CVE-2017-6248

An elevation of privilege vulnerability in the NVIDIA sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: N/A...

CVE-2017-6247

An elevation of privilege vulnerability in the NVIDIA sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High due to the possibility of local arbitrary code execution in a privileged process in the kernel...

CVE-2017-6248

CVE-2017-6248 affects NVIDIA Tegra kernel audio driver (Audio DSP). The issue arises when an invalid user parameter is copied, potentially allowing a local attacker to cause a denial of service or escalate privileges by executing code in the kernel context. Affected platforms include NVIDIA Jetso...

CVE-2017-0708

CVE-2017-0708 is an information-disclosure issue in the HTC sound driver (Android kernel). The HTC component entry flags it as an Information Disclosure (ID) vulnerability, Moderate severity, within the Android stack. The Android bulletin for 2017-07-05 lists this HTC sound-driver CVE under the H...

CVE-2017-6247

CVE-2017-6247 affects the NVIDIA Tegra kernel audio driver (Audio DSP). A vulnerability in the driver allows an attacker to copy an invalid user parameter without proper input size checking, potentially leading to denial of service or privilege escalation to the kernel. Impact is described as loc...

The vulnerability of the `snd_msnd Interrupt` function in the Linux operating system’s kernel allows a hacker to trigger a service failure or cause other adverse effects.

The vulnerability of the sndmsnd Interrupt function in the Linux operating system’s kernel is due to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure or have other adverse effects...

The vulnerability of the android operating system’s sound driver ioctl handler allows a hacker to cause the device to freeze or fail to function properly.

The vulnerability of the Android operating system’s sound driver ioctl handler arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow a malicious actor to cause the device to become unresponsive or to fail to function properly...

Linux kernel sound/isa/msnd/msnd_pinnacle.c/snd_msnd_interrupt function local denial of service vulnerability

Linux Kernel is an open source operating system. A security vulnerability in the Linux Kernel sound/isa/msnd/msndpinnacle.c/sndmsndinterrupt function allows a local attacker to exploit the vulnerability by submitting a submit special request to crash the system...

Double free

The sndmsndinterrupt function in sound/isa/msnd/msndpinnacle.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service over-boundary access or possibly have unspecified other impact by changing the value of a message queue head pointer between two kernel reads of that...

CVE-2017-9986

The intr function in sound/oss/msndpinnacle.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service over-boundary access or possibly have unspecified other impact by changing the value of a message queue head pointer between two kernel reads of that value, aka a "doub...

CVE-2017-9986

The intr function in sound/oss/msndpinnacle.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service over-boundary access or possibly have unspecified other impact by changing the value of a message queue head pointer between two kernel reads of that value, aka a "doub...

Google Android Qualcomm Sound Driver Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and the Qualcomm Sound driver is a Qualcomm-developed sound driver used in it. The Qualcomm Sound driver in Android is vulnerable to a boost vulnerability. An attacker can exploit this...

Google Android Nvidia and Qualcomm sound drivers have unspecified vulnerabilities

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, with Nvidia as the graphics driver and Qualcomm sound as the sound driver developed by Qualcomm. A security vulnerability exists in the Nvidia and Qualcomm sound drivers in Androi...

CVE-2017-1000380

sound/core/timer.c in the Linux kernel before 4.11.5 is vulnerable to a data race in the ALSA /dev/snd/timer driver resulting in local users being able to read information belonging to other users, i.e., uninitialized memory contents may be disclosed when a read and an ioctl happen at the same ti...

Information disclosure

sound/core/timer.c in the Linux kernel before 4.11.5 is vulnerable to a data race in the ALSA /dev/snd/timer driver resulting in local users being able to read information belonging to other users, i.e., uninitialized memory contents may be disclosed when a read and an ioctl happen at the same ti...

CVE-2017-1000380

sound/core/timer.c in the Linux kernel before 4.11.5 is vulnerable to a data race in the ALSA /dev/snd/timer driver resulting in local users being able to read information belonging to other users, i.e., uninitialized memory contents may be disclosed when a read and an ioctl happen at the same ti...

CVE-2017-0649

An elevation of privilege vulnerability in the MediaTek sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process and because of vulnerability...

CVE-2017-0649

An elevation of privilege vulnerability in the MediaTek sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process and because of vulnerability...

Privilege escalation

An elevation of privilege vulnerability in the MediaTek sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process and because of vulnerability...

CVE-2017-0649

An elevation of privilege vulnerability in the MediaTek sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process and because of vulnerability...