Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets that stems from invalid command data in the Camera kernel resulting in an invalid index, which could lead to memory corruption during an array access...

Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. The Qualcomm Chipsets suffer from an input validation error vulnerability that stems from a memory corruption in the Camera kernel when a large number of devices are attached to user space...

PT-2025-19851 · Qualcomm · Snapdragon +4

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to memory corruption that occurs during array access in the Camera kernel. This corruption is caused by an invalid index resulting from invalid command data...

Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets that stems from a lack of memory requirement checking when calling IOCTL from user space to the camera kernel driver, which could lead to memory corruptio...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from improper command processing boundary checking in the camera-kernel driver, which could lead to memory corruption...

PT-2025-19849 · Qualcomm · Snapdragon +13

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to memory corruption caused by improper bounds checking during command handling in a camera kernel driver. This can lead to unspecified consequences. Recommendations: At...

Qualcomm Chipsets 缓冲区错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A buffer error vulnerability exists in Qualcomm Chipsets that stems from an invalid session link count in Camera Request Manager, which could lead to memory corruption when processing scheduling requests...

Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets, which originates from a Camera kernel driver memory corruption during a user-space call to IOCTL to dump request information...

PT-2025-19856 · Qualcomm · Snapdragon +10

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Memory corruption may occur due to a missing memory requirement check when invoking IOCTL calls from userspace to the camera kernel driver to dump request information. Recommendations: At th...

PT-2025-19852 · Qualcomm · Snapdragon +14

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue involves memory corruption in the camera kernel when a large number of devices are connected through userspace. This corruption occurs due to the handling of multiple device...

ASB-A-290086710

In multiple functions of CameraService.cpp, there is a possible way to use the camera from the background due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

The vulnerability of the CHOCO TEI WATCHER mini’s microprogramming software, related to security mechanism errors, allows a intruder to gain access to read, modify, and delete data, as well as alter device settings.

The vulnerability of the CHOCO TEI WATCHER mini camera’s microprogramming software is related to security mechanism errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read, modify, and delete data, as well as alter the device’s settings...

The vulnerability of the web interface of the AvertX network IP camera’s software allows a intruder to gain access to the video stream.

The vulnerability of the web interface of the AvertX network IP camera’s microprogramming software is related to the disclosure of information due to incompatibility. Exploiting this vulnerability can allow a remote attacker to gain access to the video stream...

The vulnerability of the CHOCO TEI WATCHER mini’s microprogramming software, related to weak password requirements, allows attackers to perform brute-force attacks and gain unauthorized access to protected information.

The vulnerability of the CHOCO TEI WATCHER mini camera’s microprogramming software is related to weak password requirements. Exploiting this vulnerability could allow an attacker to perform a brute-force attack and gain unauthorized access to protected information...

Camtruder - Advanced RTSP Camera Discovery and Vulnerability Assessment Tool

Camtruder is a high-performance RTSP camera discovery and vulnerability assessment tool written in Go. It efficiently scans and identifies vulnerable RTSP cameras across networks using various authentication methods and path combinations, with support for both targeted and internet-wide scanning...

CVE-2025-25984

An issue in Macro-video Technologies Co.,Ltd V380E6C1 IP camera HwHsAKPIQpWFXHR 1020302 allows a physically proximate attacker to execute arbitrary code via UART component...

CVE-2025-25985

An issue in Macro-video Technologies Co.,Ltd V380E6C1 IP camera HwHsAKPIQpWFXHR 1020302 allows a physically proximate attacker to execute arbitrary code via the /mnt/mtd/mvconf/wifi.ini and /mnt/mtd/mvconf/userinfo.ini components...

CVE-2025-27599

Element X Android is a Matrix Android Client provided by element.io. Prior to version 25.04.2, a crafted hyperlink on a webpage, or a locally installed malicious app, can force Element X up to version 25.04.1 to load a webpage with similar permissions to Element Call and automatically grant it...

CVE-2025-0926

Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible for a non-admin user to remove system files causing a boot loop by redirecting a file deletion when recording video. Axis has released a patched version for the highlighted flaw. Please refer to the Ax...

CVE-2025-1056

Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has identified an issue with a specific file that the server is using. A non-admin user can modify this file to either create files or change the content of files in an admin-protected location. Axis has released a patched version...