Multiple Qualcomm Products Resource Management Error Vulnerability

A Qualcomm chip is a chip from Qualcomm Incorporated USA. a way to miniaturize circuitry including primarily semiconductor devices, but also passive components, etc. and is manufactured from time to time on the surface of semiconductor wafers. A resource management error vulnerability exists in...

Buffer Error Vulnerability in Multiple Qualcomm Products

A Qualcomm chip is a chip from Qualcomm Incorporated USA. a way to miniaturize circuits mainly semiconductor devices, but also passive components, etc. and are manufactured from time to time on the surface of semiconductor wafers. A buffer error vulnerability exists in multiple Qualcomm products...

PT-2020-22161

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue has been identified, which can cause a crash. The crash occurs in the following functions: ih264d fill bs1 16x16mb pslice...

Vault’s GCP Auth Method Allows Authentication Bypass

Summary A vulnerability was identified in Vault and Vault Enterprise “Vault” such that, with the GCP Auth Method configured and under certain circumstances, the values relied upon by Vault to validate Google Compute Engine GCE VMs may be manipulated and authentication bypassed. This vulnerability...

RHEL 8 : libexif (RHSA-2020:4766)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4766 advisory. The libexif packages provide a library for extracting extra information from image files. The following packages have been upgraded to a lat...

fence security update

CentOS Errata and Security Advisory CESA-2020:5003 An update for fence-agents is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Intel Visual Compute Accelerator Access Control DoS

The vulnerability of the Intel Visual Compute Accelerator 2 for working with media data is related to lack of access control. Exploiting this vulnerability could allow an attacker to cause a service failure...

Intel Visual Compute Accelerator Privilege Escalation

The vulnerability of the Intel Visual Compute Accelerator 2 for working with media data is related to lack of access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2020-8676

Improper access control in the IntelR Visual Compute Accelerator 2, all versions, may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-8677

Improper access control in the IntelR Visual Compute Accelerator 2, all versions, may allow a privileged user to potentially enable denial of service via local access...

CVE-2020-8676

Improper access control in the IntelR Visual Compute Accelerator 2, all versions, may allow a privileged user to potentially enable escalation of privilege via local access...

Improper access control

Improper access control in the IntelR Visual Compute Accelerator 2, all versions, may allow a privileged user to potentially enable denial of service via local access...

Improper access control

Improper access control in the IntelR Visual Compute Accelerator 2, all versions, may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-8677

CVE-2020-8677 affects Intel Visual Compute Accelerator 2 (all versions). It is an improper access control flaw that may let a privileged local user cause a denial of service. Intel will not provide a patch; mitigation is to limit privileged access to hosts. (Connected Intel advisory also covers C...

CVE-2020-8676

Improper access control in the IntelR Visual Compute Accelerator 2, all versions, may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-8676

The CVE-2020-8676 entry concerns Intel’s Visual Compute Accelerator 2 (VCA2) with improper access control that could allow a privileged user to escalate privileges via local access. Affected: Intel® Visual Compute Accelerator 2, all versions. Root cause: inadequate access control in the VCA2 comp...

CVE-2020-11206

Possible buffer overflow in Fastrpc while handling received parameters due to lack of validation on input parameters' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8098, MSM8998, QCM4290, QCM6125, QCS410, QCS4290, QCS610,...

CVE-2020-11201

Arbitrary access to DSP memory due to improper check in loaded library for data received from CPU side' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCM6125, QCS410, QCS603, QCS605, QCS610, QCS6125, SA6145P, SA6155, SA6155P,...

CVE-2020-11130

u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SC8180X, SC8180XP, SDX55,...

CVE-2020-11184

u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDX55, SDX55M, SM4250, SM4250P,...