CVE-2023-43554

CVE-2023-43554 concerns memory corruption during IOCTL processing in Qualcomm FastRPC, with additional notes of a related memory corruption in Qualcomm DSP firmware’s IOCTL handling. The CVE descriptions indicate a local attacker with low exploit complexity could potentially cause high-impact con...

The vulnerability of the fastrpc_internal_mem_unmap() function in the DSP microprogramming system of Qualcomm’s embedded chips allows a hacker to execute arbitrary code.

The vulnerability of the fastrpcinternalmemunmap function in the DSP microprogramming system of Qualcomm’s embedded chips is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

CVE-2023-33078

Information Disclosure while processing IOCTL request in FastRPC...

Information disclosure

Information Disclosure while processing IOCTL request in FastRPC...

CVE-2023-33078

CVE-2023-33078 affects Qualcomm FastRPC: information disclosure during processing of an IOCTL request on Qualcomm chipsets. Root cause described as information leakage in FastRPC IOCTL handling; impact is Confidentiality ( HIGH ), with Local access as attack vector per NVD metrics. Connected docu...

CVE-2023-33078 Buffer Over-read in DSP Services

Information Disclosure while processing IOCTL request in FastRPC...

CVE-2023-33078 Buffer Over-read in DSP Services

Information Disclosure while processing IOCTL request in FastRPC...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from an information disclosure when processing IOCTL requests in FastRPC...

PT-2024-12398 · Fastrpc · Fastrpc

Name of the Vulnerable Software and Affected Versions: FastRPC affected versions not specified Description: The issue is related to Information Disclosure while processing IOCTL request in FastRPC. Recommendations: At the moment, there is no information about a newer version that contains a fix f...

PT-2023-9160 · Qualcomm · Qualcomm Dsp Firmware

Name of the Vulnerable Software and Affected Versions: Qualcomm DSP firmware affected versions not specified Description: The issue is related to a memory corruption problem when invoking IOCTLs calls from user space for internal memory map and unmap operations. This is connected to the use of...

SUSE CVE-2019-2308

User application could potentially make RPC call to the fastrpc driver and the driver will allow the message to go through to the remote subsystem in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150,...

SUSE CVE-2021-28375

An issue was discovered in the Linux kernel through 5.11.6. fastrpcinternalinvoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages, aka CID-20c40794eb85. This is a related issue to CVE-2019-2308...

GSD-2023-1002230 misc: fastrpc: Don't remove map on creater_process and device_release

misc: fastrpc: Don't remove map on createrprocess and devicerelease This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.230 by commit...

GSD-2023-1002228 misc: fastrpc: Fix use-after-free race condition for maps

misc: fastrpc: Fix use-after-free race condition for maps This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.230 by commit...

GSD-2023-1002173 misc: fastrpc: Don't remove map on creater_process and device_release

misc: fastrpc: Don't remove map on createrprocess and devicerelease This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.165 by commit...

GSD-2023-1002172 misc: fastrpc: Fix use-after-free race condition for maps

misc: fastrpc: Fix use-after-free race condition for maps This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.165 by commit...

GSD-2023-1002105 misc: fastrpc: Don't remove map on creater_process and device_release

misc: fastrpc: Don't remove map on createrprocess and devicerelease This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.90 by commit...

GSD-2023-1002104 misc: fastrpc: Fix use-after-free race condition for maps

misc: fastrpc: Fix use-after-free race condition for maps This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.90 by commit...

GSD-2023-1001972 misc: fastrpc: Fix use-after-free and race in fastrpc_map_find

misc: fastrpc: Fix use-after-free and race in fastrpcmapfind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.8 by commit...

GSD-2023-1001971 misc: fastrpc: Don't remove map on creater_process and device_release

misc: fastrpc: Don't remove map on createrprocess and devicerelease This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.8 by commit...