IOFireWireAVC Kernel Privilege Escalation

The vulnerability of the IOFireWireAVC component in the Mac OS X operating system is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability allows an attacker to execute arbitrary code with kernel privileges through a specially created...

PT-2018-3493

Name of the Vulnerable Software and Affected Versions: 389-ds-base versions prior to 1.4.0.10 389-ds-base versions prior to 1.3.8.3 Description: The issue is caused by errors in synchronization when using a shared resource, potentially allowing a remote attacker to cause a denial of service. An...

WebRTC Component Race Condition

The vulnerability of the WebRTC component in Google Chrome arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow a malicious actor to induce a race condition through a specially crafted HTML page...

Android CAF Memory Use After Free

The vulnerability of Android operating system memory handlers and free functions from the CAF repository stems from synchronization errors when using shared resources. Exploiting this vulnerability allows a remote attacker to trigger the use of memory after it has been freed...

PT-2017-3826

Name of the Vulnerable Software and Affected Versions Android versions 7.0, 7.1.1, 7.1.2 Description The issue is caused by synchronization errors when using a shared resource in the libgui library of the Android operating system. This allows a remote attacker to potentially elevate their...

android sound driver ioctl handler Freeze

The vulnerability of the Android operating system’s sound driver ioctl handler arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow a malicious actor to cause the device to become unresponsive or to fail to function properly...

Secure Display Component Modification

The vulnerability of the Secure Display component in the Android operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to modify the shared resource...

TimeZone Component General Resource Modification

The vulnerability of the TimeZone component’s software interface in the Android operating system arises from synchronization errors when using a common resource. Exploiting this vulnerability allows a remote attacker to modify the common resource...

Android EFS Decoding

The vulnerability of the embedded file system EFS of the Android operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can enable a malicious actor to simplify the process of decoding messages remotely...

TrustZone Decoding

The vulnerability of the TrustZone component in the Android operating system arises due to synchronization errors when using shared resources. Exploiting this vulnerability can enable a remote attacker to simplify the process of decoding messages...

CAF repository Android Freeze

The vulnerability of the CAF repository in the Android operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause the device to become unresponsive in a “hang” state by utilizing the...

Qualcomm TrustZone Data Compromise

The vulnerability of the TrustZone technology’s authentication mode for Qualcomm Secure Execution Environment for Android, as found in the CAF repository, stems from synchronization errors when using a common resource. Exploiting this vulnerability could allow an attacker operating remotely to...

PT-2017-3959

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions MDM9150 through MDM9650 Qualcomm Snapdragon Compute versions MDM9150 through MDM9650 Qualcomm Snapdragon Consumer IOT versions MDM9150 through MDM9650 Qualcomm Snapdragon Industrial IOT versions MDM9150 throug...

QEMU Privilege Escalation

The vulnerability of the QEMU hardware emulation software arises from synchronization errors when using a shared resource. Exploiting this vulnerability can allow a remote attacker to cause service failures or increase their privileges in the guest operating system...

OpenSSL DoS

The vulnerability in the ssl/s3clnt.c function of the OpenSSL library arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a malicious actor to trigger a service denial game-of-thrones behavior and subsequent release by using a specially created...

Cisco IOS VFR DoS

The vulnerability of the VFR function in the Cisco IOS operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Firefox Code Execution

The vulnerability of the WorkerPrivate::NotifyFeatures function in the Firefox browser is caused by synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure due to errors in the implementation ...

Cisco IOS DoS

The vulnerability of the PRE module in the Cisco IOS operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a malicious actor to cause service failure by initiating frequent connections to devices via the IPv6 protocol...

Cisco IOS DoS

The vulnerability of the PRE module in the Cisco IOS operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a malicious actor to cause service failure by sending specially crafted MPLS 6VPE packets remotely...

PT-2015-3447 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw was found in the subsequent get user pages fast in the Linux kernel’s interface for symmetric key cipher algorithms in the skcipher recvmsg of crypto/algif skcipher.c function...