Moony Li

The issue is related to unsafe privilege management in the Windows CD-ROM Driver, which can be exploited to elevate privileges. This allows an attacker to affect the system.

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions (affected versions not specified) Description: The issue is related to a possible use after free problem while accessing the link pointer from device private data due to lack of resource protection. This affects various Qualcomm Snapdragon products, including Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, and Snapdragon Wearables, in specific chipsets such as APQ8009, MDM9206, MDM9207C, MDM9607, QCS605, SDM429W, SDX24, SM8150, and SXR1130. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

A memory corruption issue was addressed with improved memory handling, allowing an application to potentially execute arbitrary code with system privileges.

A memory corruption issue was addressed with improved memory handling, allowing an application to potentially execute arbitrary code with kernel privileges.

A logic issue was addressed with improved restrictions, which may allow a malicious application to determine kernel memory layout.

A validation issue was addressed with improved input sanitization, allowing an application to potentially read restricted memory.

A validation issue was addressed with improved input sanitization, allowing an application to potentially read restricted memory.

A memory corruption issue was addressed with improved memory handling, allowing an application to potentially execute arbitrary code with system privileges. The issue is related to a double free privilege escalation vulnerability in the AMDRadeonX4000 AMDSIGLContext, specifically with the discard StretchTex2Tex function.

A memory corruption issue was addressed with improved memory handling, allowing an application to potentially execute arbitrary code with system privileges. The issue is related to an untrusted pointer dereference privilege escalation.

The issue involves an out-of-bounds read that can be addressed with improved bounds checking. This allows an application to potentially read restricted memory, which could lead to information disclosure.

A validation issue was addressed with improved input sanitization.

The issue involves the `ATS` component and allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted font. This is caused by a buffer overflow in memory.

The issue allows attackers to execute arbitrary code in a privileged context or cause a denial of service due to memory corruption via a crafted app.

The issue allows an attacker to execute arbitrary code in a privileged context or cause a denial of service due to memory corruption. This can be achieved via a crafted app.

The issue allows attackers to execute arbitrary code in a privileged context or cause a denial of service due to memory corruption via a crafted app.

The issue allows local users to obtain sensitive kernel memory-layout information or cause a denial of service via unspecified vectors, potentially related to a use-after-free privilege escalation vulnerability in the DspFuncLib component.

The issue is related to the use of incorrect encryption keys for disk images in the Disk Utility component of Mac OS X. This could potentially allow a remote attacker to impact the confidentiality of information.

The issue is related to a buffer overflow in the AppleGraphicsPowerManagement component, which can be exploited by attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

The issue allows attackers to execute arbitrary code in a privileged context or cause a denial of service due to memory corruption via a crafted app. This is caused by a buffer overflow in the Disk Images subsystem of the operating systems.

The issue is caused by a buffer overflow in the Graphics Drivers subsystem of the operating system. This can be exploited by a remote attacker using a specially crafted application, potentially allowing them to execute arbitrary code in a privileged context or cause a denial of service due to memory corruption.