9413 matches found
CVE-2021-42252
An issue was discovered in aspeedlpcctrlmmap in drivers/soc/aspeed/aspeed-lpc-ctrl.c in the Linux kernel before 5.14.6. Local attackers able to access the Aspeed LPC control interface could overwrite memory in the kernel and potentially execute privileges, aka CID-b49a0e69a7b1. This occurs becaus...
Linux kernel Information Disclosure
The vulnerability of the Linux operating system’s kernel is related to the exposure of information through incompatibility. Exploiting this vulnerability allows an attacker to read a portion of the kernel’s memory...
Qualcomm chip input verification error vulnerability
A Qualcomm chip is a chip from Qualcomm Incorporated USA. a way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc. and is manufactured from time to time on the surface of semiconductor wafers. An input validation error vulnerability exists in multiple Qualco...
Qualcomm chip input verification error vulnerability
A Qualcomm chip is a chip from Qualcomm Incorporated USA. a way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc. and is manufactured from time to time on the surface of semiconductor wafers. An input validation error vulnerability exists in multiple Qualco...
loop_rw_iter in fs/io_uring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORING_OP_PROVIDE_BUFFERS to trigger a free of a kernel buffer as demonstrated by using /proc/<pid>/maps for exploitation.
...
ASB-A-184622099
In qrtrrecvmsg of qrtr.c, there is a possible leak of kernel memory due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
PUB-A-186337918
In several functions of verifier.c, there is a possible way to disclose kernel memory due to side channel information disclosure. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...
PUB-A-189986136
In tgmdmattinit of tt.c, there is a possible kernel memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
Linux Kernel Memory Read
The vulnerability in the net/can/bcm.c component of the Linux operating system exists due to the lack of initialization for a certain data structure. Exploiting this vulnerability could allow an attacker to read part of the kernel’s memory...
Linux kernel Heap Buffer Overflow Info Disclosure
The vulnerability of the Linux operating system’s kernel is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to read a portion of the kernel’s memory...
Apple macOS Big Sur buffer error vulnerability
Apple macOS Big Sur is a mobile application app from Apple USA. A security vulnerability exists in Apple macOS Big Sur, which can be exploited by local users to read kernel memory...
PT-2021-18908
Name of the Vulnerable Software and Affected Versions macOS Big Sur versions prior to 11.6 Description An out-of-bounds read issue was addressed with improved bounds checking, which may allow a local user to read kernel memory. Recommendations For macOS Big Sur versions prior to 11.6, update to...
CVE-2021-25457
An improper input validation vulnerability in DSP driver prior to SMR Sep-2021 Release 1 allows local attackers to get a limited kernel memory information...
CVE-2021-25457
An improper input validation vulnerability in DSP driver prior to SMR Sep-2021 Release 1 allows local attackers to get a limited kernel memory information...
Input validation
An improper input validation vulnerability in DSP driver prior to SMR Sep-2021 Release 1 allows local attackers to get a limited kernel memory information...
CVE-2021-25457
An improper input validation vulnerability in DSP driver prior to SMR Sep-2021 Release 1 allows local attackers to get a limited kernel memory information...
CVE-2021-25457
An improper input validation vulnerability in DSP driver prior to SMR Sep-2021 Release 1 allows local attackers to get a limited kernel memory information...
CVE-2021-25457
The CVE-2021-25457 report concerns a vulnerability in Samsung’s DSP driver prior to the SMR September 2021 Release 1. The issue is an improper input validation that allows a local attacker to obtain a limited amount of kernel memory information, affecting kernel memory confidentiality. Affected c...
CVE-2021-25457: Improper Input Validation
An improper input validation vulnerability in DSP driver prior to SMR Sep-2021 Release 1 allows local attackers to get a limited kernel memory information...
PT-2021-16647
Name of the Vulnerable Software and Affected Versions: DSP driver versions prior to SMR Sep-2021 Release 1 Description: The issue is related to an improper input validation vulnerability. This allows local attackers to obtain limited kernel memory information. Recommendations: For versions prior ...