SUSE SLED15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2025:3978-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:3978-1 advisory. - CVE-2025-62594: Fixed unsigned underflow and division-by-zero that can lead to OOB pointer arithmetic a...

SUSE-SU-2025:3978-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2025-62594: Fixed unsigned underflow and division-by-zero that can lead to OOB pointer arithmetic and process crash. bsc1252749...

Linux uprobe_dispatcher uretprobe_dispatcher DoS

The vulnerability of the uprobedispatcher and uretprobedispatcher functions in the Linux operating system is related to a pointer arithmetic error. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-990332)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990332 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: incorrect arithmetics when fetching VLAN header bits If the offset + lengt...

libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup

A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software. The vulnerability arises when processing the expiration date of cookies, where a specially crafted value can trigger an integer overflow. This may result in undefined behavior,...

Linux etm_setup_aux Heap Buffer Overflow DoS

The vulnerability of the etmsetupaux function in the Linux operating system’s kernel is related to a pointer arithmetic error. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux mt7996_mac_sta_add_links DoS

The vulnerability of the mt7996macstaaddlinks function in the Linux operating system is related to errors in pointer arithmetic. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Heap Buffer Overflow DoS

The vulnerability of the netdevallocskbipalign function in the Linux operating system is related to a pointer arithmetic error. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel DoS

The vulnerability of the platformgetresource function in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel DoS

The vulnerability in the drivers/gpu/drm/gma500/oaktrailhdmi.c kernel module of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the afsputserver function in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux kernel stm32_csi_start() DoS

The vulnerability of the stm32csistart function in the Linux operating system’s kernel is related to a pointer arithmetic error. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux kernel cache_setFlush DoS

The vulnerability of the cachesetFlush function in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to trigger a service failure...

Linux do_register_framebuffer() Buffer Overflow DoS

The vulnerability of the doregisterframebuffer function in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Pointer Arithmetic DoS

The vulnerability of the Linux operating system’s kernel is related to a pointer arithmetic error. Exploiting this vulnerability can allow an attacker, working remotely, to cause service interruptions...

Linux uart_register_driver Buffer Overflow DoS

The vulnerability of the uartregisterdriver function in the Linux operating system’s kernel is related to a pointer arithmetic error. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

KVM Subsystem Data Compromise

The vulnerability of the KVM virtualization subsystem in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Linux jfs_ioc_trim Heap Buffer Overflow DoS

The vulnerability of the jfsioctrim function in the Linux operating system’s kernel is related to a pointer arithmetic error. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux jffs2_prealloc_raw_node_refs Heap Buffer Overflow DoS

The vulnerability of the jffs2preallocrawnoderefs function in the Linux operating system is related to a pointer arithmetic error. Exploiting this vulnerability could allow an attacker to cause a service failure...

ImageMagick CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash (DoS)

Summary A single root cause in the CLAHE implementation — tile width/height becoming zero — produces two distinct but related unsafe behaviors. Vulnerabilities exists in the CLAHEImage function of ImageMagick’s MagickCore/enhance.c. 1. Unsigned integer underflow → out-of-bounds pointer arithmetic...