Remote code execution

An issue was discovered in Devid Espenschied PC Analyser through 4.10. The PCADRVX64.SYS kernel driver exposes IOCTL functionality that allows low-privilege users to read and write arbitrary physical memory. This could lead to arbitrary Ring-0 code execution and escalation of privileges...

CVE-2020-28921: Undefined Security Weakness

An issue was discovered in Devid Espenschied PC Analyser through 4.10. The PCADRVX64.SYS kernel driver exposes IOCTL functionality that allows low-privilege users to read and write to arbitrary Model Specific Registers MSRs. This could lead to arbitrary Ring-0 code execution and escalation of...

CVE-2020-28922: Undefined Security Weakness

An issue was discovered in Devid Espenschied PC Analyser through 4.10. The PCADRVX64.SYS kernel driver exposes IOCTL functionality that allows low-privilege users to read and write arbitrary physical memory. This could lead to arbitrary Ring-0 code execution and escalation of privileges...

PT-2020-17055

Name of the Vulnerable Software and Affected Versions Devid Espenschied PC Analyser versions through 4.10 Description An issue was discovered that allows low-privilege users to read and write arbitrary physical memory due to the exposure of IOCTL functionality by the PCADRVX64.SYS kernel driver...

Devid Espenschied PC Analyser License Issue Vulnerability

Devid Espenschied Devid Espenschied PC Analyser is a software for diagnostics, stress testing, and configuration comparison of PC systems from Devid Espenschied, Germany. A security vulnerability exists in Devid Espenschied PC Analyser version 4.10 and earlier versions, which stems from the...

Devid Espenschied PC Analyser Security Breach

Devid Espenschied Devid Espenschied PC Analyser is a software for diagnostics, stress testing, and configuration comparison of PC systems from Devid Espenschied, Germany. A security vulnerability exists in Devid Espenschied PC Analyser version 4.10 and earlier versions, which stems from the...

Qualcomm MHI Ring Validation Input Validation Error Vulnerability

MHI Ring Validation is a hardware engine from Qualcomm. MHI Ring Validation suffers from an input validation error vulnerability that stems from the fact that incorrect validation of a ring context obtained from host memory could result in a memory overflow. No detailed vulnerability details are...

CVE-2020-15481

An issue was discovered in PassMark BurnInTest v9.1 Build 1008, OSForensics v7.1 Build 1012, and PerformanceTest v10.0 Build 1008. The kernel driver exposes IOCTL functionality that allows low-privilege users to map arbitrary physical memory into the address space of the calling process. This cou...

CVE-2020-15481

An issue was discovered in PassMark BurnInTest v9.1 Build 1008, OSForensics v7.1 Build 1012, and PerformanceTest v10.0 Build 1008. The kernel driver exposes IOCTL functionality that allows low-privilege users to map arbitrary physical memory into the address space of the calling process. This cou...

Design/Logic Flaw

u'Incorrect validation of ring context fetched from host memory can lead to memory overflow' in Snapdragon Compute, Snapdragon Mobile in QSM8350, SC7180, SDX55, SDX55M, SM6150, SM6250, SM6250P, SM7125, SM7150, SM7150P, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P...

CVE-2020-3632

CVE-2020-3632 affects Qualcomm MHI Ring Validation on Snapdragon Compute and Snapdragon Mobile platforms (QSM8350, SC7180, SDX55/55M, SM6150/6250/6250P/7125/7150/7150P/7250/7250P/8150/8150P/8250/8350/8350P; SXR2130/2130P). The root cause is incorrect validation of a ring context fetched from host...

PT-2020-17600

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions affected versions not specified, specifically in chipsets QSM8350, SC7180, SDX55, SDX55M, SM6150, SM6250, SM6250P, SM7125, SM7150, SM7150P, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR213...

Amazon's Latest Gimmicks Are Pushing the Limits of Privacy

Privacy advocates warn that the Ring Always Home Cam and Amazon One both normalize aggressive new forms of data collection...

CVE-2020-14375

A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. Virtio ring descriptors, and the data they describe are in a region of memory accessible by from both the virtual machine and the host. An attacker in a VM can change the contents of the memory after vhostcrypto has validate...

CVE-2020-14375

A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. Virtio ring descriptors, and the data they describe are in a region of memory accessible by from both the virtual machine and the host. An attacker in a VM can change the contents of the memory after vhostcrypto has validate...

Design/Logic Flaw

A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. Virtio ring descriptors, and the data they describe are in a region of memory accessible by from both the virtual machine and the host. An attacker in a VM can change the contents of the memory after vhostcrypto has validate...

CVE-2020-14375

A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. Virtio ring descriptors, and the data they describe are in a region of memory accessible by from both the virtual machine and the host. An attacker in a VM can change the contents of the memory after vhostcrypto has validate...

PT-2020-13986

Name of the Vulnerable Software and Affected Versions dpdk versions prior to 18.11.10 dpdk versions prior to 19.11.5 Description A flaw was found in dpdk where virtio ring descriptors and the data they describe are in a region of memory accessible by both the virtual machine and the host. An...

[SECURITY] Fedora 33 Update: jctools-3.1.0-1.fc33

This project aims to offer some concurrent data structures currently missing from the JDK: =EF=BF=BD=EF=BF=BD SPSC/MPSC/SPMC/MPMC Bounded lock free queues =EF=BF=BD=EF=BF=BD SPSC/MPSC Unbounded lock free queues =EF=BF=BD=EF=BF=BD Alternative interfaces for queues =EF=BF=BD=EF=BF=BD Offheap...

FBI: Ring Smart Doorbells Could Sabotage Cops

The FBI is worried that Ring doorbell owners can use footage collected from their smart devices to keep tabs on police, newly uncovered documents show. The documents – a 2019 Technical Analysis Bulletin from the FBI – was spotted by The Intercept in the BlueLeaks database, a trove of 270 gigabyte...