CVE-2024-38407 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver...

CVE-2024-38407

CVE-2024-38407 describes a memory corruption vulnerability in the JPEG Encoder driver triggered by processing input parameters for any IOCTL call. The issue is local in scope with high impact to confidentiality, integrity, and availability per CVSS metrics (AV:L, AC:H/L, PR:L, UI:N, S:U, C/H/I/H/...

CVE-2024-38406 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Memory corruption while handling IOCTL calls in JPEG Encoder driver...

CVE-2024-38406 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Memory corruption while handling IOCTL calls in JPEG Encoder driver...

CVE-2024-38406

CVE-2024-38406 affects Qualcomm chipsets and is described as memory corruption when handling IOCTL calls in the JPEG Encoder driver. The NVD entry lists local access with high impact to confidentiality, integrity, and availability, with exploitation status not provided. Other connected records re...

CVE-2024-33033 Use After Free in ComputerVision

Memory corruption while processing IOCTL calls to unmap the buffers...

CVE-2024-33033 Use After Free in ComputerVision

Memory corruption while processing IOCTL calls to unmap the buffers...

CVE-2024-33033

CVE-2024-33033 is a memory corruption issue arising during IOCTL processing to unmap buffers in Qualcomm chipsets. Affected component is not explicitly named beyond “unmap the buffers” in IOCTL paths; the entry indicates local attack vector with low complexity and requires low privileges, with no...

CVE-2024-23377 Use of Out-of-range Pointer Offset in ComputerVision

Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver...

CVE-2024-23377 Use of Out-of-range Pointer Offset in ComputerVision

Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver...

CVE-2024-23377

CVE-2024-23377 describes memory corruption when a user-space IOCTL is invoked on Qualcomm EVA driver and the user tampers with the original packet size after system properties have been sent. Connected documents corroborate that the issue affects Qualcomm Snapdragon Compute EVA driver and is expo...

PT-2024-25078

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description A memory corruption issue occurs during IOCTL calls when trying to unmap buffers. This happens while processing IOCTL calls to unmap the buffers...

PT-2024-35550

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to a possible exec queue leak in the exec IOCTL. The issue occurs when the exec IOCTL returns on input errors without...

PT-2024-27985

Name of the Vulnerable Software and Affected Versions JPEG Encoder driver affected versions not specified Description The issue is related to memory corruption when handling IOCTL calls in the JPEG Encoder driver. There is no information provided about the estimated number of potentially affected...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption that occurs when an IOCTL call is invoked from the usage space of an HGSL memory node...

CVE-2024-33033: Use After Free

Memory corruption while processing IOCTL calls to unmap the buffers...

CVE-2024-38419: Use After Free

Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node...

CVE-2024-38407: Time-of-check Time-of-use (TOCTOU) Race Condition

Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver...

CVE-2024-38406: Time-of-check Time-of-use (TOCTOU) Race Condition

Memory corruption while handling IOCTL calls in JPEG Encoder driver...

CVE-2024-23377: Use of Out-of-range Pointer Offset

Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver...