CVE-2024-45542

Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver...

CVE-2024-45547

Memory corruption while processing IOCTL call invoked from user-space to verify non extension FIPS encryption and decryption functionality...

CVE-2024-33061

Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process...

CVE-2024-45547

CVE-2024-45547 concerns memory corruption in Qualcomm chipsets triggered while processing an IOCTL from user-space to verify non-extension FIPS encryption/decryption. The CVE details indicate a local, low-privilege attack with no user interaction, but with high impact on confidentiality, integrit...

CVE-2024-45547 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host

Memory corruption while processing IOCTL call invoked from user-space to verify non extension FIPS encryption and decryption functionality...

CVE-2024-45542 Stack-based Buffer Overflow in WLAN Windows Host

Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver...

CVE-2024-45542 Stack-based Buffer Overflow in WLAN Windows Host

Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver...

CVE-2024-45542

CVE-2024-45542 affects Qualcomm WLAN chipsets; memory corruption occurs when an IOCTL from user space writes board data to the WLAN driver. The issue is triggered via a local attack (AV:L, AC:L, PR:L) with no user interaction, and it impacts confidentiality, integrity, and availability (C:H, I:H,...

CVE-2024-45541 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host

Memory corruption when IOCTL call is invoked from user-space to read board data...

CVE-2024-45541 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host

Memory corruption when IOCTL call is invoked from user-space to read board data...

CVE-2024-45541

CVE-2024-45541 affects Qualcomm chipsets where a memory corruption occurs when an IOCTL is invoked from user-space to read board data. The vulnerability is triggered through a local IOCTL path (low privileges, no user interaction) and results in memory corruption on the target device. CVSS metric...

CVE-2024-33061 Buffer Over-read in DSP Service

Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process...

CVE-2024-33061

CVE-2024-33061 describes an information disclosure affecting Qualcomm chipsets, caused by processing an IOCTL call used to release a trusted VM process or to open a channel without initializing the process. The vulnerability is disclosed as a local issue with high confidentiality impact and low a...

CVE-2024-33061 Buffer Over-read in DSP Service

Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process...

BG.Studio Color Phone Call Screen App security vulnerability

BG.Studio Color Phone Call Screen App BG.Studio com.asianmobile.callcolor is a color phone call screen application from BG.Studio, Inc. A security vulnerability exists in BG.Studio Color Phone Call Screen App version 21.1.9 and earlier, which stems from a vulnerability that allows any application...

PT-2025-2410

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: Information disclosure occurs while processing an IOCTL call made for releasing a trusted VM process or opening a channel without initializing the...

PT-2025-2701

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Compute affected versions not specified Description The issue is related to memory corruption that occurs when an IOCTL call is invoked from user-space to write board data to the WLAN driver. This can lead to potential...

CVE-2024-53936

The com.asianmobile.callcolor aka Color Phone Call Screen App application through 24 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.asianmobile.callcolor.ui.component.call.CallActivity component...

CVE-2024-53933

The com.callerscreen.colorphone.themes.callflash aka Color Call Theme & Call Screen application through 1.0.7 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the...

CVE-2024-53934

The com.windymob.callscreen.ringtone.callcolor.colorphone aka Color Phone Call Screen Themes application through 1.1.2 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.frovis.androidbase.call.DialerActivi...