Memory corruption

Memory corruption while parsing the ADSP response command...

CVE-2023-33035

CVE-2023-33035 describes memory corruption in Qualcomm components when invoking the AFE callback from the ADSP. Affected software is the Audio Front End (AFE) within Qualcomm ADSP environments; the root cause is memory corruption on callback handling. The CVE is rated HIGH for confidentiality, in...

CVE-2023-33035 Buffer Copy Without Checking Size of Input in Audio

Memory corruption while invoking callback function of AFE from ADSP...

CVE-2023-33034 Signed-to-unsigned conversion error in Audio

Memory corruption while parsing the ADSP response command...

CVE-2023-33034 Signed-to-unsigned conversion error in Audio

Memory corruption while parsing the ADSP response command...

CVE-2023-33034

CVE-2023-33034 is a memory-corruption issue in Qualcomm chipset software tied to parsing the ADSP response command. Affected component family: Qualcomm/Audio within Snapdragon firmware; root cause is a parsing error leading to memory corruption. CVSS v3.1 indicates a HIGH severity with LOCAL atta...

CVE-2023-21657

Memoru corruption in Audio when ADSP sends input during record use case...

Input validation

Memoru corruption in Audio when ADSP sends input during record use case...

CVE-2023-21657 Improper Input Validation in Audio

Memoru corruption in Audio when ADSP sends input during record use case...

CVE-2023-21657

CVE-2023-21657 describes memory corruption in Qualcomm Audio when the ADSP receives input during a recording use case. Affected component: Qualcomm audio stack (Audio/ADSP). Root cause: memory corruption in the audio path during input handling in record mode. Impact: high across confidentiality, ...

CVE-2023-21657 Improper Input Validation in Audio

Memoru corruption in Audio when ADSP sends input during record use case...

CVE-2023-20699

In adsp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07696073; Issue ID: ALPS07696073...

Out-of-bounds

In adsp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07696073; Issue ID: ALPS07696073...

CVE-2023-20699

In adsp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07696073; Issue ID: ALPS07696073...

CVE-2023-20699

CVE-2023-20699 describes an out-of-bounds write in the MediaTek adsp module (affecting MediaTek-based devices) caused by a missing bounds check. Impact per sources: local escalation of privilege with System execution privileges required, no user interaction needed. Patch reference: ALPS07696073 (...

MediaTek 芯片缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the adsp module of the MediaTek chips, which stems from a lack of boundary checking and may allow out-of-bounds writes...

CVE-2023-20680

In adsp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07664785; Issue ID: ALPS07664785...

CVE-2023-20681

In adsp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07696134; Issue ID: ALPS07696134...

CVE-2023-20680

In adsp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07664785; Issue ID: ALPS07664785...

CVE-2023-20681

In adsp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07696134; Issue ID: ALPS07696134...