CVE-2020-11253: Improper Input Validation

Arbitrary memory write issue in video driver while setting the internal buffers in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

PT-2021-2094

Name of the Vulnerable Software and Affected Versions: IntelR Graphics Drivers versions prior to 26.20.100.8141 IntelR Graphics Drivers versions prior to 15.45.32.5145 IntelR Graphics Drivers versions prior to 15.40.46.5144 Server Board Onboard Video Driver affected versions not specified...

Intel® Server Board Onboard Video Driver Advisory

Summary: A potential security vulnerability in the Intel® Server Board Onboard Video Driver for Windows may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-24450 Description: Uncontrolled search pa...

Qualcomm Video Input Validation Error Vulnerability

Qualcomm Video is a Qualcomm Incorporated USA video component used in Qualcomm products. A security vulnerability exists in Qualcomm Video that stems from an arbitrary memory write issue in the video driver when setting internal buffers...

CVE-2020-11216

Buffer over read can happen in video driver when playing clip with atomsize having value UINT32MAX in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

Buffer overflow

Buffer over read can happen in video driver when playing clip with atomsize having value UINT32MAX in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2020-11216

Buffer over read can happen in video driver when playing clip with atomsize having value UINT32MAX in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2020-11216

CVE-2020-11216 is a buffer over-read in the video driver when playing a clip where atomsize equals UINT32_MAX, affecting Qualcomm Snapdragon platforms (Auto/Compute/Connectivity/Consumer IOT/Industrial IOT/Mobile/Voice & Music/Wearables). The issue is triggered during video processing and is docu...

CVE-2020-11216: Out-of-bounds Read

Buffer over read can happen in video driver when playing clip with atomsize having value UINT32MAX in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

PT-2021-9233

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon affected versions not specified Description A buffer over read issue can occur in the video driver when playing a clip with an atom size having a value of UINT32 MAX. This issue affects various Qualcomm Snapdragon products,...

DEBIAN-CVE-2020-26971

Certain blit values provided by the user were not properly constrained leading to a heap buffer overflow on some video drivers. This vulnerability affects Firefox 84, Thunderbird 78.6, and Firefox ESR 78.6...

PT-2020-7004

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel's media subsystem, specifically the Aspeed video driver. It introduces improper reset on the Video Engine hardware, causing unexpected DMA memory...

Oracle Linux 7 : ELSA-2020-5561-1: / firefox (ELSA-2020-55611)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-55611 advisory. 78.6.0-1.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs....

Multiple Qualcomm Products Input Validation Error Vulnerability

A Qualcomm chip is a chip from Qualcomm Incorporated USA. It is a way of miniaturizing circuitry mainly semiconductor devices, but also passive components, etc. and is often fabricated on the surface of semiconductor wafers. An input validation error vulnerability exists in several Qualcomm...

kernel: use after free due to race condition in the video driver leads to local privilege escalation

A flaw was found in the Linux kernel's video driver. A race condition, leading to a use-after-free, could lead to a local privilege escalation. User interaction is not needed for exploitation...

kernel: kernel pointer leak due to WARN_ON statement in video driver leads to local information disclosure

A flaw was found in the Linux kernel's video driver. A kernel pointer lead, due to a WARNON statement could lead to a local information disclosure with system execution privileges. User interaction is not needed for exploitation. The highest threat from this vulnerability is to data confidentiali...

kernel: kernel pointer leak due to WARN_ON statement in video driver leads to local information disclosure

A flaw was found in the Linux kernel's video driver. A kernel pointer lead, due to a WARNON statement could lead to a local information disclosure with system execution privileges. User interaction is not needed for exploitation. The highest threat from this vulnerability is to data confidentiali...

kernel: use after free due to race condition in the video driver leads to local privilege escalation

A flaw was found in the Linux kernel's video driver. A race condition, leading to a use-after-free, could lead to a local privilege escalation. User interaction is not needed for exploitation...

Moderate: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: use after free in the video driver leads to local privilege escalation CVE-2019-9458 kernel: use-after-free in drivers/bluetooth/hcildisc.c CVE-2019-15917 kernel: out-of-bounds access in...

kernel: use after free due to race condition in the video driver leads to local privilege escalation

A flaw was found in the Linux kernel's video driver. A race condition, leading to a use-after-free, could lead to a local privilege escalation. User interaction is not needed for exploitation...