PT-2024-31594 · Npm · @Blakeembrey/Template

Name of the Vulnerable Software and Affected Versions: @blakeembrey/template versions prior to 1.2.0 Description: The issue allows an attacker to inject and run code within the template if they have access to write the template name. This can be achieved by exploiting the template display name...

CVE-2024-33047 Buffer Over-read in Display

Memory corruption when the captureRead QDCM command is invoked from user-space...

CVE-2024-33047 Buffer Over-read in Display

Memory corruption when the captureRead QDCM command is invoked from user-space...

CVE-2024-33035 Integer Overflow or Wraparound in Display

Memory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients...

CVE-2024-33035 Integer Overflow or Wraparound in Display

Memory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients...

Qualcomm Chipsets security vulnerabilities

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from an integer overflow issue contained in the Display component...

Qualcomm Chipsets security vulnerabilities

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from an out-of-bounds read issue contained in the Display component...

ASB-A-344620673

Bulletin has no description...

PT-2024-32122

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns the Linux kernel, where a vulnerability has been resolved related to the drm/amd/display component. The problem was caused by directly using state-fb-obj0 without...

CVE-2024-43899

A NULL pointer dereference vulnerability was found in dcn20getdcccompressioncap function in the dcn20resource.c file in the AMD GPU driver in the Linux Kernel. This issue could allow an attacker to make the system hang when using the mpv media player with specific hardware acceleration options...

CVE-2024-43895

A vulnerability was found in the Linux kernel’s AMD display driver, which caused a NULL pointer dereference during the setup of Multi-Stream Transport MST and Display Stream Compression DSC. This issue occurred when the driver attempted to recompute DSC parameters without an active stream on the...

CVE-2024-43904

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing This commit adds null checks for the 'stream' and 'plane' variables in the dcn30applyidlepoweroptimizations function. These variables were previously...

CVE-2024-43902

A NULL pointer dereference issue was found in the AMD Display drm/amd/display subsystem of the Linux kernel in amdgpudm.c. If an attacker can manipulate the input to functions that may not have proper NULL checks, they could trigger a situation where the system dereferences a NULL pointer, leadin...

CVE-2024-43901

A NULL pointer dereference vulnerability was found in the AMD Display drm/amd/display subsystem of the Linux kernel when users attempt to access the DTN log. When the command cat /sys/kernel/debug/dri/0/amdgpudmdtnlog to access the DTN log is run, the code attempts to read the gamut remap...

CVE-2024-43886

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null check in resourcelogpipetopologyupdate WHY When switching from "Extend" to "Second Display Only" we sometimes call resourcegetotgmasterforstream on a stream for the eDP, which is disconnected. This leads...

SUSE CVE-2024-43886

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null check in resourcelogpipetopologyupdate WHY When switching from "Extend" to "Second Display Only" we sometimes call resourcegetotgmasterforstream on a stream for the eDP, which is disconnected. This leads...

SUSE CVE-2024-43895

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

SUSE CVE-2024-43899

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null pointer deref in dcn20resource.c Fixes a hang thats triggered when MPV is run on a DCN401 dGPU: mpv --hwdec=vaapi --vo=gpu --hwdec-codecs=all and then enabling fullscreen playback double click on the vid...

SUSE CVE-2024-43901

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL pointer dereference for DTN log in DCN401 When users run the command: cat /sys/kernel/debug/dri/0/amdgpudmdtnlog The following NULL pointer dereference happens: +0.000003 BUG: kernel NULL pointer...

SUSE CVE-2024-43902

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null checker before passing variables Checks null pointer before passing variables to functions. This fixes 3 NULLRETURNS issues reported by Coverity...