The vulnerability of the usbhid_parse() function in the bNumDescriptors component of the Linux kernel allows a hacker to induce a service failure.

The vulnerability of the usbhidparse function in the bNumDescriptors component of the Linux kernel is related to the violation of the buffer’s initial boundary. Exploiting this vulnerability could allow an attacker to cause a service failure...

SUSE CVE-2025-38728

In the Linux kernel, the following vulnerability has been resolved: smb3: fix for slab out of bounds on mount to ksmbd With KASAN enabled, it is possible to get a slab out of bounds during mount to ksmbd due to missing check in parseserverinterfaces see below: BUG: KASAN: slab-out-of-bounds in...

CVE-2025-22423

In ParseTag of dngifd.cpp, there is a possible way to crash the image renderer due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-26443

CVE-2025-26443 affects Android’s HtmlToSpannedParser.parseHtml, where a logic error could permit installing apps without enabling installation from unknown sources. This is a local privilege escalation vulnerability (local vector, requires user interaction). The issue is tied to the parseHtml pat...

AZL-66875 CVE-2025-38728 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: smb3: fix for slab out of bounds on mount to ksmbd With KASAN enabled, it is possible to get a slab out of bounds during mount to ksmbd due to missing check in parseserverinterfaces see below: BUG: KASAN: slab-out-of-bounds in...

AZL-73845 CVE-2025-38728 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: smb3: fix for slab out of bounds on mount to ksmbd With KASAN enabled, it is possible to get a slab out of bounds during mount to ksmbd due to missing check in parseserverinterfaces see below: BUG: KASAN: slab-out-of-bounds in...

CVE-2025-38728

In the Linux kernel, the following vulnerability has been resolved: smb3: fix for slab out of bounds on mount to ksmbd With KASAN enabled, it is possible to get a slab out of bounds during mount to ksmbd due to missing check in parseserverinterfaces see below: BUG: KASAN: slab-out-of-bounds in...

DEBIAN-CVE-2025-38680

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix 1-byte out-of-bounds read in uvcparseformat The buffer length check before calling uvcparseformat only ensured that the buffer has at least 3 bytes buflen 2, buf the function accesses buffer3, requiring at...

CVE-2025-38728

Technical details for CVE-2025-38728 are not publicly provided in the supplied documents. Monitor official advisories and vendor notices for updates.

GNU ncurses parse_entry.c postprocess_termcap stack-based overflow

...

parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no trailing newline if cJSON_ParseWithLength is called.

...

In Perl before 5.38.2, S_parse_uniprop_string in regcomp.c can write to unallocated space because a property name associated with a \p{...} regular expression construct is mishandled. The earliest affected version is 5.30.0.

...

Stack exhaustion in all Parse functions in go/parser

...

An issue was discovered in Arm Mbed TLS before 2.24.0. mbedtls_x509_crl_parse_der has a buffer over-read (of one byte).

...

NASM Netwide Assember parser.c parse_line stack-based overflow

...

NASM Netwide Assember preproc.c parse_smacro_template null pointer dereference

...

[ceph] parse_longname(): strrchr() expects NUL-terminated string

...

cifs: fix underflow in parse_server_interfaces()

...

Linux Distros Unpatched Vulnerability : CVE-2017-1000098

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The net/http package's Request.ParseMultipartForm method starts writing to temporary files once the request body size surpasses the given maxMemory limit. It wa...

Linux Distros Unpatched Vulnerability : CVE-2023-35862

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libcoap 4.3.1 contains a buffer over-read via the function coapparseoscoreconfmem at coaposcore.c. CVE-2023-35862 Note that Nessus relies on the presence of the...