CVE-2025-34125

CVE-2025-34125 describes an unauthenticated command injection in the D-Link DSP-W110A1 cookie handling of the lighttpd web server, affecting firmware 1.05B01. The root cause is processing of specially crafted cookie values that allows remote attackers to execute arbitrary commands on the underlyi...

PT-2025-29887 · D Link +2 · D-Link Dsp-W110A1 +2

Name of the Vulnerable Software and Affected Versions: D-Link DSP-W110A1 version 1.05B01 Description: An unauthenticated command injection vulnerability exists in the cookie handling process of the lighttpd web server. This occurs when specially crafted cookie values are processed, allowing remot...

D-Link DSP-W110A1 安全漏洞

The D-Link DSP-W110A1 is a Wi-Fi smart routing device. The D-Link DSP-W110A1 suffers from a command injection vulnerability that stems from incorrectly filtering input parameters, which can be exploited by an attacker to submit a special request and execute arbitrary commands...

SUSE CVE-2025-38329

In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Fix OOB memory read access in KUnit test wmfw info KASAN reported out of bounds access - csdspmockwmfwaddinfo, because the source string length was rounded up to the allocation size...

UBUNTU-CVE-2025-38330

In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Fix OOB memory read access in KUnit test ctl cache KASAN reported out of bounds access - csdspctlcacheinitmultipleoffsets. The code uses mockcoefftemplate.lengthbytes 4 bytes for register value allocations. But...

UBUNTU-CVE-2025-38329

In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Fix OOB memory read access in KUnit test wmfw info KASAN reported out of bounds access - csdspmockwmfwaddinfo, because the source string length was rounded up to the allocation size...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an out-of-bounds memory read in the csdsp firmware test, which could lead to a crash...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an out-of-bounds memory read in the csdspmockbinaddnameorinfo function...

PT-2025-29052

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw in the cs dsp firmware related to out-of-bounds memory access during a KUnit test ctl cache. The issue occurs in the cs dsp ctl cache init multiple...

PT-2025-29051

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: The Linux kernel contains a flaw within the cs dsp firmware component. A KUnit test revealed an out-of-bounds OOB memory read access due to incorrect string length handling during the...

CVE-2025-27056 Use After Free in DSP Service

Memory corruption during sub-system restart while processing clean-up to free up resources...

CVE-2025-27056 Use After Free in DSP Service

Memory corruption during sub-system restart while processing clean-up to free up resources...

CVE-2025-21486 Untrusted Pointer Dereference in DSP Service

Memory corruption during dynamic process creation call when client is only passing address and length of shell binary...

CVE-2025-21486

CVE-2025-21486 describes a memory corruption in Qualcomm components during dynamic process creation when the client passes only the address and length of the shell binary. The CVSSv3.1 vector indicates local access, low attack complexity and privileges, no user interaction, with high impact to co...

CVE-2025-21486 Untrusted Pointer Dereference in DSP Service

Memory corruption during dynamic process creation call when client is only passing address and length of shell binary...

CVE-2025-21485 Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service

Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC...

CVE-2025-21485 Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service

Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC...

CVE-2025-21485

CVE-2025-21485 is a memory corruption vulnerability in Qualcomm FastRPC, triggered while processing INIT and multimode IOCTL calls. Affects Qualcomm chipsets with FastRPC kernel interfaces; CVSS-like data from the published entry indicates local access, low attack complexity, and high impact acro...

CVE-2023-33063

Memory corruption in DSP Services during a remote call from HLOS to DSP...

CVE-2023-33029

Memory corruption in DSP Service during a remote call from HLOS to DSP...