CVE-2024-45560 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Memory corruption while taking a snapshot with hardware encoder due to unvalidated userspace buffer...

CVE-2024-45560 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Memory corruption while taking a snapshot with hardware encoder due to unvalidated userspace buffer...

CVE-2024-38418 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Linux

Memory corruption while parsing the memory map info in IOCTL calls...

CVE-2024-38418 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Linux

Memory corruption while parsing the memory map info in IOCTL calls...

CVE-2024-38418

CVE-2024-38418 describes memory corruption occurring when parsing the memory map information in IOCTL calls, affecting Qualcomm chipsets (notably camera/Linux components). The vulnerability stems from parsing memory map data inside an IOCTL path, enabling local exploitation with low privileges an...

PT-2025-2715 · Unknown · Camera Kernel

Name of the Vulnerable Software and Affected Versions: Camera kernel affected versions not specified Description: The issue involves memory corruption that occurs when validating the number of devices in the camera kernel. This corruption can potentially lead to security issues. There is no...

Qualcomm Chipsets: Input validation error vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. The Qualcomm Chipsets suffer from an input validation error vulnerability that originates from a memory corruption that occurs during power-up or power-down of the camera sensor...

PT-2025-2864 · Camera · Camera

Name of the Vulnerable Software and Affected Versions: Camera affected versions not specified Description: The issue is related to memory corruption in the camera due to an unusually high number of nodes passed to the AXI port. Recommendations: At the moment, there is no information about a newer...

Qualcomm Chipsets: Input validation error vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets that stems from an unusually high number of nodes passed to the AXI port, resulting in camera memory corruption...

Qualcomm Chipsets: Input validation error vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets that originates from a memory corruption when validating the number of devices in the camera core...

Qualcomm Chipsets: Input validation error vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets that stems from a memory corruption that may occur in the camera when an invalid CID is used...

CVE-2024-49832: Improper Validation of Array Index

Memory corruption in Camera due to unusually high number of nodes passed to AXI port...

PT-2025-2866

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto affected versions not specified Description The issue is related to memory corruption that occurs during the power-up or power-down sequence of the camera sensor. This can potentially lead to severe consequences,...

PT-2025-2865

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description Memory corruption can occur in the camera when an invalid CID is used. This issue is related to the use of an invalid CID in the camera, which can lead to...

CVE-2024-45582: Improper Validation of Array Index

Memory corruption while validating number of devices in Camera kernel...

CVE-2024-49834: Improper Validation of Array Index

Memory corruption while power-up or power-down sequence of the camera sensor...

January 28, 2025—KB5050081 (OS Build 19045.5440) Preview

None None...

CVE-2024-57272

SecuSTATION Camera V2.5.5.3116-S50-SMA-B20160811A and lower is vulnerable to Cross Site Scripting XSS...

PT-2025-3423 · Unknown · Secustation Camera

Name of the Vulnerable Software and Affected Versions: SecuSTATION Camera versions prior to 2.5.5.3116-S50-SMA-B20160811A Description: The issue concerns Cross Site Scripting XSS, which is a type of attack where an attacker injects malicious scripts into a website, allowing them to steal user dat...

CVE-2024-57272: Improper Neutralization of Input During Web Page Generation

SecuSTATION Camera V2.5.5.3116-S50-SMA-B20160811A and lower is vulnerable to Cross Site Scripting XSS...