Lucene search
+L

744 matches found

CVE
CVE
•added 2024/08/13 4:50 p.m.•63 views

CVE-2021-46746

CVE-2021-46746 : The AMD ASP/TEE stack protection gap allows a privileged attacker with access to AMD signing keys to corrupt the return address via a stack-based buffer overrun, potentially causing a denial of service. This aligns with AMD’s CVE entry (base score 5.2, local access, high attack c...

5.2CVSS7.2AI score0.00154EPSS
SaveExploits0References1
NVD
NVD
•added 2024/07/01 3:15 p.m.•39 views

CVE-2024-21469

Memory corruption when an invoke call and a TEE call are bound for the same trusted application...

7.8CVSS0.00103EPSS
SaveExploits0References1
CVE
CVE
•added 2024/07/01 2:17 p.m.•85 views

CVE-2024-21469

CVE-2024-21469 is mapped to Qualcomm TZ Secure OS / embedded platform where memory corruption occurs when an invoke call and a TEE call are bound to the same trusted application. The Red Hat/Qualcomm/PT-Security entries describe the issue as memory corruption with potential for arbitrary code exe...

7.8CVSS7.4AI score0.00103EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/07/01 2:17 p.m.•22 views

CVE-2024-21469 Permissions, Privileges, and Access Control issues in TZ Secure OS

Memory corruption when an invoke call and a TEE call are bound for the same trusted application...

7.3CVSS7.2AI score0.00103EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/01 12:00 a.m.•3 views

CVE-2024-21469: Out-of-bounds Write

Memory corruption when an invoke call and a TEE call are bound for the same trusted application...

7.8CVSS7.4AI score0.00103EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2024/06/21 3:52 a.m.•8 views

SUSE CVE-2021-47601

In the Linux kernel, the following vulnerability has been resolved: tee: amdtee: fix an ISERR vs NULL bug The getfreepages function does not return error pointers it returns NULL so fix this condition to avoid a NULL dereference...

5.5CVSS6.5AI score0.00239EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
•added 2024/06/20 10:54 a.m.•21 views

CVE-2021-47601

In the Linux kernel, the following vulnerability has been resolved: tee: amdtee: fix an ISERR vs NULL bug The getfreepages function does not return error pointers it returns NULL so fix this condition to avoid a NULL dereference...

4.4CVSS7.2AI score0.00239EPSS
SaveExploits0References4
OSV
OSV
•added 2024/06/19 3:15 p.m.•25 views

CVE-2021-47601

In the Linux kernel, the following vulnerability has been resolved: tee: amdtee: fix an ISERR vs NULL bug The getfreepages function does not return error pointers it returns NULL so fix this condition to avoid a NULL dereference...

5.5CVSS6.9AI score
SaveExploits0References3
OSV
OSV
•added 2024/06/19 3:15 p.m.•16 views

UBUNTU-CVE-2021-47601

In the Linux kernel, the following vulnerability has been resolved: tee: amdtee: fix an ISERR vs NULL bug The getfreepages function does not return error pointers it returns NULL so fix this condition to avoid a NULL dereference...

5.5CVSS5.8AI score0.00239EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2024/06/19 3:15 p.m.•23 views

CVE-2021-47601

In the Linux kernel, the following vulnerability has been resolved: tee: amdtee: fix an ISERR vs NULL bug The getfreepages function does not return error pointers it returns NULL so fix this condition to avoid a NULL dereference...

5.5CVSS5.9AI score0.00239EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/19 12:00 a.m.•2 views

CVE-2021-47601: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: tee: amdtee: fix an ISERR vs NULL bug The getfreepages function does not return error pointers it returns NULL so fix this condition to avoid a NULL dereference...

5.5CVSS5.7AI score0.00239EPSS
SaveExploits0References1
NVD
NVD
•added 2024/06/13 9:15 p.m.•27 views

CVE-2024-32922

In gpupmpowerontopnolock of pixelgpupower.c, there is a possible compromise of protected memory due to a logic error in the code. This could lead to local escalation of privilege to TEE with no additional execution privileges needed. User interaction is not needed for exploitation...

7.4CVSS0.00079EPSS
SaveExploits0References1
NVD
NVD
•added 2024/06/13 9:15 p.m.•33 views

CVE-2024-32899

In gpupmpowerofftopnolock of pixelgpupower.c, there is a possible compromise of protected memory due to a race condition. This could lead to local escalation of privilege to TEE with no additional execution privileges needed. User interaction is not needed for exploitation...

7CVSS0.00078EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/06/13 9:02 p.m.•35 views

CVE-2024-32922

In gpupmpowerontopnolock of pixelgpupower.c, there is a possible compromise of protected memory due to a logic error in the code. This could lead to local escalation of privilege to TEE with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00079EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/06/13 9:01 p.m.•41 views

CVE-2024-32899

In gpupmpowerofftopnolock of pixelgpupower.c, there is a possible compromise of protected memory due to a race condition. This could lead to local escalation of privilege to TEE with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00078EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/06/13 9:01 p.m.•23 views

CVE-2024-32899

In gpupmpowerofftopnolock of pixelgpupower.c, there is a possible compromise of protected memory due to a race condition. This could lead to local escalation of privilege to TEE with no additional execution privileges needed. User interaction is not needed for exploitation...

7.1AI score0.00078EPSS
SaveExploits0References1
CVE
CVE
•added 2024/06/13 9:01 p.m.•98 views

CVE-2024-32899

CVE-2024-32899 relates to a race condition in the Pixel GPU power management path (gpu_pm_power_off_top_nolock in pixel_gpu_power.c) that could allow local escalation of privilege to the TEE by compromising protected memory. Exploitation is predicted to require with local access and no user inter...

7CVSS6.8AI score0.00078EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/13 12:00 a.m.•1 views

CVE-2024-32922: Access of Resource Using Incompatible Type

In gpupmpowerontopnolock of pixelgpupower.c, there is a possible compromise of protected memory due to a logic error in the code. This could lead to local escalation of privilege to TEE with no additional execution privileges needed. User interaction is not needed for exploitation...

7.4CVSS6AI score0.00079EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/06/13 12:00 a.m.•14 views

PT-2024-24977 · Google · Android +1

Name of the Vulnerable Software and Affected Versions: No specific software or version is mentioned in the provided descriptions. Description: The issue is related to a logic error in the code of gpu pm power on top nolock in pixel gpu power.c. This error could lead to a compromise of protected...

7.4CVSS6.6AI score0.00079EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/13 12:00 a.m.•2 views

CVE-2024-32899: Concurrent Execution using Shared Resource with Improper Synchronization

In gpupmpowerofftopnolock of pixelgpupower.c, there is a possible compromise of protected memory due to a race condition. This could lead to local escalation of privilege to TEE with no additional execution privileges needed. User interaction is not needed for exploitation...

7CVSS5.8AI score0.00078EPSS
SaveExploits0References1
Rows per page
Query Builder