NVIDIA TLK input validation error vulnerability

Nvidia NVIDIA TLK is a scheduler from Nvidia Corporation of America for use with Trusted Firmware-A TF-A. NVIDIA TLK suffers from an Input Validation Error vulnerability that stems from Trusty TLK containing a vulnerability in the NVIDIA TLK kernel function, where a missing check allows...

Nvidia NVIDIA TLK buffer error vulnerability

Nvidia NVIDIA TLK is a scheduler from Nvidia Corporation, USA, for use with Trusted Firmware-A TF-A. A security vulnerability exists in NVIDIA TLK, which stems from Trusty TLK contains a vulnerability in the NVIDIA TLK kernel function, where a missing check allows exploitation of an integer...

Chrome SandboxedUnpacker Unsafe Shared Memory Use Vulnerability

Chrome: SandboxedUnpacker unsafe use of shared memory. If we look at the mojo interface gzipper.mojom services/datadecoder/public/mojom/gzipper.mojom: // An interface that lets callers compress and uncompress data using gzip. interface Gzipper // Compresses |data| using gzip and returns it as...

CVE-2020-11298

While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared memory buffers used by HLOS Invoke Call to secure kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...

Design/Logic Flaw

While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared memory buffers used by HLOS Invoke Call to secure kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...

CVE-2020-11298

While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared memory buffers used by HLOS Invoke Call to secure kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...

CVE-2020-11298: Time-of-check Time-of-use (TOCTOU) Race Condition

While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared memory buffers used by HLOS Invoke Call to secure kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...

PT-2021-9306

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon affected versions not specified Description The issue allows non-secure clients to change permissions to shared memory buffers used by HLOS Invoke Call to secure kernel while waiting for a response to a callback or listener...

Google Android security vulnerabilities

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in Google Android, which originates from the fact that while waiting for a response to a callback or listener request, a non-secure client can change the privileges ...

Huawei EulerOS: Security Advisory for mesa (EulerOS-SA-2021-1817)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP3 : mesa (EulerOS-SA-2021-1817)

According to the version of the mesa packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2. An attacker can access the...

CVE-2021-1085

NVIDIA vGPU driver contains a vulnerability in the Virtual GPU Manager vGPU plugin, where there is the potential to write to a shared memory location and manipulate the data after the data has been validated, which may lead to denial of service and escalation of privileges and information...

CVE-2021-1085

NVIDIA vGPU driver contains a vulnerability in the Virtual GPU Manager vGPU plugin, where there is the potential to write to a shared memory location and manipulate the data after the data has been validated, which may lead to denial of service and escalation of privileges and information...

Nvidia Virtual GPU Manager has a input validation error vulnerability

Nvidia NVIDIA Virtual GPU Manager is an NVIDIA virtual GPU management software from Nvidia. An input validation error vulnerability exists in Virtual GPU Manager that originates from writing to a shared memory location and manipulating the data after validating it, which could result in a denial ...

PT-2021-13481

Name of the Vulnerable Software and Affected Versions NVIDIA vGPU driver versions 8.x through 8.6 NVIDIA vGPU driver versions 11.x through 11.3 NVIDIA vGPU driver versions 12.x through 12.1 Description The NVIDIA vGPU driver contains a vulnerability in the Virtual GPU Manager vGPU plugin, where...

CVE-2021-29626

In FreeBSD 13.0-STABLE before n245117, 12.2-STABLE before r369551, 11.4-STABLE before r369559, 13.0-RC5 before p1, 12.2-RELEASE before p6, and 11.4-RELEASE before p9, copy-on-write logic failed to invalidate shared memory page mappings between multiple processes allowing an unprivileged process t...

CVE-2021-29626

In FreeBSD 13.0-STABLE before n245117, 12.2-STABLE before r369551, 11.4-STABLE before r369559, 13.0-RC5 before p1, 12.2-RELEASE before p6, and 11.4-RELEASE before p9, copy-on-write logic failed to invalidate shared memory page mappings between multiple processes allowing an unprivileged process t...

CVE-2021-29626

In FreeBSD 13.0-STABLE before n245117, 12.2-STABLE before r369551, 11.4-STABLE before r369559, 13.0-RC5 before p1, 12.2-RELEASE before p6, and 11.4-RELEASE before p9, copy-on-write logic failed to invalidate shared memory page mappings between multiple processes allowing an unprivileged process t...

Code injection

In FreeBSD 13.0-STABLE before n245117, 12.2-STABLE before r369551, 11.4-STABLE before r369559, 13.0-RC5 before p1, 12.2-RELEASE before p6, and 11.4-RELEASE before p9, copy-on-write logic failed to invalidate shared memory page mappings between multiple processes allowing an unprivileged process t...

CVE-2021-29626

In FreeBSD 13.0-STABLE before n245117, 12.2-STABLE before r369551, 11.4-STABLE before r369559, 13.0-RC5 before p1, 12.2-RELEASE before p6, and 11.4-RELEASE before p9, copy-on-write logic failed to invalidate shared memory page mappings between multiple processes allowing an unprivileged process t...