CVE-2023-33065 Buffer Over-read in Audio

Information disclosure in Audio while accessing AVCS services from ADSP payload...

CVE-2023-33065

CVE-2023-33065 corresponds to a Qualcomm chipset issue described as a buffer over-read in Audio when accessing AVCS services from an ADSP payload. Connected sources align this as an information disclosure vulnerability affecting Audio components in Qualcomm Snapdragon/QCT environments, with local...

CVE-2023-33064

CVE-2023-33064 is described as a Transient DoS in Audio when invoking the callback function of the ASM driver (Qualcomm chipsets). The vulnerability affects the Audio component via the ASM driver callback path and has a CVSS 3.1 base score of 5.5 (Local, Low Privileges, Low Auth, High Impact on A...

CVE-2023-33064 Buffer Over-read in Audio

Transient DOS in Audio when invoking callback function of ASM driver...

CVE-2023-33064 Buffer Over-read in Audio

Transient DOS in Audio when invoking callback function of ASM driver...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a denial of service issue in the audio when calling the callback function of the ASM driver...

PT-2024-12392 · Audio · Audio

Name of the Vulnerable Software and Affected Versions: Audio affected versions not specified Description: The issue is related to memory corruption in Audio, which occurs when the START command is called multiple times on host voice PCM for the same RX or TX tap points. Recommendations: At the...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from memory corruption in audio when the START command on the host voice PCM is called multiple times for the same RX or TX tap point...

iSpyConnect.com Agent DVR Security Vulnerability

iSpyConnect.com Agent DVR is a cross-platform video surveillance software. A security vulnerability exists in iSpyConnect.com Agent DVR version 5.1.6.0. An attacker can exploit the vulnerability to upload arbitrary files via the upload audio component...

CVE-2024-22515

CVE-2024-22515 affects iSpyConnect Agent DVR 5.1.6.0 with an unrestricted file-upload in the audio upload component. Root cause per sources is lack of verification of the uploaded file type, enabling arbitrary file uploads. This vulnerability can lead to high impact on confidentiality, integrity,...

PT-2024-12389 · Unknown · Asm Driver

Name of the Vulnerable Software and Affected Versions: ASM driver affected versions not specified Description: The issue is related to a Transient Denial of Service DOS in the Audio component when the callback function of the ASM driver is invoked. This can potentially cause disruptions in audio...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from an audio memory corruption when processing IIR configuration data from an AFE calibration block...

PT-2024-12390 · Qualcomm · Snapdragon +97

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns information disclosure in Audio when accessing AVCS services from ADSP payload. No further details are provided about the nature of t...

PT-2024-12393 · Audio · Audio

Name of the Vulnerable Software and Affected Versions: Audio affected versions not specified Description: The issue is related to memory corruption in the Audio component when processing IIR config data from the AFE calibration block. Recommendations: At the moment, there is no information about ...

PT-2024-12394 · Qualcomm · 9206 Lte Modem Firmware +106

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in the Audio component when processing calibration data returned from the ACDB loader. No information is provided...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from an audio memory corruption when processing calibration data returned from the ACDB loader...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from information leakage in audio when accessing AVCS services from an ADSP payload...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips that stems from a race condition in the mp3 decoder module that may result in out-of-bounds writes...

PT-2024-18495 · Unknown · Mp3 Decoder

Name of the Vulnerable Software and Affected Versions: mp3 decoder affected versions not specified Description: The issue is related to a possible out of bounds write due to a race condition in the mp3 decoder. This could lead to remote escalation of privilege with no additional execution...

CVE-2023-51072

A stored cross-site scripting XSS vulnerability in the NOC component of Nagios XI version up to and including 2024R1 allows low-privileged users to execute malicious HTML or JavaScript code via the audio file upload functionality from the Operation Center section. This allows any authenticated us...