8734 matches found
CVE-2024-23378
Memory corruption while invoking IOCTL calls for MSM module from the user space during audio playback and record...
CVE-2024-23376
Memory corruption while sending the persist buffer command packet from the user-space to the kernel space through the IOCTL call...
CVE-2024-21455
Memory corruption when a compat IOCTL call is followed by another IOCTL call from userspace to a driver...
CVE-2024-23370
Memory corruption when a process invokes IOCTL calls from user-space to create a HAB virtual channel and another process invokes IOCTL calls to destroy the same...
CVE-2024-23378 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio
Memory corruption while invoking IOCTL calls for MSM module from the user space during audio playback and record...
CVE-2024-23376 Use After Free in ComputerVision
Memory corruption while sending the persist buffer command packet from the user-space to the kernel space through the IOCTL call...
CVE-2024-23376
CVE-2024-23376 involves memory corruption while sending the persist buffer IOCTL from user-space to kernel space in Qualcomm-related components (notably Qualcomm Snapdragon Auto). The issue is described as a memory corruption (also characterized as a use-after-free in some feeds) affecting the pe...
CVE-2024-23376 Use After Free in ComputerVision
Memory corruption while sending the persist buffer command packet from the user-space to the kernel space through the IOCTL call...
CVE-2024-21455 Untrusted Pointer Dereference in DSP Service
Memory corruption when a compat IOCTL call is followed by another IOCTL call from userspace to a driver...
CVE-2024-21455
CVE-2024-21455 is a memory corruption issue in Qualcomm’s adsprpc DSP driver exposed to user space via compat IOCTL handling. The root cause involves 32‑bit compatibility handling where a global is_compat flag is set on a file descriptor and later misinterprets a 64‑bit userland request as a 32‑b...
CVE-2024-23376: Use After Free
Memory corruption while sending the persist buffer command packet from the user-space to the kernel space through the IOCTL call...
PT-2024-19853
Name of the Vulnerable Software and Affected Versions MSM module affected versions not specified Description The issue involves memory corruption when invoking IOCTL calls for the MSM module from user space during audio playback and record. This occurs due to improper handling of IOCTL calls,...
PT-2024-18880 · Qualcomm · Snapdragon +19
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption that occurs when a compat IOCTL call is followed by another IOCTL call from userspace to a driver. This can lead to...
CVE-2024-23378: Buffer Copy without Checking Size of Input
Memory corruption while invoking IOCTL calls for MSM module from the user space during audio playback and record...
CVE-2024-23370: Use After Free
Memory corruption when a process invokes IOCTL calls from user-space to create a HAB virtual channel and another process invokes IOCTL calls to destroy the same...
CVE-2024-21455: Untrusted Pointer Dereference
Memory corruption when a compat IOCTL call is followed by another IOCTL call from userspace to a driver...
Exploit for Use After Free in Linux Linux_Kernel
RU GenIoURingExploit is a PoC exploit targeting a specific...
PT-2024-8234
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the xe vm create ioctl function in the drivers/gpu/drm/xe/xe vm.c module of the Linux kernel, which is associated with the reuse of previously freed memory. An...
CVE-2024-8159: Out-of-bounds Read
Deep Freeze 9.00.020.5760 is vulnerable to an out-of-bounds read vulnerability by triggering the 0x70014 IOCTL code of the FarDisk.sys driver...
CVE-2024-46837
In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Restrict high priorities on groupcreate We were allowing any users to create a high priority group without any permission checks. As a result, this was allowing possible denial of service. We now only allow the DRM...