Arash Tohidi

The issue is related to an out of bound write in the DSP service due to an improper bound check for the response buffer size. This affects various Qualcomm Snapdragon products, including Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, and Snapdragon Wearables.

A memory initialization issue was addressed with improved memory handling, allowing an application to potentially execute arbitrary code with system privileges.

A validation issue was addressed with improved input sanitization, which may allow an application to read restricted memory.

A memory corruption issue was addressed with improved memory handling, allowing an application to potentially execute arbitrary code with kernel privileges.

A validation issue was addressed with improved input sanitization, which may allow an application to read restricted memory.

A validation issue was addressed with improved input sanitization, allowing an application to potentially read restricted memory.

Name of the Vulnerable Software and Affected Versions: QEMU (affected versions not specified) Description: The issue is related to an integer overflow in the `rtl8139 do receive` function of the QEMU hardware emulator. This can lead to a buffer overflow. The vulnerability may allow a remote attacker to cause a denial of service. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.