EUVD-2023-37224

Malicious code in bioql PyPI...

EUVD-2023-37257

Malicious code in bioql PyPI...

CVE-2023-33068

Memory corruption in Audio while processing IIR config data from AFE calibration block...

CVE-2023-33111

Information disclosure when VI calibration state set by ADSP is greater than MAXFBSPSTATE in the response payload to AFE calibration command...

MAL-2024-8877 Malicious code in afe-host-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d80291bc2fb747c24552e0b6b0ca98fd26e244004fe5a804870a1be5e54a4e0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in afe-host-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d80291bc2fb747c24552e0b6b0ca98fd26e244004fe5a804870a1be5e54a4e0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in afe-base-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e9b3e47c7f9d396588edbd5f28fa386e74d8ae03700234402643bd0041c09c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-22996 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: In the afe callback function of q6afe.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of...

CVE-2023-33111

Information disclosure when VI calibration state set by ADSP is greater than MAXFBSPSTATE in the response payload to AFE calibration command...

CVE-2023-33111

CVE-2023-33111 details an information disclosure in Qualcomm audio components (VI calibration state via ADSP, MAX_FBSP_STATE) when responding to an AFE calibration command. Root cause is improper handling/validation of an array index in the audio path. Affected: Qualcomm chipsets used in devices ...

CVE-2023-33111 Improper Validation of Array Index in Audio

Information disclosure when VI calibration state set by ADSP is greater than MAXFBSPSTATE in the response payload to AFE calibration command...

CVE-2023-33068

Memory corruption in Audio while processing IIR config data from AFE calibration block...

Memory corruption

Memory corruption in Audio while processing IIR config data from AFE calibration block...

CVE-2023-33068

CVE-2023-33068 concerns memory corruption in the Audio component when processing IIR configuration data from an AFE calibration block on Qualcomm chipsets. The public description across sources cites a memory corruption vulnerability in the Audio path due to IIR config data handling, with CVSS me...

CVE-2023-33068 Buffer Copy Without Checking Size of Input in Audio

Memory corruption in Audio while processing IIR config data from AFE calibration block...

CVE-2023-33035

Memory corruption while invoking callback function of AFE from ADSP...

Memory corruption

Memory corruption while invoking callback function of AFE from ADSP...

CVE-2023-33035

CVE-2023-33035 describes memory corruption in Qualcomm components when invoking the AFE callback from the ADSP. Affected software is the Audio Front End (AFE) within Qualcomm ADSP environments; the root cause is memory corruption on callback handling. The CVE is rated HIGH for confidentiality, in...

CVE-2023-33035 Buffer Copy Without Checking Size of Input in Audio

Memory corruption while invoking callback function of AFE from ADSP...

GSD-2022-1004252 iio: afe: rescale: Fix boolean logic bug

iio: afe: rescale: Fix boolean logic bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.8 by commit...