CVE-2024-33058

Memory corruption while assigning memory from the source DDR memoryHLOS to ADSP...

CVE-2024-33058

CVE-2024-33058 concerns memory corruption that occurs when allocating memory from source DDR memory (HLOS) to the ADSP in Qualcomm closed‑source components. The CVSS 3.1 metrics show a Local attack vector, High impact on confidentiality, integrity, and availability, with a High base score (7.5) a...

CVE-2024-33058 Insufficient Granularity of Access Control in Core

Memory corruption while assigning memory from the source DDR memoryHLOS to ADSP...

CVE-2024-33058 Insufficient Granularity of Access Control in Core

Memory corruption while assigning memory from the source DDR memoryHLOS to ADSP...

PT-2025-29015

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 6.14.0-0-MANJARO-ARM and earlier Description: A flaw was identified in the Linux kernel where the meson ddr pmu create function within the Amlogic DDR PMU driver incorrectly utilizes smp processor id. This function assum...

USN-7303-3 linux-gcp-6.8, linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACPI drivers; - Drivers cor...

USN-7303-2 linux-oracle, linux-oracle-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACPI drivers; - Drivers cor...

CVE-2022-33269

Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment...

CVE-2024-21460

Information disclosure when ASLR relocates the IMEM and Secure DDR portions as one chunk in virtual address space...

CVE-2024-33027

Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page table...

CVE-2024-54102

Race condition vulnerability in the DDR module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-54102

Race condition vulnerability in the DDR module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-54102

Race condition vulnerability in the DDR module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-54102

Race condition vulnerability in the DDR module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-54102

CVE-2024-54102 is described across multiple feeds as a race-condition vulnerability in the Huawei HarmonyOS ddr module. The core issue is a race condition in the DDR module that can impact confidentiality. Public sources provide varying attack context (NVD notes network attack vector with high co...

HUAWEI HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A competitive condition vulnerability exists in the Huawei HarmonyOS ddr module, which can be exploited by an attacker to compromise confidentiality...

PT-2024-36034 · Unknown · Ddr Module

Name of the Vulnerable Software and Affected Versions: DDR module affected versions not specified Description: The issue is related to a race condition vulnerability in the DDR module. Successful exploitation of this vulnerability may affect service confidentiality. There is no information provid...

CVE-2024-33027 Improper Access Control in Graphics Linux

Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page table...

CVE-2024-21460

Information disclosure when ASLR relocates the IMEM and Secure DDR portions as one chunk in virtual address space...

CVE-2024-21460

CVE-2024-21460 describes information disclosure related to ASLR relocation of the IMEM and Secure DDR portions in Qualcomm’s environments. The core entry is that ASLR relocates these memory regions as a single chunk in virtual address space, enabling information disclosure. Connected records conf...