Linux Distros Unpatched Vulnerability : CVE-2026-72258

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: mediatek: mt8183: Release reserved memory on cleanup The MT8183 AFE probe can assign reserved memory with ofreservedmemdeviceinit, but the assignment is...

CVE-2026-72260

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8192: Check runtime resume during probe The MT8192 AFE probe enables runtime PM temporarily while reinitializing the regmap cache from hardware, but it uses pmruntimegetsync without checking the return value. If...

UBUNTU-CVE-2026-72259

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8192: Release reserved memory on cleanup The MT8192 AFE probe calls ofreservedmemdeviceinit and falls back to preallocated buffers when no reserved memory region is available. When the reserved memory assignment...

CVE-2026-72260

CVE-2026-72260 (Linux kernel, ASoC MT8192) : The vulnerability arises in the MT8192 AFE probe where runtime PM is enabled during regmap cache reinitialization and pm_runtime_get_sync() is called without validating its return value. If runtime resume fails, the probe continues, potentially leaving...

CVE-2026-72259

In the Linux kernel ASoC: mediatek mt8192 driver, reserved memory assigned during MT8192 AFE probe was not released on success. The issue is fixed by registering a devm cleanup action so the reserved-memory assignment is released on probe failure or driver unbind. This mode highlights the specifi...

EUVD-2023-37257

Malicious code in bioql PyPI...

EUVD-2023-37224

Malicious code in bioql PyPI...

CVE-2023-33068

Memory corruption in Audio while processing IIR config data from AFE calibration block...

CVE-2023-33111

Information disclosure when VI calibration state set by ADSP is greater than MAXFBSPSTATE in the response payload to AFE calibration command...

Malicious code in afe-host-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d80291bc2fb747c24552e0b6b0ca98fd26e244004fe5a804870a1be5e54a4e0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8877 Malicious code in afe-host-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d80291bc2fb747c24552e0b6b0ca98fd26e244004fe5a804870a1be5e54a4e0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in afe-base-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e9b3e47c7f9d396588edbd5f28fa386e74d8ae03700234402643bd0041c09c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-22996 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: In the afe callback function of q6afe.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of...

CVE-2023-33111

Information disclosure when VI calibration state set by ADSP is greater than MAXFBSPSTATE in the response payload to AFE calibration command...

CVE-2023-33111

CVE-2023-33111 details an information disclosure in Qualcomm audio components (VI calibration state via ADSP, MAX_FBSP_STATE) when responding to an AFE calibration command. Root cause is improper handling/validation of an array index in the audio path. Affected: Qualcomm chipsets used in devices ...

CVE-2023-33111 Improper Validation of Array Index in Audio

Information disclosure when VI calibration state set by ADSP is greater than MAXFBSPSTATE in the response payload to AFE calibration command...

CVE-2023-33068

Memory corruption in Audio while processing IIR config data from AFE calibration block...

Memory corruption

Memory corruption in Audio while processing IIR config data from AFE calibration block...

CVE-2023-33068 Buffer Copy Without Checking Size of Input in Audio

Memory corruption in Audio while processing IIR config data from AFE calibration block...

CVE-2023-33068

CVE-2023-33068 concerns memory corruption in the Audio component when processing IIR configuration data from an AFE calibration block on Qualcomm chipsets. The public description across sources cites a memory corruption vulnerability in the Audio path due to IIR config data handling, with CVSS me...