Memory corruption

Memory corruption in Audio while processing svamodelserializer using memory size passed by HIDL client...

Memory corruption

Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions...

Memory corruption

Memory Corruption in Audio while allocating the ion buffer during the music playback...

CVE-2023-22667 Integer Overflow or Wraparound in Audio

Memory Corruption in Audio while allocating the ion buffer during the music playback...

CVE-2023-22667

CVE-2023-22667 is a memory corruption issue in Qualcomm closed-source audio components triggered during ion buffer allocation while playing music. Multiple sources (NVD, Red Hat advisory, and other feeds) describe the vulnerability with high impact (confidentiality, integrity, and availability af...

CVE-2023-21672 Use After Free in Audio

Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions...

CVE-2023-21672

CVE-2023-21672 is a memory corruption issue in Qualcomm Audio when concurrent tunnel playback or concurrent audio tunnel recording sessions occur. The vulnerability affects Qualcomm components (Audio) and has a high impact with local attack vector; CVSS details indicate high confidentiality, inte...

CVE-2023-21639

CVE-2023-21639 describes memory corruption in the Audio component on Qualcomm chipsets when processing the sva_model_serializer with a memory size provided by the HIDL client. The issue is triggered locally and involves memory handling that impacts confidentiality, integrity, and availability as ...

CVE-2023-21639 Buffer Copy Without Checking the Size of Input in Audio

Memory corruption in Audio while processing svamodelserializer using memory size passed by HIDL client...

CVE-2023-21639 Buffer Copy Without Checking the Size of Input in Audio

Memory corruption in Audio while processing svamodelserializer using memory size passed by HIDL client...

PT-2023-18333 · Qualcomm · Snapdragon +51

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in the audio component when concurrent tunnel playback or audio tunnel recording sessions are running. This can...

Qualcomm Chipsets 缓冲区错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a memory corruption issue in Audio when using memory passed by the HIDL client for the svamodelserializer...

PT-2023-18614 · Qualcomm · Sd205 Firmware +185

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned, use: affected versions not specified Description: The issue is related to memory corruption in audio, specifically when allocating the ion buffer during music playback. Recommendations: At the momen...

Qualcomm Chipsets 资源管理错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a memory corruption issue when running concurrent tunnel playback or concurrent audio tunnel recording...

PT-2023-18302 · Audio · Audio

Name of the Vulnerable Software and Affected Versions: Audio affected versions not specified Description: The issue is related to memory corruption in the Audio component when processing sva model serializer using a memory size passed by the HIDL client. Recommendations: At the moment, there is n...

New technique can defeat voice authentication "after only six tries"

Voice authentication is back in the news with another tale of how easy it might be to compromise. University of Waterloo scientists have discovered a technique which they claim can bypass voice authentication with "up to a 99% success rate after only six tries". In fact this method is apparently ...

SUSE Linux Enterprise Server 安全漏洞

SUSE Linux Enterprise Server is a suite of enterprise server edition Linux operating systems from the German company SUSE. A security vulnerability exists in SUSE Linux Enterprise Server, which originates from a boundary error in the handling of the AVRCP protocol, which could allow a remote...

apiaudio.com Cross Site Scripting vulnerability OBB-3441203

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

UBUNTU-CVE-2023-34823

fdkaac before 1.0.5 was discovered to contain a stack overflow in readcallback function in src/main.c...

audio-max.net Cross Site Scripting vulnerability OBB-3428656

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...