CVE-2024-56579 media: amphion: Set video drvdata before register video device

In the Linux kernel, the following vulnerability has been resolved: media: amphion: Set video drvdata before register video device The video drvdata should be set before the video device is registered, otherwise videodrvdata may return NULL in the open file ops, and led to oops...

CVE-2024-56578 media: imx-jpeg: Set video drvdata before register video device

In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Set video drvdata before register video device The video drvdata should be set before the video device is registered, otherwise videodrvdata may return NULL in the open file ops, and led to oops...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an issue in the media:imx-jpeg subsystem where video drvdata is not set correctly...

The vulnerability of the USB Video Class Driver (UVC) driver (usbvideo.sys) on Windows operating systems, which allows attackers to escalate their privileges

The vulnerability of the USB Video Class Driver UVC driver usbvideo.sys for Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an out-of-bounds access issue in the drm/v3d component in the performance query extension...

media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak

...

The vulnerability of the log_ctrl() function in the Linux operating system’s video driver allows a hacker to cause a service failure.

The vulnerability of the logctrl function in the drivers/media/v4l2-core/v4l2-ctrls-core.c file, a video driver for the Linux operating system, is related to mutual locking of execution threads. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `__v4l2_nf_unregister()` function in Linux kernel video drivers allows attackers to compromise the accessibility of protected information.

The vulnerability of the v4l2nfunregister function in the drivers/media/v4l2-core/v4l2-async.c video driver of the Linux operating system is related to the lack of memory re-initialization after its use. Exploiting this vulnerability could allow an attacker to compromise the accessibility of...

CVE-2023-42668

Incorrect default permissions in some onboard video driver software before version 1.14 for IntelR Server Boards based on IntelR 62X Chipset may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-42668

CVE-2023-42668 describes an “Incorrect default permissions” issue in onboard video driver software for Intel® Server Boards based on the Intel® 62X chipset, before version 1.14, potentially allowing an authenticated user to escalate privileges via local access. The CVSSv3.1 vector is AV:L/AC:H/PR...

CVE-2023-42668

Incorrect default permissions in some onboard video driver software before version 1.14 for IntelR Server Boards based on IntelR 62X Chipset may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2024-13054 · Intel · Intel Server Boards

Name of the Vulnerable Software and Affected Versions: IntelR Server Boards based on IntelR 62X Chipset versions prior to 1.14 Description: The issue is related to incorrect default permissions in some onboard video driver software, which may allow an authenticated user to potentially enable...

CVE-2023-42668: Incorrect Default Permissions

Incorrect default permissions in some onboard video driver software before version 1.14 for IntelR Server Boards based on IntelR 62X Chipset may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel® Server Board Onboard Video Driver Advisory

Summary: A potential security vulnerability in some Intel® Server Board onboard video driver software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-42668 Description: Incorrect default...

The vulnerability of the v4l2_async_unregister_subdev() function in the drivers/media/v4l2-core/v4l2-async.c file of the Linux kernel’s video subsystem driver allows a attacker to compromise the integrity and accessibility of protected information.

The vulnerability of the v4l2asyncunregistersubdev function in the drivers/media/v4l2-core/v4l2-async.c file of the Linux kernel’s video subsystem driver is related to the reallocation of memory. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility o...

kernel: media: uvcvideo: Fix memory leak in uvc_gpio_parse

A memory leak was found in the UVC video driver's GPIO parsing code. When IRQ acquisition fails for a privacy GPIO, the previously allocated unit buffer is not freed, causing a memory leak...

The vulnerability of the microprogramming software used by the embedded video driver on the Server Board M10JNP2SB BMC Video Driver for Windows and Linux lies in an uncontrolled search path element, allowing a hacker to execute arbitrary code.

The vulnerability of the microprogramming software integrated into the Server Board M10JNP2SB BMC Video Driver for Windows and Linux lies in its uncontrolled search path mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

PT-2023-4411 · Intel · Intel Server Board M10Jnp2Sb Bmc Video Driver

Name of the Vulnerable Software and Affected Versions: IntelR Server Board M10JNP2SB BMC Video Driver versions prior to 3.0 for Microsoft Windows IntelR Server Board M10JNP2SB BMC Video Driver versions prior to 1.13.4 for Linux Description: The issue is related to an uncontrolled search path...

Intel® Server Board BMC Video Driver Advisory

Summary: A potential security vulnerability in some Intel® Server Board BMC video drivers may allow escalation of privilege. Intel is releasing updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-34355 Description: Uncontrolled search path element for some...

SUSE CVE-2023-31081

An issue was discovered in drivers/media/test-drivers/vidtv/vidtvbridge.c in the Linux kernel 6.2. There is a NULL pointer dereference in vidtvmuxstopthread. In vidtvstopstreaming, after dvb-mux=NULL occurs, it executes vidtvmuxstopthreaddvb-mux...