1789 matches found
CVE-2024-21455
CVE-2024-21455 is a memory corruption issue in Qualcomm’s adsprpc DSP driver exposed to user space via compat IOCTL handling. The root cause involves 32‑bit compatibility handling where a global is_compat flag is set on a file descriptor and later misinterprets a 64‑bit userland request as a 32‑b...
UNISOC Chipsets 安全漏洞
UNISOC Chipsets is a chipset from China's Unisplendour UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of boundary checking in the UMTS RLC driver, which could result in out-of-bounds reads...
The vulnerability in the Linux kernel driver for microprogrammed network controllers and adapters of Intel Ethernet allows a hacker to exploit their privileges.
The vulnerability in the Linux kernel driver for microprogrammed network controllers and adapters of Intel Ethernet is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to enhance their privileges...
The vulnerability of the driver responsible for the computer’s interaction with the CLFS.sys device in the Windows operating system allows a hacker to trigger a Service-Breaking Failure (BSoD).
The vulnerability of the driver responsible for the computer’s interaction with CLFS.sys devices and devices in the Windows operating system is related to incorrect configuration data input. Exploiting this vulnerability can cause a Service-Breaking Failure BSoD through the forced invocation of t...
The vulnerability of the Kernel Streaming Service driver for Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Kernel Streaming Service driver for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Kernel Streaming Service driver for Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Kernel Streaming Service driver for Windows operating systems is related to buffer overflows in the “bucket”. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the Kernel Streaming Service driver for Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Kernel Streaming Service driver for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Kernel Streaming Service driver for Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Kernel Streaming Service driver for Windows operating systems is related to buffer overflows in the “bucket”. Exploiting this vulnerability can allow an attacker to gain increased privileges...
CVE-2024-5760
The Samsung Universal Print Driver for Windows is potentially vulnerable to escalation of privilege allowing the creation of a reverse shell in the tool. This is only applicable for products in the application released or manufactured before 2018...
The vulnerability of the kernel driver of Windows operating systems allows attackers to elevate their privileges to the SYSTEM level.
The vulnerability of the kernel driver of Windows operating systems relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to elevate their privileges to the SYSTEM level...
CVE-2024-38243
Kernel Streaming Service Driver Elevation of Privilege Vulnerability...
Huawei HarmonyOS and EMUI Camera Driver Module Access Privilege Vulnerability
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. An access privilege vulnerability exists in Huawei...
CVE-2024-44962 Bluetooth: btnxpuart: Shutdown timer and prevent rearming when driver unloading
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Shutdown timer and prevent rearming when driver unloading When unload the btnxpuart driver, its associated timer will be deleted. If the timer happens to be modified at this moment, it leads to the kernel ca...
The vulnerability of the pm8001_exec_internal_tmf_task() function in the PMC-Sierra SPC 8001 SAS/SATA kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the pm8001execinternaltmftask function in the drivers/scsi/pm8001/pm8001sas.c file of the PMC-Sierra SPC 8001 SAS/SATA kernel for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the driver for the common file system of Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the driver for the common file system of Windows operating systems is related to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to increase their privileges...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a slab out-of-bounds issue in the tty/serial component in the qcom-geni-serial driver...
The vulnerability of the driver for auxiliary functions in Windows Sockets operating systems allows attackers to increase their privileges.
The vulnerability of the WinSock auxiliary function driver in Windows operating systems is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to elevate their privileges to the SYSTEM level...
CVE-2024-43842 wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter()
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: Fix array index mistake in rtw89stainfogetiter In rtw89stainfogetiter 'status-hegi' is compared to array size. But then 'rate-hegi' is used as array index instead of 'status-hegi'. This can lead to go beyond array...
kernel: wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
A vulnerability was found in the Linux kernel's net rtl8xxxucore.c driver, where a race condition can lead to a use-after-free situation in the rtl8xxxustop function. This occurs when the workqueue is still running but the driver has been stopped and can lead to c2hcmdwork attempting to access...