Google Android Video Driver Information Disclosure Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Video driver is one of the video drivers. An information disclosure vulnerability exists in the Video driver in Android, which arises from errors in the configuration of a networked...

CVE-2019-9455: Generation of Error Message Containing Sensitive Information

In the Android kernel in the video driver there is a kernel pointer leak due to a WARNON statement. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2019-9458: Concurrent Execution using Shared Resource with Improper Synchronization

In the Android kernel in the video driver there is a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2019-19667

Name of the Vulnerable Software and Affected Versions Android kernel affected versions not specified Description The issue is related to a use after free due to a race condition in the video driver of the Android kernel. This could lead to local escalation of privilege with no additional executio...

PT-2019-19664

Name of the Vulnerable Software and Affected Versions Android kernel affected versions not specified Description The issue is related to a kernel pointer leak in the video driver of the Android kernel, caused by a WARN ON statement. This could lead to local information disclosure, requiring Syste...

Linux kernel resource management error vulnerability (CNVD-2019-32365)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A resource management error vulnerability exists in the drivers/media/usb/dvb-usb/dvb-usb-init.c file in versions of Linux kernel prior to 5.2.3. The vulnerability...

CVE-2019-5683

NVIDIA Windows GPU Display Driver all versions contains a vulnerability in the user mode video driver trace logger component. When an attacker has access to the system and creates a hard link, the software does not check for hard link attacks. This behavior may lead to code execution, denial of...

CVE-2019-5683

CVE-2019-5683 affects NVIDIA Windows GPU Display Driver (all versions) via the user-mode video driver trace logger. The issue arises when a local attacker with system access creates a hard link and the driver fails to detect hard-link attacks, potentially enabling code execution, denial of servic...

CVE-2019-5683: Improper Link Resolution Before File Access

NVIDIA Windows GPU Display Driver all versions contains a vulnerability in the user mode video driver trace logger component. When an attacker has access to the system and creates a hard link, the software does not check for hard link attacks. This behavior may lead to code execution, denial of...

CVE-2019-2287

Improper validation for inputs received from firmware can lead to an out of bound write issue in video driver. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607...

CVE-2019-2287

CVE-2019-2287 involves an improper validation in inputs received from firmware that can cause an out-of-bounds write in the video driver within Qualcomm Snapdragon components (across many Snapdragon Auto/Compute/IoT/mobile/wearables families). The issue is tied to the video subsystem and has been...

CVE-2019-2287: Out-of-bounds Write

Improper validation for inputs received from firmware can lead to an out of bound write issue in video driver. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607...

Google Android Kernel Component Information Disclosure Vulnerability (CNVD-2019-23101)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in the Google Android Kernel component UVC driver. No details of the vulnerability are provided at this time...

Privilege Escalation

Linux kernel is vulnerable to privilege escalation vulnerability. This occurs in the 32-bit compatibility layer of the ioctl handling code of the v4l2 video driver in the Linux kernel. An attacker to overwrite a kernel memory from an unprivileged userspace process causing a privilege escalation...

EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1539)

According to the versions of the kernel packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution ...

EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1476)

According to the versions of the kernel packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - A use-after-free vulnerability was found in DCCP socket code affecting the Linux kernel since 2.6.16. This vulnerabili...

PT-2019-6293

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions MDM9150 through MDM9650 Qualcomm Snapdragon Compute versions MDM9150 through MDM9650 Qualcomm Snapdragon Consumer IOT versions MDM9150 through MDM9650 Qualcomm Snapdragon Industrial IOT versions MDM9150 throug...

Google Android Qualcomm Driver Privilege Access Control Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA.Qualcomm video driver is one of the video drivers used in this program. The Qualcomm video driver is one of the video...

Design/Logic Flaw

In the video driver function setoutputbuffers, binfo can be accessed after being freed in a failure scenario in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel...

CVE-2018-5844

CVE-2018-5844 describes a use-after-free in the Qualcomm video driver’s set_output_buffers() where binfo can be accessed after it is freed in a failure path across CAF Android for MSM, Firefox OS for MSM, and QRD Android (Linux kernel). The vulnerability affects the video driver component and has...