16368 matches found
PT-2025-44124
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue was identified in the Linux kernel related to vhost and vringh. The problem involves an incorrect check of the return value from the copy to iter function. The function's return...
PyTorch security vulnerabilities
PyTorch is a Python package open-sourced by PyTorch. PyTorch suffers from a security vulnerability that stems from the bitwiserightshift function mishandling the boundary value of the OTHER parameter, which can be exploited by an attacker to cause an output error...
K000156613: OpenSSL for PowerPC vulnerability CVE-2025-27587
Security Advisory Description OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable to a Minerva attack, exploitable by measuring the time of signing of random messages using the EVPDigestSign API, and then using the private key to extract the K value nonce from the signatures...
Qualcomm Chipsets security vulnerabilities
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from processing a power control request with an invalid antenna or stream value, which could result in a denial of service...
Linux Kernel ksmbd smb2_sess_setup Preauth_HashValue Race Condition Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Kernel. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of the PreauthHashValue field. The issue results from the lack of proper locking...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : vim (SUSE-SU-2025:03300-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03300-1 advisory. Updated to 9.1.1629: - CVE-2025-53905: Fixed malicious tar archive may causing a path traversal...
CVE-2025-57638
Buffer overflow vulnerability in Tenda AC9 1.0 via the user supplied sys.vendor configuration value...
llvm:llvm-opt-fuzzer--x86_64-loop_vectorize: Use-of-uninitialized-value in llvm::InterleavedAccessInfo::analyzeInterleaving
Detailed Report: https://oss-fuzz.com/testcase?key=4575997300375552 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-opt-fuzzer--x8664-loopvectorize Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...
Security update for vim
This update for vim fixes the following issues: Updated to 9.1.1629: - CVE-2025-53905: Fixed malicious tar archive may causing a path traversal in Vim’s tar.vim plugin bsc1246604 - CVE-2025-53906: Fixed malicious zip archive may causing a path traversal in Vim’s zip bsc1246602 - CVE-2025-55157:...
CVE-2025-57638
Buffer overflow vulnerability in Tenda AC9 1.0 via the user supplied sys.vendor configuration value...
PT-2025-39205
Name of the Vulnerable Software and Affected Versions Tenda AC9 version 1.0 Description A buffer overflow issue exists in Tenda AC9 version 1.0. The issue is related to the handling of the sys.vendor configuration value provided by the user. Recommendations At the moment, there is no information...
CVE-2025-57638: Heap-based Buffer Overflow
Buffer overflow vulnerability in Tenda AC9 1.0 via the user supplied sys.vendor configuration value...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an unchecked ofphyfinddevice return value that could result in a null pointer dereference...
CVE-2025-57638
Buffer overflow vulnerability in Tenda AC9 1.0 via the user supplied sys.vendor configuration value...
ROS-20250923-03
A vulnerability in the Python programming language interpreter CPython is related to insufficient validation of user data in Lib/email/headervalueparser.py. user data in Lib/email/headervalueparser.py. Exploitation of the vulnerability could allow an attacker acting remotely to execute a spoofing...
ROS-20250923-04
A vulnerability in the Python programming language interpreter CPython is related to insufficient validation of user data in Lib/email/headervalueparser.py. user data in Lib/email/headervalueparser.py. Exploitation of the vulnerability could allow an attacker acting remotely to execute a spoofing...
mruby:mruby_fuzzer: Use-of-uninitialized-value in mpz_add
Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6099098936868864 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzermsanmruby Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: mpza...
ALPINE-CVE-2025-59799
Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdfmarkcoercedest in devices/vector/gdevpdfm.c via a large size value...