多款Qualcomm产品缓冲区错误漏洞

The Qualcomm Component is a component of Qualcomm Incorporated USA. An intrinsic part that provides functionality to Qualcomm devices. A buffer error vulnerability exists in Qualcomm products and the following products and versions are affected:APQ8009, APQ8009W, APQ8017, APQ8053, APQ8064AU,...

Google Android资源管理错误漏洞

Google Android is a Linux-based open-source operating system from Google, Inc. A resource management error vulnerability exists in Google Android, which stems from a competitive condition when creating an external display that can be used for free in the display. msm8953, msm8996au, qca4020,...

多款Qualcomm产品安全漏洞

Qualcomm components are Qualcomm product components. It provides the intrinsic components of Qualcomm products. A security vulnerability exists in Qualcomm products that could result in a buffer overflow in voice services due to a lack of input validation of parameters in the QMI Voice API. The...

多款Qualcomm产品缓冲区错误漏洞

The Qualcomm Component is a component of Qualcomm Incorporated USA. Intrinsic component that provides the functionality of Qualcomm devices. A security vulnerability exists in Qualcomm products that could result in out-of-bounds reads in DRM due to incorrect buffer length checks. The following...

多款Qualcomm产品输入验证错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits including primarily semiconductor devices, but also passive components, etc., and from time to time fabricated on the surface of semiconductor wafers. An input validation error vulnerability exists in Qualcomm...

Google Android安全漏洞

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in Google Android, which originates from the fact that while waiting for a response to a callback or listener request, a non-secure client can change the privileges ...

Qualcomm 组件缓冲区错误漏洞

The Qualcomm Component is a component of Qualcomm Incorporated USA. The intrinsic parts that provide the functionality of Qualcomm devices. A buffer error vulnerability exists in the Qualcomm component that stems from the fact that when processing server certificates from an IPSec server,...

PT-2021-7402 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions affected versions not specified Description: The issue is related to a denial of service in the WLAN HOST component due to a buffer over-read while unpacking frames. This can be exploited by a remote attacker to...

USN-4979-1: Linux kernel vulnerabilities

Kiyin 尹亮 discovered that the NFC LLCP protocol implementation in the Linux kernel contained a reference counting error. A local attacker could use this to cause a denial of service system crash. CVE-2020-25670 Kiyin 尹亮 discovered that the NFC LLCP protocol implementation in the Linux kernel did n...

4 Android Bugs Being Exploited in the Wild

Google updated its May 3 Android security bulletin on Wednesday to say that there are “indications” that four of the 50 vulnerabilities “may be under limited, targeted exploitation.” That was mostly confirmed by Maddie Stone, a member of Google’s Project Zero exploit research group, who clarified...

Android Issues Patches for 4 New Zero-Day Bugs Exploited in the Wild

Google on Wednesday updated its May 2021 Android Security Bulletin to disclose that four of the security vulnerabilities that were patched earlier this month by Arm and Qualcomm may have been exploited in the wild as zero-days. "There are indications that CVE-2021-1905, CVE-2021-1906,...

USN-4948-1: Linux kernel (OEM) vulnerabilities

Ryota Shiga discovered that the eBPF implementation in the Linux kernel did not properly verify that a BPF program only reserved as much memory for a ring buffer as was allocated. A local attacker could use this to cause a denial of service system crash or execute arbitrary code. CVE-2021-3489...

USN-4948-1 linux-oem-5.10 vulnerabilities

Ryota Shiga discovered that the eBPF implementation in the Linux kernel did not properly verify that a BPF program only reserved as much memory for a ring buffer as was allocated. A local attacker could use this to cause a denial of service system crash or execute arbitrary code. CVE-2021-3489...

USN-4946-1: Linux kernel vulnerabilities

It was discovered that the DRM subsystem in the Linux kernel contained double-free vulnerabilities. A privileged attacker could possibly use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2021-20292 Olivier Benjamin, Norbert Manthey, Martin Mazein, and Jan ...

Qualcomm Chipsets 输入验证错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc., and is often manufactured on the surface of semiconductor wafers. The Qualcomm chip is vulnerable to an input validation error. An attacker...

PT-2024-11200 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A reference leak issue has been identified in the Linux kernel, specifically in the interconnect: qcom: bcm-voter component. The problem arises from a missing of node put call in the o...

Speculative Execution and Indirect Branch Prediction Side Channel Analysis Method

Summary: Updated Recommendations Section 04/04/2018 Today a team of security researchers disclosed several software analysis methods that, when used for malicious purposes, have the potential to improperly gather sensitive data from many types of computing devices with many different vendors’...

Qualcomm Chipsets 输入验证错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc., and is often manufactured on the surface of semiconductor wafers. An input validation error vulnerability exists in Qualcomm chips. The...

多款Qualcomm产品授权问题漏洞

NetBSD is an open source Unix-like operating system from the NetBSD Netbsd Foundation. A security vulnerability exists in NetBSD version 7.1. An attacker could exploit this vulnerability to cause a denial of service to a program...

A week in security (May 3 – 9)

Last week on Malwarebytes Labs, we discussed how Spectre attacks have come back from the dead; why Facebook banned Instragram ads by Signal; we highlighted the differences between the most popular VPN protocols; pointed out that Google is about to start automatically enrolling users in two-step...