Memory corruption

Memory Corruption in Audio while playing amrwbplus clips with modified content...

CVE-2023-28555 Buffer Over-read in Audio

Transient DOS in Audio while remapping channel buffer in media codec decoding...

CVE-2023-28555

CVE-2023-28555 describes a transient DoS in audio during remapping of the channel buffer in the media codec decoding path. Public entries (NVD, Red Hat, etc.) consistently state a DoS impact with network access required and no user interaction. Android patch levels 2023-08-01/2023-08-05 include f...

CVE-2023-28555 Buffer Over-read in Audio

Transient DOS in Audio while remapping channel buffer in media codec decoding...

CVE-2023-28537

CVE-2023-28537 corresponds to a memory corruption issue during memory allocation in the COmxApeDec module of Audio. In the provided documents, this vulnerability is linked to Qualcomm closed‑source components and is listed in the Qualcomm August 2023 security bulletin; Android’s August 2023 secur...

CVE-2023-22666

CVE-2023-22666 concerns memory corruption in Qualcomm closed‑source components within the audio path when playing amrwbplus clips with modified content. The issue is described across multiple sources as a memory corruption in the Audio module that can affect Qualcomm/Snapdragon devices, with impa...

CVE-2023-22666 Integer Overflow or Wraparound in Audio

Memory Corruption in Audio while playing amrwbplus clips with modified content...

CVE-2022-40510 Buffer copy without checking size of input in Audio.

Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder...

CVE-2022-40510

The CVE-2022-40510 issue affects Qualcomm closed-source audio components during EVS-based voice calls. Root cause: memory corruption from a buffer copy that does not validate input size when processing audio. Impact, as stated: high confidentiality, integrity, and availability implications with n...

PT-2023-21785 · Qualcomm · 315 5G Iot Modem Firmware +161

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption while allocating memory in the COmxApeDec module, which is related to Audio. Recommendations: At the moment, there ...

PT-2023-18613 · Qualcomm · Snapdragon +151

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in audio when playing amrwbplus clips with modified content. No information is provided about the estimated number ...

Qualcomm Chipsets Buffer Error Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm, an American company. A security vulnerability exists in the Qualcomm Chipsets that stems from a memory corruption in the Audio module when playing an amrwbplus clip with modified content...

Qualcomm Chipsets Buffer Error Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in the Qualcomm Chipsets that stems from a memory corruption due to buffer duplication without checking the audio input size when using the EVS vocoder for voice calls...

Qualcomm Chipsets Buffer Error Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. The Qualcomm Chipsets contain a security vulnerability that originates from a transient DOS in the audio when the channel buffers are remapped in the media codec decoding...

Qualcomm Chipsets Buffer Error Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm, an American company. A security vulnerability exists in the Qualcomm Chipsets that stems from a memory corruption when allocating memory in the COmxApeDec module of the Audio...

CVE-2023-20785

In audio, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628524; Issue ID: ALPS07628524...

CVE-2023-20785

In audio, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628524; Issue ID: ALPS07628524...

Out-of-bounds

In audio, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628524; Issue ID: ALPS07628524...

CVE-2023-20785

In audio, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628524; Issue ID: ALPS07628524...

CVE-2023-20785

Summary: CVE-2023-20785 describes a potential out-of-bounds write in the audio component due to a missing bounds check, enabling local escalation of privilege to system execution level. The vulnerability is described with no user interaction required. Affected component: Audio subsystem (MediaTek...