CVE-2022-32837: Out-of-bounds Write

This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.5, tvOS 15.6, iOS 15.6 and iPadOS 15.6. An app may be able to cause unexpected system termination or write kernel memory...

CVE-2022-32793

CVE-2022-32793 refers to multiple out-of-bounds write issues in Apple GPU drivers that could lead to kernel memory disclosure. The connected Apple advisory notes these issues affect GPU Drivers and are fixed in macOS Monterey 12.5, watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6. The CVSS base s...

PT-2022-6031

Name of the Vulnerable Software and Affected Versions Android SoC versions affected versions not specified Description The issue is related to the PowerVR GPU driver in the Android operating system, which allows unprivileged applications to allocate pinned memory, unpin it, and continue using the...

PT-2022-14364 · Google +1 · Android +1

Name of the Vulnerable Software and Affected Versions: Android SoC versions affected versions not specified Description: The PowerVR GPU driver has an issue where unprivileged apps can allocate pinned memory, unpin it, and continue using the page in GPU calls without requiring any privileges. Thi...

CVE-2022-32793

Multiple out-of-bounds write issues were addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.5, watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6. An app may be able to disclose kernel memory...

USN-5572-1 linux-aws vulnerabilities

Roger Pau Monné discovered that the Xen virtual block driver in the Linux kernel did not properly initialize memory pages to be used for shared communication with the backend. A local attacker could use this to expose sensitive information guest kernel memory. CVE-2022-26365 Roger Pau Monné...

CVE-2022-20239

remappfnrange' here may map out of size kernel memory for example, may map the kernel area, and because the 'vma-vmpageprot' can also be controlled by userspace, so userspace may map the kernel area to be writable, which is easy to be exploitedProduct: AndroidVersions: Android SoCAndroid ID:...

Design/Logic Flaw

remappfnrange' here may map out of size kernel memory for example, may map the kernel area, and because the 'vma-vmpageprot' can also be controlled by userspace, so userspace may map the kernel area to be writable, which is easy to be exploitedProduct: AndroidVersions: Android SoCAndroid ID:...

CVE-2022-20239

CVE-2022-20239 is an Android kernel vulnerability inherited from a memory-mapping flaw in remap_pfn_range that can let userspace map the kernel area as writable. Documents consistently describe the issue as kernel memory mapping in remap_pfn_range, with potential for local/remote-like impact depe...

CVE-2022-20239

remappfnrange' here may map out of size kernel memory for example, may map the kernel area, and because the 'vma-vmpageprot' can also be controlled by userspace, so userspace may map the kernel area to be writable, which is easy to be exploitedProduct: AndroidVersions: Android SoCAndroid ID:...

kernel: kernel info leak issue in pfkey_register

A vulnerability was found in the pfkeyregister function in net/key/afkey.c in the Linux kernel. This flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system crash or a leak of internal kernel information...

PT-2022-14461

Name of the Vulnerable Software and Affected Versions Android versions affected versions not specified Description The issue allows userspace to potentially map the kernel area to be writable, which can be easily exploited. This is because the 'remap pfn range' function may map out of size kernel...

CVE-2022-20239: Externally Controlled Reference to a Resource in Another Sphere

remappfnrange' here may map out of size kernel memory for example, may map the kernel area, and because the 'vma-vmpageprot' can also be controlled by userspace, so userspace may map the kernel area to be writable, which is easy to be exploitedProduct: AndroidVersions: Android SoCAndroid ID:...

AZL-10468 CVE-2022-1012 affecting package kernel for versions less than 5.15.67.1-4

A memory leak problem was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the small table perturb size. This flaw may allow an attacker to information leak and may cause a denial of service problem...

Google Android Code Execution Vulnerability (CNVD-2022-71983)

Google Android is a Linux-based open source operating system from Google, Inc. A code execution vulnerability exists in Google Android, which is caused by kernel memory size mapping in remappfnrange. An attacker could exploit this vulnerability to execute arbitrary code on the system...

DEBIAN-CVE-2022-2652

Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There is also the possibility for DoS due to the v4l2loopback kernel module crashing when providing the card label on request reproduce e.g. with many %s modifiers in a row...

CVE-2022-2652

Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There is also the possibility for DoS due to the v4l2loopback kernel module crashing when providing the card label on request reproduce e.g. with many %s modifiers in a row...

UBUNTU-CVE-2022-2652

Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There is also the possibility for DoS due to the v4l2loopback kernel module crashing when providing the card label on request reproduce e.g. with many %s modifiers in a row...

CVE-2022-2652 Use of Externally-Controlled Format String in umlaeute/v4l2loopback

Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There is also the possibility for DoS due to the v4l2loopback kernel module crashing when providing the card label on request reproduce e.g. with many %s modifiers in a row...

v4l2loopback: Format string error vulnerability

v4l2loopback is a kernel module for creating V4L2 loopback devices by umläute individual developers. A formatting string error vulnerability exists in v4l2loopback, which stems from potentially leaking kernel stack memory based on the way the string is formatted in the card label, as well as...