PT-2025-53073

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak exists in the ASoC Audio System on Chip component, specifically within the mediatek common code in the parse dai link info function. The issue stems from missing...

Fixed rewards in DAI (or similar token) can potentially overflow when being packed

Lines of code Vulnerability details When the lottery is initialized, fixed rewards are tightly packed in a 256 bit word. This is implemented in the packFixedRewards function: function packFixedRewardsuint256 memory rewards private view returns uint256 packed if rewards.length != selectionSize ||...

GSD-2023-1002371 ASoC: SOF: Intel: hda-dai: fix possible stream_tag leak

ASoC: SOF: Intel: hda-dai: fix possible streamtag leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.169 by commit...

GSD-2023-1002342 ASoC: SOF: Intel: hda-dai: fix possible stream_tag leak

ASoC: SOF: Intel: hda-dai: fix possible streamtag leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.95 by commit...

GSD-2023-1002299 ASoC: SOF: Intel: hda-dai: fix possible stream_tag leak

ASoC: SOF: Intel: hda-dai: fix possible streamtag leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.13 by commit...

PT-2023-35417 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.95 Description: A potential issue in the ASoC: SOF: Intel: hda-dai component may lead to a stream tag leak. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-35375

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.1.13 Description A potential issue in the ASoC SOF Intel hda-dai component may lead to a stream tag leak. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2023-35446

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.169 Description A potential issue in the ASoC SOF Intel hda-dai component may lead to a stream tag leak. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-35085 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns an error handling path in the da7219 register dai clks function. It was introduced in version v5.10 and fixed in version v6.0.3. The actual impact and attack plausibility...

PT-2022-35536 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: The issue is related to an error handling path in the da7219 register dai clks function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kern...

PT-2022-35338

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.75 Description The issue concerns an error handling path in the da7219 register dai clks function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

Attacker can drain the SizeSealed.sol contract.

Lines of code Vulnerability details Impact An attacker can drain the SizeSealed.sol contract buy creating fake auction and manipulating some contract logic. POC Assuming that the SizeSealed.sol initially contains 10000 DAI tokens, I’ll demonstrate how an attacker can steal these tokens. The bug i...

The mint function is missing the minAmountOut control, this will cause the user to lose their funds.

Lines of code Vulnerability details Impact The mint function of the SimpleFeiDaiPSM contract receives DAI from the user, mints the FEI and sends it to the user. amountIn argument ; the amount of DAI received from the user, minAmountOut argument ; requests output for the amount of FEI given to the...

Missing access control on burnFeiHeld()

Lines of code Vulnerability details Impact The function burnFeiHeld is external, and can be called by everyone. This allows anyone to burn the FEI balance of the contract. This may affect the 1:1 ratio of FEI and DAI of the contract SimpleFeiDaiPSM.sol Proof of Concept Tools Used Manual review...

FEI Minter can drain SimpleFeiDaiPSM contract DAI balance

Lines of code Vulnerability details Impact The FEI token contract contain a mint function which allow the MINTER to mint a given amount of FEI tokens to any account including his own address. So the Minter can mint to his own account an amount of FEI tokens equivalent to the SimpleFeiDaiPSM...

Malicious Package

Overview starknet-dai-keeper is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packa...

Malicious Package

Overview dai-monorepo is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

MAL-2022-2319 Malicious code in dai-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15e0d4642284079938bd042d736693e64abcfd337e72af8de6cfb7dff3505ce1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dai-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15e0d4642284079938bd042d736693e64abcfd337e72af8de6cfb7dff3505ce1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dai-pg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 380a8ec5aad17aa31577c83a6d88aa6060b4631380bc351d846ef8b6d9d0a1e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...