through 4.19.6, a local user could exploit a use-after-free in the ALSA driver by supplying a malicious USB Sound device with zero interfaces that is mishandled in usbaudioprobe in sound/usb/card.c...

Google Android Qualcomm Qdsp6v2 sound elevation of privilege vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handheld Alliance OHA.Qualcomm Qdsp6v2 sound is one of the Qualcomm sound processing modules. Qualcomm Qdsp6v2 sound is one of the...

CVE-2017-16528

The sound/core/seqdevice.c in the Linux kernel, before 4.13.4, allows local users to cause a denial of service sndrawmididevseqfree use-after-free and system crash or possibly have unspecified other impact via a crafted USB device...

Stack overflow

In a sound driver in Android for MSM, Firefox OS for MSM, QRD Android, some variables are from userspace and values can be chosen that could result in stack overflow...

Integer overflow

In a sound driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a function is called with a very large length, an integer overflow could occur followed by a buffer overflow...

CVE-2016-5859

In a sound driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a function is called with a very large length, an integer overflow could occur followed by a buffer overflow...

CVE-2016-5867

In a sound driver in Android for MSM, Firefox OS for MSM, QRD Android, some variables are from userspace and values can be chosen that could result in stack overflow...

CVE-2016-5859

In a sound driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a function is called with a very large length, an integer overflow could occur followed by a buffer overflow...

CVE-2016-5867

CVE-2016-5867 affects the Qualcomm sound driver in Android MSM (kernel sound subsystem). The root cause is that some variables originate from userspace and can be chosen to trigger a stack overflow, potentially enabling local impact. The initial description notes a stack overflow risk; CVSS3/2 me...

CVE-2016-5859

CVE-2016-5859 involves a vulnerability in the Qualcomm sound driver across Android for MSM, Firefox OS for MSM, and QRD Android. The issue arises when a function is called with a very large length, triggering an integer overflow that is followed by a buffer overflow. The description identifies me...

CVE-2016-5867

In a sound driver in Android for MSM, Firefox OS for MSM, QRD Android, some variables are from userspace and values can be chosen that could result in stack overflow...

Privilege escalation

An elevation of privilege vulnerability in the NVIDIA sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: N/A...

CVE-2017-6249

An elevation of privilege vulnerability in the NVIDIA sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: N/A...

CVE-2017-6249

An elevation of privilege vulnerability in the NVIDIA sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: N/A...

CVE-2017-6249

CVE-2017-6249 is an elevation-of-privilege issue affecting NVIDIA’s Tegra kernel audio driver (Audio DSP) on Android. The NVIDIA bulletin specifies that an invalid user parameter may be copied to an output buffer without checking input size, which can allow a local malicious app to execute arbitr...

CVE-2017-9984

The sndmsndinterrupt function in sound/isa/msnd/msndpinnacle.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service over-boundary access or possibly have unspecified other impact by changing the value of a message queue head pointer between two kernel reads of that...

Google Android HTC Component Information Disclosure Vulnerability (CNVD-2017-22358)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, and HTC sound driver is one of the sound codec driver components of HTC. An information disclosure vulnerability exists in the HTC sound driver in Android. An attacker can exploit...