CVE-2019-12454

An issue was discovered in wcd9335_codec_enable_dec in sound/soc/codecs/wcd9335.c in the Linux kernel through 5.1.5. It uses kstrndup instead of kmemdup_nul, which allows attackers to have an unspecified impact via unknown vectors. NOTE: The vendor disputes this issues as not being a vulnerability because switching to kmemdup_nul() would only fix a security issue if the source string wasn't NUL-terminated, which is not the case

• https://bugzilla.suse.com/show_bug.cgi?id=1136963#c1
• https://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound.git/commit/?h=for-5.3&id=a54988113985ca22e414e132054f234fc8a92604Mailing List, Patch, Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J36BIJTKEPUOZKJNHQBUZA47RQONUKOI/
• https://lkml.org/lkml/2019/5/29/705Mailing List, Patch, Third Party Advisory
• https://support.f5.com/csp/article/K13523672
• https://support.f5.com/csp/article/K13523672?utm_source=f5support&amp%3Butm_medium=RSS
• https://bugzilla.suse.com/show_bug.cgi?id=1136963#c1
• https://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound.git/commit/?h=for-5.3&id=a54988113985ca22e414e132054f234fc8a92604Mailing List, Patch, Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J36BIJTKEPUOZKJNHQBUZA47RQONUKOI/
• https://lkml.org/lkml/2019/5/29/705Mailing List, Patch, Third Party Advisory
• https://support.f5.com/csp/article/K13523672
• https://support.f5.com/csp/article/K13523672?utm_source=f5support&amp%3Butm_medium=RSS

Published

May 30, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-12448An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2.…
• CVE-2019-12449An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2.…5.7
• CVE-2019-1245An information disclosure vulnerability exists when DirectWr…6.5
• CVE-2019-12450file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 throu…9.8
• CVE-2019-12452types/types.go in Containous Traefik 1.7.x through 1.7.11, w…
• CVE-2019-12453In MicroStrategy Web before 10.1 patch 10, stored XSS is pos…
• CVE-2019-12455An issue was discovered in sunxi_divs_clk_setup in drivers/c…
• CVE-2019-12456An issue was discovered in the MPT3COMMAND case in _ctl_ioct…
• CVE-2019-12457FileRun 2019.05.21 allows images/extjs Directory Listing. Th…5.3
• CVE-2019-12458FileRun 2019.05.21 allows css/ext-ux Directory Listing. This…5.3
• CVE-2019-12459FileRun 2019.05.21 allows customizables/plugins/audio_player…5.3
• CVE-2019-1246A remote code execution vulnerability exists when the Window…7.8