CVE-2024-38406

Memory corruption while handling IOCTL calls in JPEG Encoder driver...

CVE-2024-38407

Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver...

CVE-2024-33033

Memory corruption while processing IOCTL calls to unmap the buffers...

CVE-2024-23377

Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver...

CVE-2024-38419

CVE-2024-38419 corresponds to memory corruption when invoking IOCTL calls from user-space for the HGSL memory node in Qualcomm chipsets. The issue affects a memory node in HGSL, with a local attack vector and low privileges required; exploitation status is not detailed in the provided documents. ...

CVE-2024-38419 Use After Free in Automotive GPU

Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node...

CVE-2024-38419 Use After Free in Automotive GPU

Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node...

CVE-2024-38407

CVE-2024-38407 describes a memory corruption vulnerability in the JPEG Encoder driver triggered by processing input parameters for any IOCTL call. The issue is local in scope with high impact to confidentiality, integrity, and availability per CVSS metrics (AV:L, AC:H/L, PR:L, UI:N, S:U, C/H/I/H/...

CVE-2024-38407 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver...

CVE-2024-38406

CVE-2024-38406 affects Qualcomm chipsets and is described as memory corruption when handling IOCTL calls in the JPEG Encoder driver. The NVD entry lists local access with high impact to confidentiality, integrity, and availability, with exploitation status not provided. Other connected records re...

CVE-2024-38406 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Memory corruption while handling IOCTL calls in JPEG Encoder driver...

CVE-2024-38406 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Memory corruption while handling IOCTL calls in JPEG Encoder driver...

CVE-2024-33033

CVE-2024-33033 is a memory corruption issue arising during IOCTL processing to unmap buffers in Qualcomm chipsets. Affected component is not explicitly named beyond “unmap the buffers” in IOCTL paths; the entry indicates local attack vector with low complexity and requires low privileges, with no...

CVE-2024-33033 Use After Free in ComputerVision

Memory corruption while processing IOCTL calls to unmap the buffers...

CVE-2024-33033 Use After Free in ComputerVision

Memory corruption while processing IOCTL calls to unmap the buffers...

CVE-2024-23377 Use of Out-of-range Pointer Offset in ComputerVision

Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver...

CVE-2024-23377 Use of Out-of-range Pointer Offset in ComputerVision

Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver...

CVE-2024-23377

CVE-2024-23377 describes memory corruption when a user-space IOCTL is invoked on Qualcomm EVA driver and the user tampers with the original packet size after system properties have been sent. Connected documents corroborate that the issue affects Qualcomm Snapdragon Compute EVA driver and is expo...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption that occurs when an IOCTL call is invoked from the usage space of an HGSL memory node...

SUSE-SU-2024:3815-1 Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024111 fixes several issues. The following security issues were fixed: - CVE-2024-35905: Fixed int overflow for stack access size bsc1226327. - CVE-2021-47598: schcake: do not call cakedestroy from cakeinit bsc1227471. - CVE-2024-35863: Fixed potentia...