CVE-2024-49840 Use of Out-of-range Pointer Offset in WLAN Windows Host

Memory corruption while Invoking IOCTL calls from user-space to validate FIPS encryption or decryption functionality...

CVE-2024-45561 Use After Free in Windows WLAN Host

Memory corruption while handling IOCTL call from user-space to set latency level...

CVE-2024-38418 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Linux

Memory corruption while parsing the memory map info in IOCTL calls...

CVE-2024-38418

CVE-2024-38418 describes memory corruption occurring when parsing the memory map information in IOCTL calls, affecting Qualcomm chipsets (notably camera/Linux components). The vulnerability stems from parsing memory map data inside an IOCTL path, enabling local exploitation with low privileges an...

CVE-2024-38418 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Linux

Memory corruption while parsing the memory map info in IOCTL calls...

CVE-2024-38412 Use After Free in Computer Vision

Memory corruption while invoking IOCTL calls from user-space to kernel-space to handle session errors...

CVE-2024-38412 Use After Free in Computer Vision

Memory corruption while invoking IOCTL calls from user-space to kernel-space to handle session errors...

CVE-2024-38412

CVE-2024-38412 is a memory-corruption issue linked to IOCTL handling of session errors in Qualcomm chipsets. Multiple connected sources confirm a kernel-space/ user-space IOCTL path as the root cause, with local access required and high impact to confidentiality, integrity, and availability per C...

CVE-2024-38411 Use After Free in Computer Vision

Memory corruption while registering a buffer from user-space to kernel-space using IOCTL calls...

CVE-2024-38411

CVE-2024-38411 involves memory corruption that occurs when registering a buffer from user-space to kernel-space via an IOCTL call on Qualcomm chipsets. The issue is linked to buffer management during the registration flow, including the path that adds the buffer to in-kernel lists and attempts to...

CVE-2024-38411 Use After Free in Computer Vision

Memory corruption while registering a buffer from user-space to kernel-space using IOCTL calls...

CVE-2024-36437

The vulnerability CVE-2024-36437 affects TextNow: Call + Text Unlimited for Android (version 24.17.0.2). A crafted Intent sent to the DialerActivity component (com.enflick.android.TextNow.activities.DialerActivity) can be issued by any installed app with no permissions, allowing a call to be plac...

PT-2025-2450 · Enflick · Textnow

Name of the Vulnerable Software and Affected Versions: TextNow: Call + Text Unlimited version 24.17.0.2 Description: The issue allows any installed application, without requiring permissions, to place phone calls without user interaction. This is achieved by sending a crafted intent via the...

CVE-2024-47898

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions...

CVE-2024-47891

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions...

CVE-2024-47899

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions...

CVE-2024-47900

Software installed and run as a non-privileged user may conduct improper GPU system calls to access OOB kernel memory...

CVE-2024-47900 GPU DDK - Multiple integer overflow in DmaTransfer PMR_DevPhysAddr functions leading to OOB writes

Software installed and run as a non-privileged user may conduct improper GPU system calls to access OOB kernel memory...

CVE-2024-47898 GPU DDK - PVRSRVDeviceSyncOpen use-after-free condition

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions...

CVE-2024-47898

CVE-2024-47898 is a PowerVR-GPU vulnerability reported by Imagination Technologies. The issue stems from a use-after-free condition in PVRSRVDeviceSyncOpen, caused by improper memory reuse after release, which can be triggered by software running as a non-privileged user via GPU system calls. The...