3366 matches found
CVE-2025-21423
CVE-2025-21423 affects Qualcomm chipsets; memory corruption occurs when handling client calls to EnableTestMode through an Escape call. The CVSS-3.1 metrics indicate a LOCAL attack vector, LOW privileges required, no user interaction, with HIGH confidentiality, integrity, and availability impact....
CVE-2025-21423 Improper Validation of Array Index in Display
Memory corruption occurs when handling client calls to EnableTestMode through an Escape call...
CVE-2025-21447: Improper Validation of Array Index
Memory corruption may occur while processing device IO control call for session control...
CVE-2025-21985 drm/amd/display: Fix out-of-bound accesses
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bound accesses WHAT & HOW hpostreamtolinkencodermapping has size MAXHPODP2ENCODERS=4, but location can have size up to 6. As a result, it is necessary to check location against MAXHPODP2ENCODERS...
SUSE CVE-2023-53000
In the Linux kernel, the following vulnerability has been resolved: netlink: prevent potential spectre v1 gadgets Most netlink attributes are parsed and validated from nlavalidateparse or validatenla u16 type = nlatypenla; if type == 0 || type maxtype / error or continue / @type is then used as a...
CVE-2023-53000: Improper Validation of Array Index
In the Linux kernel, the following vulnerability has been resolved: netlink: prevent potential spectre v1 gadgets Most netlink attributes are parsed and validated from nlavalidateparse or validatenla u16 type = nlatypenla; if type == 0 || type maxtype / error or continue / @type is then used as a...
CVE-2025-0313
Rejected reason: REJECT DO NOT USE THIS CVE ID NUMBER. The Rejected CVE Record is a duplicate of CVE-2024-12055. Notes: All CVE users should reference CVE-2024-12055 instead of this CVE Record. All references and descriptions in this candidate have been removed to prevent accidental usage...
Improper Validation Of Array Index
github.com/onosproject/onos-lib-go is vulnerable to Improper Validation of Array Index. The vulnerability is due to an index out-of-range error in the GetBitString function. An attacker can cause a denial of service by sending crafted input that specifies a zero value for numBits...
PT-2025-12310
Name of the Vulnerable Software and Affected Versions ollama/ollama versions prior to 0.3.14 Description The issue is due to improper validation of array index bounds in the GGUF model handling code. This can be exploited via a remote network, allowing a malicious user to create a GGUF model that...
Improper Validation of Array Index
Overview Affected versions of this package are vulnerable to Improper Validation of Array Index due to an index out-of-range error in the GetBitString function. An attacker can cause a denial of service by sending crafted input that specifies a zero value for numBits. PoC golang package main impo...
CBL Mariner 2.0 Security Update: kernel (CVE-2024-56595)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56595 advisory. - In the Linux kernel, the following vulnerability has been resolved: jfs: add a check to prevent array-...
Azure Linux 3.0 Security Update: kernel (CVE-2024-53156)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53156 advisory. - In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: add range check for...
CBL Mariner 2.0 Security Update: kernel (CVE-2024-56598)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56598 advisory. - In the Linux kernel, the following vulnerability has been resolved: jfs: array-index-out-of-bounds fix in...
jfs: array-index-out-of-bounds fix in dtReadFirst
...
Linux Distros Unpatched Vulnerability : CVE-2025-21680
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: pktgen: Avoid out-of-bounds access in getimixentries Passing a sufficient amount of imix...
Linux Distros Unpatched Vulnerability : CVE-2024-56598
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: jfs: array-index-out-of-bounds fix in dtReadFirst The value of stbl can be sometimes out of...
Linux Distros Unpatched Vulnerability : CVE-2024-52333
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An improper array index validation vulnerability exists in the determineMinMax functionality of OFFIS DCMTK 3.6.8. A specially crafted DICOM file can lead to an...
Linux Distros Unpatched Vulnerability : CVE-2022-49170
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - f2fs: fix to do sanity check on curseg-alloctype As Wenqing Liu reported in bugzilla: https://bugzilla.kernel.org/showbug.cgi?id=215657 - Overview UBSAN:...