CVE-2025-27037

Memory corruption while processing configdev IOCTL when camera kernel driver drops its reference to CPU buffers...

CVE-2025-47327 Use After Free in Camera

Memory corruption while encoding the image data...

CVE-2025-47327 Use After Free in Camera

Memory corruption while encoding the image data...

CVE-2025-47327

CVE-2025-47327 describes a memory-corruption issue during image data encoding affecting Qualcomm chipsets. The vulnerability’s root cause is memory corruption in the image encoding path, with the NVD/CVE records noting a high-severity risk (CVSS v3.1: Local attack, low complexity, no user interac...

CVE-2025-27037 Use After Free in Camera Driver

Memory corruption while processing configdev IOCTL when camera kernel driver drops its reference to CPU buffers...

CVE-2025-27037 Use After Free in Camera Driver

Memory corruption while processing configdev IOCTL when camera kernel driver drops its reference to CPU buffers...

CVE-2025-27037

CVE-2025-27037 affects Qualcomm chipsets due to a memory corruption issue in the camera subsystem. The root cause is described as memory corruption occurring while processing the config_dev IOCTL when the camera kernel driver drops its references to CPU buffers. Multiple sources consolidate this ...

CVE-2025-27037: Use After Free

Memory corruption while processing configdev IOCTL when camera kernel driver drops its reference to CPU buffers...

PT-2025-39275

Name of the Vulnerable Software and Affected Versions versions prior to 2025 Description A memory corruption issue exists when processing a config dev IOCTL within the camera kernel driver. This occurs when the driver releases its reference to CPU buffers. The issue could potentially allow for...

Qualcomm Chipsets Resource Management Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A resource management error vulnerability exists in Qualcomm Chipsets that stems from memory corruption due to the camera kernel driver releasing CPU buffer references when processing the configdev IOCTL...

CVE-2025-54860

Cognex In-Sight Explorer and In-Sight Camera Firmware expose a telnet-based service on port 23 in order to allow management operations on the device such as firmware upgrades and device reboot requiring an authentication. A wrong management of login failures of the service allows a...

CVE-2025-53969

Cognex In-Sight Explorer and In-Sight Camera Firmware expose a service implementing a proprietary protocol on TCP port 1069 to allow the client-side software, such as the In-Sight Explorer tool, to perform management operations such as changing network settings or modifying users' access to the...

Axis Camera Station Deserialization Arbitrary Code

The vulnerability of the surveillance and recording server systems for AXIS Camera Station and Camera Station Pro, as well as the AXIS Device Manager software for device management, is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor...

AXIS Camera Station Pro Permission Bypass DoS

The vulnerability of the AXIS Camera Station Pro software for video management is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability could allow an attacker to gain access to delete arbitrary files and cause service failures...

LenslessMic: Audio Encryption and Authentication Via Lensless Computational Imaging

With society's increasing reliance on digital data sharing, the protection of sensitive information has become critical. Encryption serves as one of the privacy-preserving methods; however, its realization in the audio domain predominantly relies on signal processing or software methods embedded...

CVE-2025-53969

Cognex In-Sight Explorer and In-Sight Camera Firmware expose a service implementing a proprietary protocol on TCP port 1069 to allow the client-side software, such as the In-Sight Explorer tool, to perform management operations such as changing network settings or modifying users' access to the...

CVE-2025-53969 Cognex In-Sight Explorer and In-Sight Camera Firmware Client-Side Enforcement of Server-Side Security

Cognex In-Sight Explorer and In-Sight Camera Firmware expose a service implementing a proprietary protocol on TCP port 1069 to allow the client-side software, such as the In-Sight Explorer tool, to perform management operations such as changing network settings or modifying users' access to the...

CVE-2025-54818

CVE-2025-54818 affects Cognex In-Sight Explorer and In-Sight Camera Firmware. A proprietary protocol on TCP port 1069 is used for management operations, with user management data (usernames/passwords) transmitted over an unencrypted channel, enabling an adjacent attacker to intercept credentials ...

CVE-2025-54860 Cognex In-Sight Explorer and In-Sight Camera Firmware Improper Restriction of Excessive Authentication Attempts

Cognex In-Sight Explorer and In-Sight Camera Firmware expose a telnet-based service on port 23 in order to allow management operations on the device such as firmware upgrades and device reboot requiring an authentication. A wrong management of login failures of the service allows a...

CVE-2025-47698

CVE-2025-47698 affects Cognex In‑Sight devices (In‑Sight Explorer and related firmware). An adjacent, unauthenticated attacker can extract credentials that are present during the firmware upgrade procedure, facilitated by a hard‑coded password embedded in publicly available software. Impact per s...