CVE-2024-37574

The CVE concerns GriceMobile com.grice.call for Android, version 4.5.2. A vulnerability in com.iui.mobile.presentation.MobileActivity allows any installed app (no permissions required) to place phone calls without user interaction by sending a crafted intent. Documented impact is unauthorized out...

PT-2024-29953 · Veeam · Veeam Backup & Replication

Name of the Vulnerable Software and Affected Versions: Veeam Backup & Replication affected versions not specified Description: A vulnerability in Veeam Backup & Replication allows a low-privileged user to start an agent remotely in server mode and obtain credentials, effectively escalating...

CVE-2024-43049

Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver...

CVE-2024-43050

Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver...

CVE-2024-43053 Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Windows Host

Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic information...

CVE-2024-43053

CVE-2024-43053 describes a local-memory corruption vulnerability in Qualcomm WLAN components, triggered by IOCTL calls from user space to read WLAN target diagnostic information. The underlying root cause is improper restriction of operations within the bounds of a memory buffer. Affected softwar...

CVE-2024-43052 Improper Input Validation in Video Analytics and Processing

Memory corruption while processing API calls to NPU with invalid input...

CVE-2024-43050

CVE-2024-43050 describes memory corruption arising when userspace issues IOCTL commands to the WLAN driver to issue a factory test command. Multiple sources cite this as a stack-based/memory corruption issue inside the WLAN driver, with a local attack vector and high impact on confidentiality, in...

CVE-2024-43050 Stack-based Buffer Overflow in WLAN Windows Host

Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver...

CVE-2024-43050 Stack-based Buffer Overflow in WLAN Windows Host

Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver...

CVE-2024-43049

CVE-2024-43049 describes memory corruption when user-space IOCTLs attempt to set a generic private command in a WLAN driver. The issue is reported across multiple feeds (NVD/Red Hat/CIRCL) and centers on the IOCTL path in the WLAN driver, with a high impact in CVSS terms (Local access, Low comple...

CVE-2024-43049 Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Windows Host

Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver...

CVE-2024-43049 Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Windows Host

Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a series of chipsets from Qualcomm, Inc. A security vulnerability exists in Qualcomm Chipsets that stems from a possible memory corruption when processing NPU API calls with invalid inputs if the inputs are not validated...

CVE-2024-43703

Software installed and run as a non-privileged user may conduct improper GPU system calls to achieve unauthorised reads and writes of physical memory from the GPU HW...

CVE-2024-43702

Software installed and run as a non-privileged user may conduct improper GPU system calls to allow unprivileged access to arbitrary physical memory page...

CVE-2024-43703

CVE-2024-43703 affects Imagination Technologies PowerVR-GPU (DDK driver). The underlying issue is a logic error where duplicate calls to RGXCreateFreeList on the same reservation can cause a use-after-free in GPU memory management, enabling improper GPU calls that could read/write GPU physical me...

CVE-2024-43703 GPU DDK - Duplicate calls to RGXCreateFreeList on the same reservation leads to GPU UAF

Software installed and run as a non-privileged user may conduct improper GPU system calls to achieve unauthorised reads and writes of physical memory from the GPU HW...

CVE-2024-43703 GPU DDK - Duplicate calls to RGXCreateFreeList on the same reservation leads to GPU UAF

Software installed and run as a non-privileged user may conduct improper GPU system calls to achieve unauthorised reads and writes of physical memory from the GPU HW...

CVE-2024-43702

CVE-2024-43702: Imagination Technologies PowerVR-GPU driver is affected. A non-privileged user can trigger improper GPU system calls, leading to unprivileged access to arbitrary physical memory pages. Several sources describe this vulnerability as enabling kernel memory writes via GPU render stat...