CVE-2024-11586

Ubuntu's implementation of pulseaudio can be crashed by a malicious program if a bluetooth headset is connected...

UBUNTU-CVE-2024-11586

Ubuntu's implementation of pulseaudio can be crashed by a malicious program if a bluetooth headset is connected...

CVE-2024-11586

CVE-2024-11586 affects Ubuntu’s pulseaudio: a malicious program can crash the PulseAudio process when a Bluetooth headset is connected. The available documentation specifies local access with high user interaction and high privileges required, and states the impact as an availability loss (crash)...

CVE-2024-11586

Ubuntu's implementation of pulseaudio can be crashed by a malicious program if a bluetooth headset is connected...

CVE-2024-11586

Ubuntu's implementation of pulseaudio can be crashed by a malicious program if a bluetooth headset is connected...

CVE-2024-11586

Ubuntu's implementation of pulseaudio can be crashed by a malicious program if a bluetooth headset is connected...

PT-2024-17118 · Canonical · Ubuntu

Name of the Vulnerable Software and Affected Versions: Ubuntu affected versions not specified Description: The issue allows a malicious program to crash Ubuntu's implementation of pulseaudio when a bluetooth headset is connected. Recommendations: At the moment, there is no information about a new...

CVE-2018-9475

In HeadsetInterface::ClccResponse of btifhf.cc, there is a possible out of bounds stack write due to a missing bounds check. This could lead to remote escalation of privilege via Bluetooth, if the recipient has enabled SIP calls with no additional execution privileges needed. User interaction is...

kernel: ASoC: Intel: sof_sdw_rt_sdca_jack_common: ctx->headset_codec_dev = NULL

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdwrtsdcajackcommon: ctx-headsetcodecdev = NULL The Linux kernel CVE team has assigned CVE-2023-52697 to this issue. Upstream advisory:...

SUSE CVE-2023-52697

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdwrtsdcajackcommon: ctx-headsetcodecdev = NULL sofsdwrtsdcajackexit are used by different codecs, and some of them use the same dai name. For example, rt712 and rt713 both use "rt712-sdca-aif1" and...

UBUNTU-CVE-2023-52697

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdwrtsdcajackcommon: ctx-headsetcodecdev = NULL sofsdwrtsdcajackexit are used by different codecs, and some of them use the same dai name. For example, rt712 and rt713 both use "rt712-sdca-aif1" and...

kernel: Linux kernel: Denial of Service in ASoC wcd938x codec due to improper error handling

A flaw was found in the Linux kernel's ASoC wcd938x codec component. This vulnerability stems from improper error handling during the initialization of the Multi-Band Headset Controller MBHC. A local attacker with low privileges could exploit this by triggering a specific sequence of events,...

kernel: ASoC: rt7*-sdw: harden jack_detect_handler

In the Linux kernel, the following vulnerability has been resolved: ASoC: rt7-sdw: harden jackdetecthandler Realtek headset codec drivers typically check if the card is instantiated before proceeding with the jack detection. The rt700, rt711 and rt711-sdca are however missing a check on the card...

Double free

Memory corruption in BTHOST due to double free while music playback and calls over bluetooth headset in Snapdragon Mobile...

Qualcomm BTHOST 资源管理错误漏洞

Qualcomm BTHOST is a Qualcomm component used in Qualcomm products to find Bluetooth hostname and protocol service multiplexer values. A security vulnerability exists in Qualcomm BTHOST that stems from a double memory release during music playback and calls from a Bluetooth headset, resulting in...

CVE-2022-25750

The CVE-2022-25750 entry describes a memory corruption flaw in Qualcomm BTHOST on Snapdragon Mobile caused by a double-free during music playback and Bluetooth headset calls. Affected component: BTHOST within Snapdragon Mobile; root cause: memory management error leading to double free; impact: m...

PT-2022-17491 · Qualcomm · Qualcomm Snapdragon Mobile

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Mobile affected versions not specified Description: The issue is related to memory corruption in BTHOST, caused by a double free error that occurs during music playback and calls over a Bluetooth headset. Recommendations: ...

CVE-2022-25750

Memory corruption in BTHOST due to double free while music playback and calls over bluetooth headset in Snapdragon Mobile...

CVE-2020-36602

There is an out-of-bounds read and write vulnerability in some headset products. An unauthenticated attacker gets the device physically and crafts malformed message with specific parameter and sends the message to the affected products. Due to insufficient validation of message, which may be...

CVE-2020-36602

There is an out-of-bounds read and write vulnerability in some headset products. An unauthenticated attacker gets the device physically and crafts malformed message with specific parameter and sends the message to the affected products. Due to insufficient validation of message, which may be...