CVE-2024-38422

Memory corruption while processing voice packet with arbitrary data received from ADSP...

CVE-2024-38422 Integer Overflow to Buffer Overflow in Audio

Memory corruption while processing voice packet with arbitrary data received from ADSP...

CVE-2024-38422 Integer Overflow to Buffer Overflow in Audio

Memory corruption while processing voice packet with arbitrary data received from ADSP...

CVE-2024-38422

CVE-2024-38422 describes a memory corruption vulnerability in Qualcomm components related to audio processing, triggered when handling voice packets with arbitrary data received from the ADSP. The issue is evidenced in the CVE listing with a high impact (confidentiality, integrity, and availabili...

kernel: firmware: cs_dsp: Fix overflow checking of wmfw header

A vulnerability was found in the Linux kernel's firmware driver csdsp.c, where a buffer overflow is possible in the wmfw header due to insufficient buffer size checks. The issue stems from the size of one of the structs that the code checks, the wmfwadsp?sizes struct, which can vary depending on...

CVE-2024-33045

Memory corruption when BTFM client sends new messages over Slimbus to ADSP...

CVE-2024-33045 Return of Stack Variable Address in Buses

Memory corruption when BTFM client sends new messages over Slimbus to ADSP...

CVE-2024-33045 Return of Stack Variable Address in Buses

Memory corruption when BTFM client sends new messages over Slimbus to ADSP...

CVE-2024-33045

CVE-2024-33045 involves memory corruption in the Qualcomm ADSP/BTFM pathway when the BTFM client sends new messages over Slimbus. The root cause, as detailed in connected documents, relates to improper handling of a local completion variable (done) in the Slimbus transfer paths (qcom slim ngd xfe...

PT-2024-25088 · Unknown · Adsp Btfm Client

Name of the Vulnerable Software and Affected Versions: ADSP BTFM client affected versions not specified Description: The issue is related to memory corruption that occurs when the BTFM client sends new messages over Slimbus to the ADSP. This happens due to the improper handling of a local...

SUSE CVE-2024-41039

In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Fix overflow checking of wmfw header Fix the checking that firmware file buffer is large enough for the wmfw header, to prevent overrunning the buffer. The original code tested that the firmware data buffer...

UBUNTU-CVE-2024-41039

In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Fix overflow checking of wmfw header Fix the checking that firmware file buffer is large enough for the wmfw header, to prevent overrunning the buffer. The original code tested that the firmware data buffer...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the fact that the original code does not take into account that wmfwadsp2sizes is 4 bytes larger than...

CVE-2023-43528

Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size...

CVE-2023-43528 Buffer Over-read in Audio

Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size...

CVE-2023-43528

CVE-2023-43528 concerns Qualcomm chipsets’ Audio components. Information disclosure occurs when the ADSP payload size returned to HLOS in response to an Audio Stream Manager matrix session is smaller than expected, caused by a mismatch in the ADSP payload size. The vulnerability impacts confident...

CVE-2023-33111

Information disclosure when VI calibration state set by ADSP is greater than MAXFBSPSTATE in the response payload to AFE calibration command...

CVE-2023-33111 Improper Validation of Array Index in Audio

Information disclosure when VI calibration state set by ADSP is greater than MAXFBSPSTATE in the response payload to AFE calibration command...

CVE-2023-33111

CVE-2023-33111 details an information disclosure in Qualcomm audio components (VI calibration state via ADSP, MAX_FBSP_STATE) when responding to an AFE calibration command. Root cause is improper handling/validation of an array index in the audio path. Affected: Qualcomm chipsets used in devices ...

CVE-2023-33111 Improper Validation of Array Index in Audio

Information disclosure when VI calibration state set by ADSP is greater than MAXFBSPSTATE in the response payload to AFE calibration command...