PT-2022-31889

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue is related to the drm/msm/hdmi component, where the return value after calling platform get resource byname is not properly checked. This could potentially lead to security...

GSD-2022-1000650 ASoC: hdmi-codec: Fix OOB memory accesses

ASoC: hdmi-codec: Fix OOB memory accesses This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.8 by commit...

PT-2022-28924

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.8 Description The issue concerns out-of-bounds memory accesses in the hdmi-codec component of the ASoC ALSA System on Chip framework. The actual impact and potential for exploitation have not been fully...

GSD-2022-1000280 ASoC: hdmi-codec: Fix OOB memory accesses

ASoC: hdmi-codec: Fix OOB memory accesses This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.22 by commit...

PT-2022-28558

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.22 Description The issue concerns out-of-bounds memory accesses in the hdmi-codec component of the ASoC ALSA System on Chip framework. The actual impact and potential for attacks have not been fully...

PT-2022-7639

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel's HDMI component, specifically with the unregistering of the codec device when unbinding. This can lead to a device leakage. On bind, the HDMI...

Creston Web Interface 1.0.0.2159 - Credential Disclosure

Exploit Title: Creston Web Interface 1.0.0.2159 - Credential Disclosure Exploit Author: RedTeam Pentesting GmbH Advisory: Credential Disclosure in Web Interface of Crestron Device When the administrative web interface of the Crestron HDMI switcher is accessed unauthenticated, user credentials are...

CVE-2022-23178

An issue was discovered on Crestron HD-MD4X2-4K-E 1.0.0.2159 devices. When the administrative web interface of the HDMI switcher is accessed unauthenticated, user credentials are disclosed that are valid to authenticate to the web interface. Specifically, aj.html sends a JSON document with uname...

CVE-2022-23178

An issue was discovered on Crestron HD-MD4X2-4K-E 1.0.0.2159 devices. When the administrative web interface of the HDMI switcher is accessed unauthenticated, user credentials are disclosed that are valid to authenticate to the web interface. Specifically, aj.html sends a JSON document with uname...

Design/Logic Flaw

An issue was discovered on Crestron HD-MD4X2-4K-E 1.0.0.2159 devices. When the administrative web interface of the HDMI switcher is accessed unauthenticated, user credentials are disclosed that are valid to authenticate to the web interface. Specifically, aj.html sends a JSON document with uname...

Crestron HD-MD4X2-4K-E 1.0.0.2159 Credential Disclosure Vulnerability

Crestron HD-MD4X2-4K-E version 1.0.0.2159 suffers from a credential disclosure vulnerability. When the administrative web interface of the Crestron HDMI switcher is accessed unauthenticated, user credentials are disclosed which are valid to authenticate to the web interface. Credential Disclosure...

GSD-2021-1002817 drm/mediatek: hdmi: Perform NULL pointer check for mtk_hdmi_conf

drm/mediatek: hdmi: Perform NULL pointer check for mtkhdmiconf This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.12 by commit...

PT-2021-27285

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.14 through v5.15.11 Description A potential security issue exists due to a lack of NULL pointer check for mtk hdmi conf in the HDMI driver. The actual impact and attack plausibility have not yet been proven...

Everything You Need to Know About Amazon Fire TV Stick

By Owais Sultan An Amazon fire stick is a device that plugs into the HDMI slot on your TV and looks similar to a USB stick. This is a post from HackRead.com Read the original post: Everything You Need to Know About Amazon Fire TV Stick...

CVE-2021-0096

Improper authentication in the software installer for the IntelR NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN, NUC7i7DN before version 1.78.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33090

Incorrect default permissionsin the software installer for the IntelR NUC HDMI Firmware Update Tool for NUC10i3FN, NUC10i5FN, NUC10i7FN before version 1.78.2.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33090

Incorrect default permissionsin the software installer for the IntelR NUC HDMI Firmware Update Tool for NUC10i3FN, NUC10i5FN, NUC10i7FN before version 1.78.2.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33090

The Intel NUC HDMI Firmware Update Tool for NUC10i3FN/NUC10i5FN/NUC10i7FN contains a vulnerability due to incorrect default permissions in its software installer, which may allow an authenticated local user to escalate privileges. Affected versions are before 1.78.2.0.7; remediation is to update ...

CVE-2021-33089

CVE-2021-33089 affects the Intel NUC HDMI Firmware Update Tool for NUC8i3BE/NUC8i5BE/NUC8i7BE. The root cause is improper access control in the software installer, which may allow an authenticated local user to escalate privileges. Impact is described as privilege escalation with high confidentia...

CVE-2021-33090: Incorrect Default Permissions

Incorrect default permissionsin the software installer for the IntelR NUC HDMI Firmware Update Tool for NUC10i3FN, NUC10i5FN, NUC10i7FN before version 1.78.2.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access...