278 matches found
PT-2022-4682 · Intel · Intel Sps
Name of the Vulnerable Software and Affected Versions: IntelR SPS versions prior to SPS E3 04.08.04.330.0 IntelR SPS versions prior to SPS E3 04.01.04.530.0 Description: The issue is related to incomplete cleanup in a firmware subsystem, which may allow a privileged user to potentially enable...
CVE-2021-39665
In checkSpsUpdated of AAVCAssembler.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12Android I...
CVE-2021-0060
Insufficient compartmentalization in HECI subsystem for the IntelR SPS before versions SPSE504.01.04.516.0, SPSE504.04.04.033.0, SPSE504.04.03.281.0, SPSE503.01.03.116.0, SPSE305.01.04.309.0, SPS02.04.00.101.0, SPSSoC-A05.00.03.114.0, SPSSoC-X04.00.04.326.0, SPSSoC-X03.00.03.117.0,...
CVE-2021-0060
Insufficient compartmentalization in HECI subsystem for the IntelR SPS before versions SPSE504.01.04.516.0, SPSE504.04.04.033.0, SPSE504.04.03.281.0, SPSE503.01.03.116.0, SPSE305.01.04.309.0, SPS02.04.00.101.0, SPSSoC-A05.00.03.114.0, SPSSoC-X04.00.04.326.0, SPSSoC-X03.00.03.117.0,...
CVE-2021-0060
Insufficient compartmentalization in HECI subsystem for the IntelR SPS before versions SPSE504.01.04.516.0, SPSE504.04.04.033.0, SPSE504.04.03.281.0, SPSE503.01.03.116.0, SPSE305.01.04.309.0, SPS02.04.00.101.0, SPSSoC-A05.00.03.114.0, SPSSoC-X04.00.04.326.0, SPSSoC-X03.00.03.117.0,...
CVE-2021-0060
CVE-2021-0060 affects Intel Chipset Firmware’s Server Platform Services (SPS) HECI, where insufficient compartmentalization could let an authenticated user escalate privileges with physical access. Affected products include Intel SPS firmwares, before versions SPS_E5_04.01.04.516.0, SPS_E5_04.04....
2021.2 IPU – Intel® Chipset Firmware Advisory
Summary: Potential security vulnerabilities in some Intel® Chipset Firmware in Intel® Server Platform Services SPS, Intel® Active Management Technology AMT and the Intel Power Management Controller PMC may allow escalation of privilege or denial of service. Intel is releasing firmware updates to...
CVE-2021-35346
tsMuxer v2.6.16 was discovered to contain a heap-based buffer overflow via the function HevcSpsUnit::shorttermrefpicsetint in hevc.cpp...
PT-2021-7714 · Libde265 +3 · Libde265 +3
Name of the Vulnerable Software and Affected Versions: libde265 version 1.0.8 Description: The issue is related to the insufficient use of the assert function in the sps.cc component of the libde265 h.265 video codec implementation. This can be exploited by a remote attacker using a specially...
CVE-2021-0051
Improper input validation in the IntelR SPS versions before SPSE504.04.04.023.0, SPSE504.04.03.228.0 or SPSSoC-A05.00.03.098.0 may allow a privileged user to potentially enable denial of service via local access...
CVE-2021-0051
Improper input validation in the IntelR SPS versions before SPSE504.04.04.023.0, SPSE504.04.03.228.0 or SPSSoC-A05.00.03.098.0 may allow a privileged user to potentially enable denial of service via local access...
Input validation
Improper input validation in the IntelR SPS versions before SPSE504.04.04.023.0, SPSE504.04.03.228.0 or SPSSoC-A05.00.03.098.0 may allow a privileged user to potentially enable denial of service via local access...
CVE-2020-24509
Insufficient control flow management in subsystem in IntelR SPS versions before SPSE305.01.04.300.0, SPSSoC-A05.00.03.091.0, SPSE504.04.04.023.0, or SPSE504.04.03.263.0 may allow a privileged user to potentially enable escalation of privilege via local access...
Design/Logic Flaw
Insufficient control flow management in subsystem in IntelR SPS versions before SPSE305.01.04.300.0, SPSSoC-A05.00.03.091.0, SPSE504.04.04.023.0, or SPSE504.04.03.263.0 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2020-24509
Insufficient control flow management in subsystem in IntelR SPS versions before SPSE305.01.04.300.0, SPSSoC-A05.00.03.091.0, SPSE504.04.04.023.0, or SPSE504.04.03.263.0 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2021-0051
Intel SPS (Server Platform Services) contains an input-validation flaw that can allow a local, privileged user to cause a denial of service. Affected versions are SPS_E5_04.04.04.023.0 and SPS_E5_04.04.03.228.0 for Intel C620A-series chipsets, and SPS_SoC-A_05.00.03.098.0 for the Atom P5000 serie...
CVE-2021-0051
Improper input validation in the IntelR SPS versions before SPSE504.04.04.023.0, SPSE504.04.03.228.0 or SPSSoC-A05.00.03.098.0 may allow a privileged user to potentially enable denial of service via local access...
CVE-2020-24509
Insufficient control flow management in subsystem in IntelR SPS versions before SPSE305.01.04.300.0, SPSSoC-A05.00.03.091.0, SPSE504.04.04.023.0, or SPSE504.04.03.263.0 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2020-24509
Intel CSMe/SPS/LMS vulnerability CVE-2020-24509: Insufficient control flow management in the SPS subsystem can allow a privileged user to escalate privileges via local access. Affected SPS versions include SPS_E3_05.01.04.300.0, SPS_SoC-A_05.00.03.091.0, SPS_E5_04.04.04.023.0, and SPS_E5_04.04.03...
