CVE-2023-53842: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove The MBHC resources must be released on component probe failure and removal so can not be tied to the lifetime of the component device. This is specifically needed ...

EUVD-2018-17624

Malware in sbrugna...

@wcd/gqio.angular-element-starter-kit (0.1.0), @wcd/gqio.angular-element-todo (0.1.0) potentially affected by unknown CVE via platform-browser-dynamic (0.0.1-security)

platform-browser-dynamic NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on platform-browser-dynamic and may be impacted: - @wcd/gqio.angular-element-starter-kit 0.1.0 - @wcd/gqio.angular-element-todo 0.1.0 Source cves: unknown...

kernel: ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove

A resource leak was found in the WCD MBHC v2 audio codec driver in the Linux kernel. MBHC resources are not properly released on component probe failure or removal, causing interrupt request failures and preventing successful reprobing of the codec component. This leads to sound card initializati...

GSD-2022-1006832 ASoC: wcd-mbhc-v2: Revert "ASoC: wcd-mbhc-v2: use pm_runtime_resume_and_get()"

ASoC: wcd-mbhc-v2: Revert "ASoC: wcd-mbhc-v2: use pmruntimeresumeandget" This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

PT-2022-35087

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.3 Description The issue is related to the ASoC: wcd-mbhc-v2 component in the Linux Kernel. It involves the reverting of a change that used pm runtime resume and get. The actual impact and attack plausibility...

wcd-online.de Cross Site Scripting vulnerability OBB-2166644

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Google Android wcd_cpe_core memory misreference vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA. wcdcpecore is one of the components used to add LSM topology support. A memory misreference vulnerability exists in wcdcpecore in Android. An attacker can exploit this vulnerability to ga...

CVE-2018-5857

In the WCD CPE codec, a Use After Free condition can occur in all Android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the Linux kernel...

Race condition

In the WCD CPE codec, a Use After Free condition can occur in all Android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the Linux kernel...

CVE-2018-5857

In the WCD CPE codec, a Use After Free condition can occur in all Android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the Linux kernel...

CVE-2018-5857

In CVE-2018-5857, the issue is a Use-After-Free in the WCD CPE codec used by CAF Android releases (Android for MSM, Firefox OS for MSM, QRD Android) via the Linux kernel. The root cause is a memory management defect in wcd_cpe_core that can be triggered locally. The CVSS metrics indicate a Local ...

CVE-2018-5857: Use After Free

In the WCD CPE codec, a Use After Free condition can occur in all Android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the Linux kernel...

PT-2018-17192

Name of the Vulnerable Software and Affected Versions: Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description: A Use After Free condition can occur in the WCD CPE codec, affecting all Android...