The vulnerability of the `__v4l2_nf_unregister()` function in Linux kernel video drivers allows attackers to compromise the accessibility of protected information.

The vulnerability of the v4l2nfunregister function in the drivers/media/v4l2-core/v4l2-async.c video driver of the Linux operating system is related to the lack of memory re-initialization after its use. Exploiting this vulnerability could allow an attacker to compromise the accessibility of...

CVE-2023-42668

Incorrect default permissions in some onboard video driver software before version 1.14 for IntelR Server Boards based on IntelR 62X Chipset may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-42668

CVE-2023-42668 describes an “Incorrect default permissions” issue in onboard video driver software for Intel® Server Boards based on the Intel® 62X chipset, before version 1.14, potentially allowing an authenticated user to escalate privileges via local access. The CVSSv3.1 vector is AV:L/AC:H/PR...

CVE-2023-42668

Incorrect default permissions in some onboard video driver software before version 1.14 for IntelR Server Boards based on IntelR 62X Chipset may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2024-13054 · Intel · Intel Server Boards

Name of the Vulnerable Software and Affected Versions: IntelR Server Boards based on IntelR 62X Chipset versions prior to 1.14 Description: The issue is related to incorrect default permissions in some onboard video driver software, which may allow an authenticated user to potentially enable...

Intel® Server Board Onboard Video Driver Advisory

Summary: A potential security vulnerability in some Intel® Server Board onboard video driver software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-42668 Description: Incorrect default...

The vulnerability of the v4l2_async_unregister_subdev() function in the drivers/media/v4l2-core/v4l2-async.c file of the Linux kernel’s video subsystem driver allows a attacker to compromise the integrity and accessibility of protected information.

The vulnerability of the v4l2asyncunregistersubdev function in the drivers/media/v4l2-core/v4l2-async.c file of the Linux kernel’s video subsystem driver is related to the reallocation of memory. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility o...

kernel: media: uvcvideo: Fix memory leak in uvc_gpio_parse

A memory leak was found in the UVC video driver's GPIO parsing code. When IRQ acquisition fails for a privacy GPIO, the previously allocated unit buffer is not freed, causing a memory leak...

The vulnerability of the microprogramming software used by the embedded video driver on the Server Board M10JNP2SB BMC Video Driver for Windows and Linux lies in an uncontrolled search path element, allowing a hacker to execute arbitrary code.

The vulnerability of the microprogramming software integrated into the Server Board M10JNP2SB BMC Video Driver for Windows and Linux lies in its uncontrolled search path mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Intel® Server Board BMC Video Driver Advisory

Summary: A potential security vulnerability in some Intel® Server Board BMC video drivers may allow escalation of privilege. Intel is releasing updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-34355 Description: Uncontrolled search path element for some...

PT-2023-4411 · Intel · Intel Server Board M10Jnp2Sb Bmc Video Driver

Name of the Vulnerable Software and Affected Versions: IntelR Server Board M10JNP2SB BMC Video Driver versions prior to 3.0 for Microsoft Windows IntelR Server Board M10JNP2SB BMC Video Driver versions prior to 1.13.4 for Linux Description: The issue is related to an uncontrolled search path...

SUSE CVE-2023-31081

An issue was discovered in drivers/media/test-drivers/vidtv/vidtvbridge.c in the Linux kernel 6.2. There is a NULL pointer dereference in vidtvmuxstopthread. In vidtvstopstreaming, after dvb-mux=NULL occurs, it executes vidtvmuxstopthreaddvb-mux...

K02825271: Linux kernel vulnerability CVE-2017-13166

Security Advisory Description An elevation of privilege vulnerability in the kernel v4l2 video driver. Product: Android. Versions: Android kernel. Android ID A-34624167. CVE-2017-13166 Impact This flaw could be exploited by an attacker to overwrite a kernel memory from an unprivileged userspace...

K46444421: Linux Kernel Vulnerability CVE-2019-9458

Security Advisory Description In the Android kernel in the video driver there is a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. CVE-2019-9458 Impact There i...

SUSE CVE-2010-2963

drivers/media/video/v4l2-compat-ioctl32.c in the Video4Linux V4L implementation in the Linux kernel before 2.6.36 on 64-bit platforms does not validate the destination of a memory copy operation, which allows local users to write to arbitrary kernel memory locations, and consequently gain...

SUSE CVE-2017-0627

An information disclosure vulnerability in the kernel UVC driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10,...

SUSE CVE-2017-13166

An elevation of privilege vulnerability in the kernel v4l2 video driver. Product: Android. Versions: Android kernel. Android ID A-34624167...

SUSE CVE-2019-9455

In the Android kernel in the video driver there is a kernel pointer leak due to a WARNON statement. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

SUSE CVE-2019-9458

In the Android kernel in the video driver there is a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

The vulnerability of the Video Driver in Linux kernel allows a local attacker to trigger a system failure.

The vulnerability of the Video Driver in Linux operating systems is related to insufficient checking of user data. Exploiting this vulnerability can allow an attacker to cause service failures...