6.4
Moyenne
CVE-2023-28576 The buffer obtained from kernel APIs such as cam_mem_get_cpu_buf() may be readable/writable in userspace after kernel…
Description
The buffer obtained from kernel APIs such as cam_mem_get_cpu_buf() may be readable/writable in userspace after kernel accesses it. In other words, user mode may race and modify the packet header (e.g. header.count), causing checks (e.g. size checks) in kernel code to be invalid. This may lead to out-of-bounds read/write issues.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Snapdragon | Versions non publiées |
Autres CVE de Snapdragon
Les 997 CVE de Snapdragon →
CVE-2026-57559
Memory corruption while processing service requests
7.8
Élevée
CVE-2026-57555
Memory Corruption when executing system service routines due to improper handling of user input buffers
7.8
Élevée
CVE-2026-57554
Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC…
7.8
Élevée
CVE-2026-57546
Transient DOS when processing a continuous receive command with a zero-sized global configuration override
7.5
Élevée