112 matches found
CVE-2024-21460 Use of Insufficiently Random Values in Core
Information disclosure when ASLR relocates the IMEM and Secure DDR portions as one chunk in virtual address space...
CVE-2024-21460 Use of Insufficiently Random Values in Core
Information disclosure when ASLR relocates the IMEM and Secure DDR portions as one chunk in virtual address space...
ddr-navi.jp Cross Site Scripting vulnerability OBB-3865599
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-33060
Transient DOS in Core when DDR memory check is called while DDR is not initialized...
Design/Logic Flaw
Transient DOS in Core when DDR memory check is called while DDR is not initialized...
CVE-2023-33060 Buffer Over-read in Core
Transient DOS in Core when DDR memory check is called while DDR is not initialized...
CVE-2023-33060 Buffer Over-read in Core
Transient DOS in Core when DDR memory check is called while DDR is not initialized...
CVE-2023-33060
Summary of CVE-2023-33060 (Transient DOS in Core when DDR memory check is called while DDR is not initialized) Multiple connected sources (NVD, Red Hat, AR/ENISA EUVD, etc.) align on a denial-of-service issue arising in the Core when a DDR memory check is performed before DDR initialization. Publ...
kernel: memory: of: Fix refcount leak bug in of_get_ddr_timings()
In the Linux kernel, the following vulnerability has been resolved: memory: of: Fix refcount leak bug in ofgetddrtimings We should add the ofnodeput when breaking out of foreachchildofnode as it will automatically increase and decrease the refcount...
kernel: memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
In the Linux kernel, the following vulnerability has been resolved: memory: of: Fix refcount leak bug in oflpddr3getddrtimings We should add the ofnodeput when breaking out of foreachchildofnode as it will automatically increase and decrease the refcount...
CVE-2022-33269
Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment...
Integer overflow
Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment...
ddr-museum-pirna.de Cross Site Scripting vulnerability OBB-3256295
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-33269
CVE-2022-33269: Memory corruption due to integer overflow or wraparound in Core during DDR memory assignment. Affects the Core component; root cause is integer overflow in DDR memory handling. Impact is memory corruption (high severity per NVD/Metrics; CRITICAL in some classifiers). Remediation/s...
CVE-2022-33269 Integer overflow or wraparound in Core
Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment...
PT-2022-35336 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: A refcount leak bug was discovered in the of lpddr3 get ddr timings function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...
PT-2022-35535 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: A refcount leak bug was discovered in the of get ddr timings function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior ...
PT-2022-35335 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: A refcount leak bug was discovered in the of get ddr timings function. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations: For Linux Kernel...
ddr-navi.jp Cross Site Scripting vulnerability OBB-1368889
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2018-13910
CVE-2018-13910 describes an out-of-bounds access in TZ caused by an invalid index used to check against DDR, affecting a wide range of Qualcomm Snapdragon SoCs (e.g., IPQ8074, MDM9xxx, MSM8xxx/SD platforms) and devices listed in the CVE. The root cause is an invalid index calculation that can lea...