570 matches found
libmsm_acdb_exploit
Оригинальный код написан @gorohkun https://www.codeaurora.org/projects/security-advisories/stack-based-buffer-overflow-acdb-audio-driver-cve-2013-2597...
CVE-2019-9730
CVE-2019-9730: Synaptics 오디오 드라이버 LPE 이 드라이버 패키지의 취약점은 CxUtilSvc 시스템 서비스에 있었습니다. 이 서비스는 낮은 권한의 코드가 SYSTEM으로 레지스트리에 대해 임의 읽기 및 쓰기를 수행하는 데 사용할 수 있는 COM 개체를 호스팅했습니다. .NET 코드는 IRegistryHelper COM 인터페이스를 참조로 추가하여 해당 메서드를 호출합니다. 악용 측면에서, 덜 미묘한 접근 방식이 사용되어 주어진 서비스의 바이너리 경로를 로컬 관리자 계정을 생성하는 명령으로 대체합니다. 일...
CVE-2026-97929
A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture USB audio driver. This vulnerability can lead to information disclosure when communicating with an attached USB device. The driver fails to verify the length of incoming data transfers during interrupt handling, allowin...
CVE-2026-97910
A flaw was found in the Linux kernel. The Spreadtrum audio driver fails to validate buffer size parameters against fixed physical memory allocations during compressed audio stream operations. A local attacker with access to the audio device can supply oversized buffer configurations to trigger an...
CVE-2026-97909
A flaw was found in the Linux kernel's audio subsystem. The STI audio driver registers a shared interrupt request IRQ before initializing its internal locking mechanism. A local attacker capable of triggering driver initialization may cause an interrupt to be handled while the lock remains...
CVE-2026-97414
A flaw was found in the Linux kernel's MediaTek audio driver. When suspending the audio device, the driver fails to verify whether memory allocation for the register backup buffer succeeded before accessing it. A local user capable of triggering power management operations during low-memory...
CVE-2026-97407
A flaw was found in the Linux kernel's Rockchip PDM audio driver. This vulnerability can lead to a Denial of Service DoS because the driver fails to check the return status of runtime power management PM resume operations before accessing hardware registers. A local attacker could exploit this fl...
CVE-2026-98066
A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture caiaq USB audio driver. A local user could exploit this vulnerability to cause a Denial of Service DoS or memory corruption by triggering an initialization failure. The issue stems from improper resource management in t...
CVE-2026-98006
A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture caiaq USB audio driver. During device initialization failures, the driver prematurely releases memory structures used for USB communication while they remain queued in the host controller. An attacker connecting a craft...
CVE-2026-93808
A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture caiaq USB audio driver. When processing endpoint reply messages, the driver fails to validate the length of received USB data buffers before reading fixed offsets. A physically present attacker connecting a crafted USB...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: ASoC: q6afe-clocks: fix the issue of reprobing of the driver. The q6afe-clocks driver may experience reprobing situations. For example, if the APR services are restarted after a firmware crash. However, currently, the...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Properly terminating the timer upon removal The USB-audio MIDI code initializes the timer, but in a rare case, the driver might be freed without the disconnect call being made. This leaves the timer in an active...
Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uaudio: do not allow userspace to block driver unbind In the unbind callback for fuac1 and fuac2, a call to sndcardfree via gaudiocleanup will disconnect the card and then wait for all resources to be released, which...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ALSA: aoa: i2sbus: fixed a possible memory leak in i2sbusadddev The devsetname function in soundbusaddone allocates memory for the device name. This memory needs to be freed when ofdeviceregister fails. Call soundbusdevput to...
CVE-2026-69859
Time-of-check time-of-use toctou race condition in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
EUVD-2026-73134
Integer overflow or wraparound in Windows USB Audio Class driver usbaudio.sys allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-69413
CVE-2026-69413 is a use-after-free vulnerability in the Windows USB Audio Class driver (usbaudio.sys) that allows an authorized attacker to perform local privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating high attack complexity...
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Integer underflow wrap or wraparound in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
