CVE-2024-45584

CVE-2024-45584 involves memory corruption in Qualcomm chipsets caused by a sequence: a compat IOCTL call followed by a normal IOCTL call from userspace. The vulnerability arises from the call order, potentially allowing memory corruption with local access. Public descriptions consistently state t...

CVE-2024-45584 Untrusted Pointer Dereference in Automotive Android OS

Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace...

CVE-2024-45561 Use After Free in Windows WLAN Host

Memory corruption while handling IOCTL call from user-space to set latency level...

CVE-2024-45561 Use After Free in Windows WLAN Host

Memory corruption while handling IOCTL call from user-space to set latency level...

CVE-2024-45561

CVE-2024-45561 corresponds to a memory corruption issue observed when handling an IOCTL call from user-space to set latency level on Qualcomm chipsets. Affected component/behavior: IOCTL latency-level handling in kernel/user-space interface; root cause described as memory corruption. Impact as st...

CVE-2024-38418

CVE-2024-38418 describes memory corruption occurring when parsing the memory map information in IOCTL calls, affecting Qualcomm chipsets (notably camera/Linux components). The vulnerability stems from parsing memory map data inside an IOCTL path, enabling local exploitation with low privileges an...

CVE-2024-38418 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Linux

Memory corruption while parsing the memory map info in IOCTL calls...

CVE-2024-38418 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Linux

Memory corruption while parsing the memory map info in IOCTL calls...

CVE-2024-38412 Use After Free in Computer Vision

Memory corruption while invoking IOCTL calls from user-space to kernel-space to handle session errors...

CVE-2024-38412 Use After Free in Computer Vision

Memory corruption while invoking IOCTL calls from user-space to kernel-space to handle session errors...

CVE-2024-38412

CVE-2024-38412 is a memory-corruption issue linked to IOCTL handling of session errors in Qualcomm chipsets. Multiple connected sources confirm a kernel-space/ user-space IOCTL path as the root cause, with local access required and high impact to confidentiality, integrity, and availability per C...

CVE-2024-38411 Use After Free in Computer Vision

Memory corruption while registering a buffer from user-space to kernel-space using IOCTL calls...

CVE-2024-38411

CVE-2024-38411 involves memory corruption that occurs when registering a buffer from user-space to kernel-space via an IOCTL call on Qualcomm chipsets. The issue is linked to buffer management during the registration flow, including the path that adds the buffer to in-kernel lists and attempts to...

CVE-2024-38411 Use After Free in Computer Vision

Memory corruption while registering a buffer from user-space to kernel-space using IOCTL calls...

CVE-2024-55411

An issue in the snxpcamd.sys component of SUNIX Multi I/O Card v10.1.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests...

CVE-2024-55410

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-55411

An issue in the snxpcamd.sys component of SUNIX Multi I/O Card v10.1.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests...

CVE-2024-55410

An issue in the 690b33e1-0462-4e84-9bea-c7552b45432a.sys component of Asus GPU Tweak II Program Driver v1.0.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests...

CVE-2024-55411

An issue in the snxpcamd.sys component of SUNIX Multi I/O Card v10.1.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests...

PT-2025-3114 · Sunix · Sunix Parallel Driver X64

Name of the Vulnerable Software and Affected Versions: SUNIX Parallel Driver x64 version 10.1.0.0 Description: A vulnerability exists in the driver snxppamd.sys, allowing low-privileged users to read and write arbitrary I/O ports via specially crafted IOCTL requests. This can be exploited for...