All CVEs — page 324 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
This vulnerability allows for a stack-based buffer overflow through manipulation of the 'addQos/comment/entry_name' argument, leading to potential remote code execution.
The I3C system-call verifier failed to validate per-target data buffers in CCC commands, allowing unprivileged user threads with I3C access to craft malicious payloads that could cause kernel memory corruption or information disclosure when controller drivers dereference arbitrary kernel addresses.
The flaw allows a user-mode thread to submit a half-sized buffer, causing the driver to write beyond the buffer's bounds, leading to potential data corruption or a buffer overflow.
This vulnerability allows for improper authorization, enabling attackers to bypass authentication checks. It is critical due to the potential for full system compromise.