CVE-2024-43050 Stack-based Buffer Overflow in WLAN Windows Host

Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver...

CVE-2024-43049

CVE-2024-43049 describes memory corruption when user-space IOCTLs attempt to set a generic private command in a WLAN driver. The issue is reported across multiple feeds (NVD/Red Hat/CIRCL) and centers on the IOCTL path in the WLAN driver, with a high impact in CVSS terms (Local access, Low comple...

CVE-2024-43049 Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Windows Host

Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver...

CVE-2024-43049 Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Windows Host

Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver...

CVE-2024-33040

CVE-2024-33040 corresponds to a memory corruption issue reported in Qualcomm camera driver code, caused by a race condition between releasing a user-space buffer and subsequent kernel-space access due to a redundant release command. Affected component is a camera driver (Qualcomm chipset context)...

CVE-2024-33040 Use After Free in Camera Driver

Memory corruption while invoking redundant release command to release one buffer from user space as race condition can occur in kernel space between buffer release and buffer access...

CVE-2024-33036

CVE-2024-33036: Memory corruption in Qualcomm camera driver parsing sensor packets. The root cause is using a user-space variable during kernel memory allocation/parsing, which can trigger large allocations or invalid memory access. Documented impact is memory corruption with potential out-of-bou...

CVE-2024-33036 Use of Out-of-range Pointer Offset in Camera Driver

Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to huge allocation or invalid memory access...

CVE-2024-33040: Use After Free

Memory corruption while invoking redundant release command to release one buffer from user space as race condition can occur in kernel space between buffer release and buffer access...

PT-2024-30275 · Qualcomm · Qualcomm Windows Wlan Host

Name of the Vulnerable Software and Affected Versions: Qualcomm Windows WLAN Host affected versions not specified Description: The issue involves memory corruption that occurs when invoking IOCTL calls from user space to read diagnostic information of the target WLAN. This corruption happens due ...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets, which stems from the presence of a redundant release command when freeing a buffer in user space, which could trigger a race condition in kernel space, resulting in...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates when calling IOCTL calls from user space to set generic private commands in the WLAN driver, which may result in memory corruption if these commands are...

PT-2024-25081 · Qualcomm · Qualcomm Snapdragon Auto To Xr2 5G Platform

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto to XR2 5G Platform affected versions not specified Description: The issue involves memory corruption when analyzing sensor packets in the camera driver. A user-space variable is used while allocating memory in the...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets, which stems from a possible memory corruption when parsing sensor packets from a camera driver, if user-space variables are used for kernel-space memory allocation and...

PT-2024-30273 · Unknown · Wlan Driver

Name of the Vulnerable Software and Affected Versions: WLAN driver affected versions not specified Description: The issue involves memory corruption when invoking IOCTL calls from user space to issue a factory test command inside the WLAN driver. This can lead to unintended consequences. The...

CVE-2024-11695

A spoofing vulnerability exists in Mozilla Firefox and Thunderbird products. A crafted URL containing Arabic script and whitespace characters can hide the true origin of a page, potentially enabling spoofing attacks . This issue affects Firefox versions < 133 (and ESR < 128.5 ) and Thunderb...

CVE-2024-53098 drm/xe/ufence: Prefetch ufence addr to catch bogus address

In the Linux kernel, the following vulnerability has been resolved: drm/xe/ufence: Prefetch ufence addr to catch bogus address accessok only checks for addr overflow so also try to read the addr to catch invalid addr sent from userspace. cherry picked from commit...

CVE-2024-11498 Resource exhaustion via Stack overflow in libjxl

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space up to 256mb is possible, maybe 512mb, potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend...

Astra Linux – Vulnerability in GhostScript

A issue was discovered in psi/zcolor.c in Artifex Ghostscript prior to version 10.04.0. An unchecked Implementation pointer in the Pattern color space could lead to arbitrary code execution...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: For TCP sockets with the TCPSYNRECV status, the function shutdownSENDSHUTDOWN is delayed. The TCPSYNRECV state is actually special; it is only used by cross-syn connections, and is mostly exploited by attackers. In the following...