EUVD-2021-19802

Malware in sbrugna...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a memory leak in the dmaengine ti driver when device registration fails...

PT-2024-9928

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to an array underflow in the geni se clk tbl get function of the QCOM GENI Serial Engine Driver in the Linux kernel. This underflow occurs because a loop does not...

PT-2021-20039

Name of the Vulnerable Software and Affected Versions IntelR NUC M15 Laptop Kit Management Engine driver pack versions prior to 15.0.10.1508 Description The issue is related to improper authentication in the installer for the IntelR NUC M15 Laptop Kit Management Engine driver pack. This may allow...

CVE-2021-33087: Improper Authentication

Improper authentication in the installer for the IntelR NUC M15 Laptop Kit Management Engine driver pack before version 15.0.10.1508 may allow an authenticated user to potentially enable denial of service via local access...

Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-4227-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4227-1 advisory. It was discovered that a heap-based buffer overflow existed in the Marvell WiFi-Ex Driver for the Linux kernel. A physically proximate attack...

Unspecified Vulnerability in Intel TXE and Intel Management Engine Consumer Driver

Intel TXE and Intel Management Engine Consumer Driver are both products of Intel Corporation, USA. Intel TXE is a Trusted Execution Engine with hardware validation for use in CPUs Central Processing Units.Intel Management Engine Consumer Driver is a management engine consumer driver. An unspecifi...

USN-4208-1: Linux kernel vulnerabilities

Jann Horn discovered that the OverlayFS and ShiftFS Drivers in the Linux kernel did not properly handle reference counting during memory mapping operations when used in conjunction with AUFS. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary...

CVE-2017-0626: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android...

PT-2017-10574

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.10, Kernel-3.18 Description An information disclosure issue in the Qualcomm crypto engine driver could allow a local malicious application to access data outside of its permission levels. This issue is considered High...

CVE-2017-0576

CVE-2017-0576 is an elevation-of-privilege vulnerability in the Qualcomm Crypto Engine Driver that could allow a local malicious app to execute arbitrary code in the kernel context. Affected product scope is Android; kernels 3.10 and 3.18 are listed as vulnerable. The underlying issue is in the Q...

CVE-2017-0576

An elevation of privilege vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2017-0576: Integer Overflow or Wraparound

An elevation of privilege vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

PT-2017-1878

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.10, Kernel-3.18 Description The issue is related to an elevation of privilege vulnerability in the Qualcomm crypto engine driver. This could allow a local malicious application to execute arbitrary code within the...

CVE-2017-0520

An elevation of privilege vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

PT-2017-1405

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.10 through Kernel-3.18 Description An elevation of privilege issue in the Qualcomm crypto engine driver could allow a local malicious application to execute arbitrary code within the context of the kernel. This issue ...

CVE-2017-0520: Buffer Copy without Checking Size of Input

An elevation of privilege vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2016-6738: Undefined Security Weakness

An elevation of privilege vulnerability in the Qualcomm crypto engine driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process...

PT-2016-7095

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-11-05 Description An elevation of privilege issue in the Qualcomm crypto engine driver could allow a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as...

PT-2016-5730

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-10-05 Description The issue is related to multiple integer overflows in the Qualcomm cryptographic engine driver. This allows attackers to gain privileges via a crafted application. The estimated number of...