123 matches found
CVE-2024-25986
In ppmpunprotectbuf of drmfw.c, there is a possible compromise of protected memory due to a logic error in the code. This could lead to local escalation of privilege to TEE with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2019-0184
Insufficient access control in protected memory subsystem for IntelR TXT for 6th, 7th, 8th and 9th Generation IntelR CoreTM Processor Families; IntelR XeonR Processor E3-1500 v5 and v6 Families; IntelR XeonR E-2100 and E-2200 Processor Families with IntelR Processor Graphics and IntelR TXT may...
DEBIAN-CVE-2025-21873
In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: bsg: Fix crash when arpmb command fails If the device doesn't support arpmb we'll crash due to copying user data in bsgtransportsgiofn. In the case where ufsbsgexecadvancedrpmbreq returns an error, do not set the...
SAMSUNG eMMC 安全漏洞
SAMSUNG eMMC is a standard for flash memory cards from Samsung South Korea. A security vulnerability exists in SAMSUNG eMMC versions KLMAG2GE4A and KLM8G1WEMB, which originates from a code bypass via electromagnetic fault injection, which allows an attacker to successfully authenticate and write ...
The vulnerability in the Firefox web browser relates to improper handling of memory barriers between protected memory regions. This allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.
The vulnerability in the Firefox web browser is related to improper handling of overlaps between protected memory regions. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...
Google Pixel Security Breach
Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel, which stems from a race condition in the gpupmpowerofftopnolock module of pixelgpupower.c that could compromise protected memory...
Google Pixel Security Breach
Google Pixel is a smartphone from Google, Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from a logic error in the code of the gpupmpowerontopnolock module of pixelgpupower.c that could compromise protected memory...
PUB-A-301669196
In gpupmpowerofftopnolock of pixelgpupower.c, there is a possible compromise of protected memory due to a race condition. This could lead to local escalation of privilege to TEE with no additional execution privileges needed. User interaction is not needed for exploitation...
PUB-A-301657544
In gpupmpowerontopnolock of pixelgpupower.c, there is a possible compromise of protected memory due to a logic error in the code. This could lead to local escalation of privilege to TEE with no additional execution privileges needed. User interaction is not needed for exploitation...
Code injection
In ppmpunprotectbuf of drmfw.c, there is a possible compromise of protected memory due to a logic error in the code. This could lead to local escalation of privilege to TEE with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-25986
In ppmpunprotectbuf of drmfw.c, there is a possible compromise of protected memory due to a logic error in the code. This could lead to local escalation of privilege to TEE with no additional execution privileges needed. User interaction is not needed for exploitation...
PUB-A-297569957
In ppmpunprotectbuf of drmfw.c, there is a possible compromise of protected memory due to a logic error in the code. This could lead to local escalation of privilege to TEE with no additional execution privileges needed. User interaction is not needed for exploitation...
MediaTek products缓冲区错误漏洞
MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in MediaTek, which originates from an out-of-bounds write in rpmb due to a logic error that may result in local privilege escalation. The following products are affected: MT6580, MT673...
PT-2023-12679 · Core · Core
Name of the Vulnerable Software and Affected Versions: Core affected versions not specified Description: The issue is related to an information disclosure due to a cryptographic problem in Core during RPMB read requests. Recommendations: At the moment, there is no information about a newer versio...
MediaTek 芯片缓冲区错误漏洞
MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the rpmb module of the MediaTek chips, which is caused by an out-of-range write due to incorrect boundary checking. This could result in a local privilege escalation that requires system...
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to an operation that allows data to be written beyond the buffer in memory. This allows attackers to gain unauthorized access to protected information.
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 is related to the execution of operations beyond the buffer in memory...
The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.
The vulnerability of Adobe After Effects video and dynamic image editing software relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected memory information in the context of the current user, using a...
NVIDIA Linux GPU Display Driver (February 2022)
The NVIDIA GPU display driver software on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities: - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver, where improper handling of insufficient permissions or privileges ma...
PT-2022-2953 · Amd +8 · Amd Cpus +8
Name of the Vulnerable Software and Affected Versions: AMD CPUs affected versions not specified Description: The issue is related to the LFENCE/JMP module in AMD CPUs, specifically concerning the branch prediction mechanism. This allows an attacker to access protected memory from a program withou...
