35 matches found
CVE-2024-33023 Use After Free in Graphics Linux
Memory corruption while creating a fence to wait on timeline events, and simultaneously signal timeline events...
CVE-2024-23384 Use After Free in Graphics Linux
Memory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker...
The vulnerability of the `get_scaler_data_for_plane()` function in the `drivers/gpu/drm/amd/display/dc/dml2/dml2_translation_helper.c` file, a video driver for AMD cores in the Linux operating system, allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the getscalerdataforplane function in the drivers/gpu/drm/amd/display/dc/dml2/dml2translationhelper.c file, a video driver for AMD cores in the Linux operating system, is related to a numerical overflow vulnerability. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the drm_sched_entity_init() function in the drivers/gpu/drm/scheduler/sched_entity.c file of the Linux operating system’s DRAM driver allows a hacker to compromise the confidentiality and accessibility of the protected information.
The vulnerability of the drmschedentityinit function in the drivers/gpu/drm/scheduler/schedentity.c file of the Linux operating system’s DRM driver is related to insufficient control over buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality an...
CVE-2023-33094 Use After Free in Linux Graphics
Memory corruption while running VK synchronization with KASAN enabled...
CVE-2023-33094 Use After Free in Linux Graphics
Memory corruption while running VK synchronization with KASAN enabled...
PT-2024-12403 · Unknown · Linux Graphics
Name of the Vulnerable Software and Affected Versions: Linux Graphics affected versions not specified Description: The issue is related to memory corruption that occurs while running VK synchronization with KASAN enabled. This problem is also described as a Use-After-Free UAF in Linux Graphics. N...
多款 Qualcomm 产品输入验证错误漏洞
The Qualcomm QCA6574AU is a central processing unit CPU product from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Linux Graphics that stems from a failure to validate page offsets before inserting a page, which could lead to out-of-bounds access. The...
CVE-2012-0952
A heap buffer overflow was discovered in the device control ioctl in the Linux driver for Nvidia graphics cards, which may allow an attacker to overflow 49 bytes. This issue was fixed in version 295.53...
DEBIAN-CVE-2019-0155
Insufficient access control in a subsystem for Intel R processor graphics in 6th, 7th, 8th and 9th Generation IntelR CoreTM Processor Families; IntelR PentiumR Processor J, N, Silver and Gold Series; IntelR CeleronR Processor J, N, G3900 and G4900 Series; IntelR AtomR Processor A and E3900 Series...
CVE-2016-5340
The isashmemfile function in drivers/staging/android/ashmem.c in a certain Qualcomm Innovation Center QuIC Android patch for the Linux kernel 3.x mishandles pointer validation within the KGSL Linux Graphics Module, which allows attackers to bypass intended access restrictions by using the /ashmem...
Null pointer dereference
The isashmemfile function in drivers/staging/android/ashmem.c in a certain Qualcomm Innovation Center QuIC Android patch for the Linux kernel 3.x mishandles pointer validation within the KGSL Linux Graphics Module, which allows attackers to bypass intended access restrictions by using the /ashmem...
CVE-2016-5340
CVE-2016-5340 is tied to a vulnerability in the KGSL Linux Graphics Module exposed by a QuIC Android patch for Linux kernel 3.x. The issue arises from the function is_ashmem_file in drivers/staging/android/ashmem.c, where pointer validation is mishandled. This design flaw can allow an attacker to...
HP HP-Plugin Remote Code Execution Vulnerability
hplip is HP Linux graphics and printing software. A security vulnerability exists in HP-Plugin. Allows an attacker to generate a key using a short ID predicted by the vulnerability to trick a user into downloading a malicious binary to execute arbitrary code in the context of the affected...
