570 matches found
libmsm_acdb_exploit
オリジナルコードは @gorohkun によって書かれています https://www.codeaurora.org/projects/security-advisories/stack-based-buffer-overflow-acdb-audio-driver-cve-2013-2597...
CVE-2019-9730
CVE-2019-9730: SynapticsオーディオドライバのLPE このドライバパッケージの脆弱性は、CxUtilSvcシステムサービスにありました。それは、低権限コードがSYSTEMとしてレジストリに対して任意の読み取りと書き込みを行うために使用できるCOMオブジェクトをホストしていました。.NETコードは、IRegistryHelper COMインターフェースを参照として追加し、そのメソッドを呼び出します。...
CVE-2026-97929
A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture USB audio driver. This vulnerability can lead to information disclosure when communicating with an attached USB device. The driver fails to verify the length of incoming data transfers during interrupt handling, allowin...
CVE-2026-97910
A flaw was found in the Linux kernel. The Spreadtrum audio driver fails to validate buffer size parameters against fixed physical memory allocations during compressed audio stream operations. A local attacker with access to the audio device can supply oversized buffer configurations to trigger an...
CVE-2026-97909
A flaw was found in the Linux kernel's audio subsystem. The STI audio driver registers a shared interrupt request IRQ before initializing its internal locking mechanism. A local attacker capable of triggering driver initialization may cause an interrupt to be handled while the lock remains...
CVE-2026-97414
A flaw was found in the Linux kernel's MediaTek audio driver. When suspending the audio device, the driver fails to verify whether memory allocation for the register backup buffer succeeded before accessing it. A local user capable of triggering power management operations during low-memory...
CVE-2026-97407
A flaw was found in the Linux kernel's Rockchip PDM audio driver. This vulnerability can lead to a Denial of Service DoS because the driver fails to check the return status of runtime power management PM resume operations before accessing hardware registers. A local attacker could exploit this fl...
CVE-2026-98066
A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture caiaq USB audio driver. A local user could exploit this vulnerability to cause a Denial of Service DoS or memory corruption by triggering an initialization failure. The issue stems from improper resource management in t...
CVE-2026-98006
A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture caiaq USB audio driver. During device initialization failures, the driver prematurely releases memory structures used for USB communication while they remain queued in the host controller. An attacker connecting a craft...
CVE-2026-93808
A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture caiaq USB audio driver. When processing endpoint reply messages, the driver fails to validate the length of received USB data buffers before reading fixed offsets. A physically present attacker connecting a crafted USB...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Properly terminating the timer upon removal The USB-audio MIDI code initializes the timer, but in a rare case, the driver might be freed without the disconnect call being made. This leaves the timer in an active...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: ASoC: q6afe-clocks: fix the issue of reprobing of the driver. The q6afe-clocks driver may experience reprobing situations. For example, if the APR services are restarted after a firmware crash. However, currently, the...
Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uaudio: do not allow userspace to block driver unbind In the unbind callback for fuac1 and fuac2, a call to sndcardfree via gaudiocleanup will disconnect the card and then wait for all resources to be released, which...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ALSA: aoa: i2sbus: fixed a possible memory leak in i2sbusadddev The devsetname function in soundbusaddone allocates memory for the device name. This memory needs to be freed when ofdeviceregister fails. Call soundbusdevput to...
CVE-2026-69859
Time-of-check time-of-use toctou race condition in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
EUVD-2026-73134
Integer overflow or wraparound in Windows USB Audio Class driver usbaudio.sys allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-69413
CVE-2026-69413 is a use-after-free vulnerability in the Windows USB Audio Class driver (usbaudio.sys) that allows an authorized attacker to perform local privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating high attack complexity...
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Integer underflow wrap or wraparound in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
