CVE-2023-33064 Buffer Over-read in Audio

Transient DOS in Audio when invoking callback function of ASM driver...

CVE-2023-33064 Buffer Over-read in Audio

Transient DOS in Audio when invoking callback function of ASM driver...

Race condition

The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption...

CVE-2023-33110 Use of Out-of-range Pointer Offset in Audio

The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption...

CVE-2023-33110

The CVE-2023-33110 issue concerns the PCM host voice audio driver on Qualcomm chipsets, where a session index is initialized before PCM is opened, accessed in an event callback from ADSP, and reset on PCM close. This race can lead to memory corruption if callbacks occur as the session index is mo...

CVE-2023-33055 Buffer Copy Without Checking Size of Input in Audio

Memory Corruption in Audio while invoking callback function in driver from ADSP...

The vulnerability of the USB Audio Class System driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the USB Audio Class System driver for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2022-48511

Use After Free UAF vulnerability in the audio PCM driver module under special conditions. Successful exploitation of this vulnerability may cause audio features to perform abnormally...

kernel: ALSA: usb-audio: Cancel pending work at closing a MIDI substream

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Cancel pending work at closing a MIDI substream At closing a USB MIDI output substream, there might be still a pending work, which would eventually access the rawmidi runtime object that is being released. For...

kernel: ALSA: usb-audio: ALSA USB Audio Out-of-Bounds Bug

A flaw was found in the Linux kernel ALSA USB audio driver. This vulnerability allows a denial of service via a crafted USB audio device...

kernel: ASoC: pxa: fix null-pointer dereference in filter()

A flaw was found in the Linux kernel ASoC pxa audio driver. The function filter used kasprintf to allocate a formatted string but did not check whether the allocation succeeded before passing the result to strcmp. If memory allocation fails and kasprintf returns NULL, this results in a NULL point...

kernel: ASoC: pxa: fix null-pointer dereference in filter()

A flaw was found in the Linux kernel ASoC pxa audio driver. The function filter used kasprintf to allocate a formatted string but did not check whether the allocation succeeded before passing the result to strcmp. If memory allocation fails and kasprintf returns NULL, this results in a NULL point...

CVE-2023-20670

In audio, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07648710; Issue ID: ALPS07648710...

SUSE CVE-2008-5033

The chipcommand function in drivers/media/video/tvaudio.c in the Linux kernel 2.6.25.x before 2.6.25.19, 2.6.26.x before 2.6.26.7, and 2.6.27.x before 2.6.27.3 allows attackers to cause a denial of service NULL function pointer dereference and OOPS via unknown vectors...

CVE-2022-34405

An improper access control vulnerability was identified in the Realtek audio driver. A local authenticated malicious user may potentially exploit this vulnerability by waiting for an administrator to launch the application and attach to the process to elevate privileges on the system...

Dell Client 安全漏洞

The Dell Client platforms are a client platform from Dell USA. A security vulnerability exists in Dell Client, which stems from an incorrect access control vulnerability in the Realtek audio driver, where a malicious, locally authenticated user may be able to elevate system privileges by waiting...

CVE-2022-34405

Summary: CVE-2022-34405 describes an improper access control in the Realtek audio driver that could allow privilege escalation. A local authenticated user could exploit this by waiting for an administrator to launch an application and then attach to the process to gain elevated privileges. The is...

CVE-2022-34405

An improper access control vulnerability was identified in the Realtek audio driver. A local authenticated malicious user may potentially exploit this vulnerability by waiting for an administrator to launch the application and attach to the process to elevate privileges on the system...

CVE-2022-34405

An improper access control vulnerability was identified in the Realtek audio driver. A local authenticated malicious user may potentially exploit this vulnerability by waiting for an administrator to launch the application and attach to the process to elevate privileges on the system...

PT-2023-13383 · Realtek · Realtek Audio Driver

Name of the Vulnerable Software and Affected Versions: Realtek audio driver affected versions not specified Description: An improper access control issue was identified. A local authenticated malicious user may potentially exploit this by waiting for an administrator to launch the application and...