CVE-2021-30337

Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

Double free

Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

CVE-2021-30337

Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

CVE-2021-30337

CVE-2021-30337 describes a local-use-after-free/double-free vulnerability in Qualcomm/Snapdragon kernel components where process shell memory is freed via an IOCTL during initialization. This can lead to memory corruption with potential impact to confidentiality, integrity, and availability as in...

CVE-2021-30337

Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

PT-2022-10000

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon affected versions not specified Description The issue is related to a possible use after free when the process shell memory is freed using an IOCTL call and process initialization is in progress. This affects various Qualco...

CVE-2021-30337: Use After Free

Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

CVE-2021-44852: Undefined Security Weakness

An issue was discovered in BSRCIO64.sys in Biostar RACING GT Evo 2.1.1905.1700. A low-integrity process can open the driver's device object and issue IOCTLs to read or write to arbitrary physical memory locations or call an arbitrary address, leading to execution of arbitrary code. This is...

PT-2021-8081

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.19.223 Linux kernel versions prior to 5.4.169 Linux kernel versions prior to 5.10.89 Linux kernel versions prior to 5.15 Linux kernel versions prior to 5.15.12 Description The issue is related to the i2c transf...

Unspecified Vulnerability in SUPERAntispyware

SUPERAntispyware is a security program from SUPERAntiSpyware. SUPERAntispyware has a security vulnerability that can be exploited by attackers to arbitrarily write data to the device via IOCTL 0x9C402140...

CVE-2020-22061

SUPERAntispyware v8.0.0.1050 was discovered to contain an issue in the component saskutil64.sys. This issue allows attackers to arbitrarily write data to the device via IOCTL 0x9C402140...

Code injection

SUPERAntispyware v8.0.0.1050 was discovered to contain an issue in the component saskutil64.sys. This issue allows attackers to arbitrarily write data to the device via IOCTL 0x9C402140...

CVE-2020-22061: Undefined Security Weakness

SUPERAntispyware v8.0.0.1050 was discovered to contain an issue in the component saskutil64.sys. This issue allows attackers to arbitrarily write data to the device via IOCTL 0x9C402140...

PT-2021-10723

Name of the Vulnerable Software and Affected Versions SUPERAntispyware version 8.0.0.1050 Description The issue in the saskutil64.sys component allows attackers to arbitrarily write data to the device via IOCTL 0x9C402140. Recommendations For SUPERAntispyware version 8.0.0.1050, consider disablin...

PT-2021-27194

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.10 Description The issue is related to a null pointer access in the msm ioctl gem submit function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2021-27200

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15 through v5.15.10 Description The issue is related to a memory corruption problem in the vduse dev ioctl function. This problem was introduced in version v5.15 and fixed in version v5.15.11. The actual impact and...

PT-2021-6091 · Linux +10 · Linux Kernel +10

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.16 Linux kernel versions 5.15 through 5.15.13 Linux kernel versions 5.10 through 5.10.90 Linux kernel versions 5.4 through 5.4.170 Linux kernel versions 4.19 through 4.19.224 Description: A data leak flaw was...

PT-2021-8140

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The vulnerability is related to the phonet/pep component of the Linux kernel, which incorrectly handles unbound pipes. This can lead to two problems: sending a pipe enablement request wi...

GSD-2021-1002543 ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()

ethtool: ioctl: fix potential NULL deref in ethtoolsetcoalesce This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.6 by commit...

Debian DLA-2843-1 : linux - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2843 advisory. - Use-after-free vulnerability in the Linux kernel exploitable by a local attacker due to reuse of a DCCP socket with an attached dccpshctxccid object as a listene...