9301 matches found
Qualcomm Embedded Driver Elevation
The vulnerability of the camera sensor driver drivers/camsensormodule/cameeprom/cameepromcore.c in Qualcomm’s embedded software is related to synchronization errors when using shared resources “Race Situation”. Exploiting this vulnerability can allow attackers to compromise the confidentiality,...
CVE-2024-39349
A vulnerability regarding buffer copy without checking size of input 'Classic Buffer Overflow' is found in the libjansson component and it does not affect the upstream library. This allows remote attackers to execute arbitrary code via unspecified vectors. The following models with Synology Camer...
CVE-2024-8957
PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not sufficiently validate the ntpaddr configuration value which may lead to arbitrary command execution when ntpclient is started. When chained with CVE-2024-8956, a remote and...
CVE-2024-8956
PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue. The camera does not properly enforce authentication to /cgi-bin/param.cgi when requests are sent without an HTTP Authorization header. The result is a remote and unauthenticated attacker can...
CVE-2024-49833
Memory corruption can occur in the camera when an invalid CID is used...
CVE-2024-49834
Memory corruption while power-up or power-down sequence of the camera sensor...
CVE-2024-45582
Memory corruption while validating number of devices in Camera kernel...
CVE-2024-49832
Memory corruption in Camera due to unusually high number of nodes passed to AXI port...
CVE-2024-49834 Improper Validation of Array Index in Camera
Memory corruption while power-up or power-down sequence of the camera sensor...
CVE-2024-49834
CVE-2024-49834 describes memory corruption during the power-up/power-down sequence of the camera sensor in Qualcomm-based devices. The entry indicates a LOCAL attack vector, LOW privileges required, and no user interaction, with HIGH impact on confidentiality, integrity, and availability per the ...
CVE-2024-49834 Improper Validation of Array Index in Camera
Memory corruption while power-up or power-down sequence of the camera sensor...
CVE-2024-49833 Improper Validation of Array Index in Camera
Memory corruption can occur in the camera when an invalid CID is used...
CVE-2024-49833
CVE-2024-49833 is a memory corruption vulnerability in the camera triggered by an invalid CID, reported across Qualcomm components and Android security bulletins. Affected area is the camera stack from Qualcomm—details cite memory corruption as the underlying flaw with high impact (C:H, I:H, A:H)...
CVE-2024-49833 Improper Validation of Array Index in Camera
Memory corruption can occur in the camera when an invalid CID is used...
CVE-2024-49832 Improper Validation of Array Index in Camera
Memory corruption in Camera due to unusually high number of nodes passed to AXI port...
CVE-2024-49832
CVE-2024-49832 concerns Qualcomm camera hardware. The root cause is memory corruption caused by an unusually high number of nodes passed to the AXI port, enabling memory corruption in the Camera subsystem. The CVSS v3.1 metrics indicate local exploitation with low privileges and no user interacti...
CVE-2024-49832 Improper Validation of Array Index in Camera
Memory corruption in Camera due to unusually high number of nodes passed to AXI port...
CVE-2024-45582 Improper Validation of Array Index in Camera Driver
Memory corruption while validating number of devices in Camera kernel...
CVE-2024-45582
CVE-2024-45582 affects Qualcomm camera kernel: memory corruption during validation of the number of devices in the camera core. Root cause described as an input/array validation issue leading to memory corruption. CVSS metrics indicate local access, low attack complexity with low privileges, and ...