288 matches found
CVE-2024-43060: Use of Out-of-range Pointer Offset
Memory corruption during voice activation, when sound model parameters are loaded from HLOS to ADSP...
CVE-2024-38422
Memory corruption while processing voice packet with arbitrary data received from ADSP...
CVE-2024-33045
Memory corruption when BTFM client sends new messages over Slimbus to ADSP...
CVE-2024-33067
Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver...
CVE-2024-33067: Buffer Over-read
Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver...
PT-2025-2411 · Unknown · Sound Model Driver
Name of the Vulnerable Software and Affected Versions: Sound model driver affected versions not specified Description: There is an information disclosure issue that occurs when calling a callback function of the sound model driver from ADSP for every valid opcode received from the sound model...
kernel: firmware: cs_dsp: Fix overflow checking of wmfw header
A vulnerability was found in the Linux kernel's firmware driver csdsp.c, where a buffer overflow is possible in the wmfw header due to insufficient buffer size checks. The issue stems from the size of one of the structs that the code checks, the wmfwadsp?sizes struct, which can vary depending on...
kernel: firmware: cs_dsp: Fix overflow checking of wmfw header
A vulnerability was found in the Linux kernel's firmware driver csdsp.c, where a buffer overflow is possible in the wmfw header due to insufficient buffer size checks. The issue stems from the size of one of the structs that the code checks, the wmfwadsp?sizes struct, which can vary depending on...
kernel: firmware: cs_dsp: Fix overflow checking of wmfw header
A vulnerability was found in the Linux kernel's firmware driver csdsp.c, where a buffer overflow is possible in the wmfw header due to insufficient buffer size checks. The issue stems from the size of one of the structs that the code checks, the wmfwadsp?sizes struct, which can vary depending on...
CVE-2024-38422
Memory corruption while processing voice packet with arbitrary data received from ADSP...
CVE-2024-38422 Integer Overflow to Buffer Overflow in Audio
Memory corruption while processing voice packet with arbitrary data received from ADSP...
CVE-2024-38422
CVE-2024-38422 describes a memory corruption vulnerability in Qualcomm components related to audio processing, triggered when handling voice packets with arbitrary data received from the ADSP. The issue is evidenced in the CVE listing with a high impact (confidentiality, integrity, and availabili...
CVE-2024-38422 Integer Overflow to Buffer Overflow in Audio
Memory corruption while processing voice packet with arbitrary data received from ADSP...
PT-2024-27993
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue involves memory corruption when processing voice packets that contain arbitrary data received from ADSP. This corruption can lead to code...
CVE-2024-38422: Integer Overflow to Buffer Overflow
Memory corruption while processing voice packet with arbitrary data received from ADSP...
PT-2025-15186
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description The issue involves memory corruption that occurs when assigning memory from the source DDR memory HLOS to ADSP. This corruption happens during the memory allocation process. Recommendations At...
kernel: firmware: cs_dsp: Fix overflow checking of wmfw header
A vulnerability was found in the Linux kernel's firmware driver csdsp.c, where a buffer overflow is possible in the wmfw header due to insufficient buffer size checks. The issue stems from the size of one of the structs that the code checks, the wmfwadsp?sizes struct, which can vary depending on...
CVE-2024-33045
Memory corruption when BTFM client sends new messages over Slimbus to ADSP...