Qualcomm BTHOST 资源管理错误漏洞

Qualcomm BTHOST is a Qualcomm component used in Qualcomm products to find Bluetooth hostname and protocol service multiplexer values. A security vulnerability exists in Qualcomm BTHOST that stems from a double memory release during music playback and calls from a Bluetooth headset, resulting in...

CVE-2022-25750

Memory corruption in BTHOST due to double free while music playback and calls over bluetooth headset in Snapdragon Mobile...

PT-2022-17491 · Qualcomm · Qualcomm Snapdragon Mobile

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Mobile affected versions not specified Description: The issue is related to memory corruption in BTHOST, caused by a double free error that occurs during music playback and calls over a Bluetooth headset. Recommendations: ...

CVE-2022-25750

The CVE-2022-25750 entry describes a memory corruption flaw in Qualcomm BTHOST on Snapdragon Mobile caused by a double-free during music playback and Bluetooth headset calls. Affected component: BTHOST within Snapdragon Mobile; root cause: memory management error leading to double free; impact: m...

CVE-2022-25750: Double Free

Memory corruption in BTHOST due to double free while music playback and calls over bluetooth headset in Snapdragon Mobile...

CVE-2020-36602

There is an out-of-bounds read and write vulnerability in some headset products. An unauthenticated attacker gets the device physically and crafts malformed message with specific parameter and sends the message to the affected products. Due to insufficient validation of message, which may be...

CVE-2020-36602

There is an out-of-bounds read and write vulnerability in some headset products. An unauthenticated attacker gets the device physically and crafts malformed message with specific parameter and sends the message to the affected products. Due to insufficient validation of message, which may be...

CVE-2020-36602

There is an out-of-bounds read and write vulnerability in some headset products. An unauthenticated attacker gets the device physically and crafts malformed message with specific parameter and sends the message to the affected products. Due to insufficient validation of message, which may be...

CVE-2020-36602

CVE-2020-36602 affects Huawei headset products. The vulnerability is an out-of-bounds read and write caused by insufficient validation of certain message parameters in affected firmware. An unauthenticated attacker with physical access can craft a malformed message and send it to the device, pote...

CVE-2020-36602

There is an out-of-bounds read and write vulnerability in some headset products. An unauthenticated attacker gets the device physically and crafts malformed message with specific parameter and sends the message to the affected products. Due to insufficient validation of message, which may be...

CVE-2020-36602: Out-of-bounds Read

There is an out-of-bounds read and write vulnerability in some headset products. An unauthenticated attacker gets the device physically and crafts malformed message with specific parameter and sends the message to the affected products. Due to insufficient validation of message, which may be...

PT-2022-4598 · Huawei · Huawei Headset

Name of the Vulnerable Software and Affected Versions: Huawei headset products affected versions not specified Description: The issue concerns an out-of-bounds read and write vulnerability. An attacker, with physical access to the device, can craft a malformed message with a specific parameter an...

Security Advisory - Out-of-bounds Read and Write Vulnerability in Some Huawei Headset Products

There is an out-of-bounds read and write vulnerability in some headset products. An unauthenticated attacker gets the device physically and crafts malformed message with specific parameter and sends the message to the affected products. Due to insufficient validation of message, which may be...

PT-2025-8550

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been identified where the device properties added for headset codecs are not removed if card registration fails, typically due to deferred probes. This ca...

PT-2025-8549

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, specifically in the ASoC: rt7-sdw module. The issue arises from the lack of a check on the card pointer in the rt700, rt711, and...

A week in security (August 30 – September 5)

Last week on Malwarebytes Labs ProxyToken: another nail-biter from Microsoft Exchange Macs turn on apps signed by Symantec, treat them as malware Google Play sign-ins can be abused to track another person’s movements FTC bans SpyFone and its CEO from continuing to sell stalkerware BrakTooth...

Is it game over for VR advergaming?

We’ve been warning about advergaming—the combination of virtual reality VR and ads—for years on the Labs Blog. I’ve given a few talks on the subject too, and how ad networks will slowly work their way into enclosed spaces formerly reserved for your head. They still might, but thanks to a recent...

SUSE-SU-2020:0836-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15-SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-8647: Fixed a use-after-free in the vcdoresize function in drivers/tty/vt/vt.c bsc1162929. - CVE-2020-8649: Fixed a use-after-free in the...

openSUSE Security Update : the Linux Kernel (openSUSE-2019-2444)

The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2019-16995: A memory leak exits in hsrdevfinalize in net/hsr/hsrdevice.c. if hsraddport fails to add a port, which may cause denial of service, aka CID-6caabe7f197d...

Mind-Reader Headset Transfers Your Thoughts On Screen with 90% Accuracy

By Carolina MIT Media Lab researchers call it AlterEgo headset. Though it sounds This is a post from HackRead.com Read the original post: Mind-Reader Headset Transfers Your Thoughts On Screen with 90% Accuracy...