PT-2025-8114

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue was related to the visconti clk register gates function, where an array overflow could occur due to the use of -1 to...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a possible array overflow in bpftrampolinegetprogs...

PT-2025-8411

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified, specifically in the pvrusb2 media module. The issue arises from an array-index-out-of-bounds error in the pvr2 i2c core init...

PT-2025-8484

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, specifically in the isp1760 driver. The issue arises from an out-of-bounds array access, which occurs because the loop reading regm...

GHSA-4W26-8P97-F4JP AugAssign evaluation order causing OOB write within the object in Vyper

Vyper handles AugAssign statements by first caching the target location to avoid double evaluation. However, in the case when target is an access to a DynArray and the rhs modifies the array, the cached target will evaluate first, and the bounds check will not be re-evaluated during the write...

PYSEC-2025-31

vyper is a Pythonic Smart Contract Language for the EVM. Vyper handles AugAssign statements by first caching the target location to avoid double evaluation. However, in the case when target is an access to a DynArray and the rhs modifies the array, the cached target will evaluate first, and the...

Linux kernel buffer overflow vulnerability (CNVD-2025-03434)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a buffer overflow vulnerability that originates from a boundary checking error in the imixentries array in the getimixentries function of pktgen, whic...

A malicious manifests can lead to DoS due to unchecked array bound access via network in ollama/ollama

This report is not public...

SUSE CVE-2024-1874

In PHP versions 8.1. before 8.1.28, 8.2. before 8.2.18, 8.3. before 8.3.5, when using procopen command with array syntax, due to insufficient escaping, if the arguments of the executed command are controlled by a malicious user, the user can supply arguments that would execute arbitrary commands ...

CVE-2024-36743

An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS when an empty array is processed with oneflow.dot...

CVE-2024-36732

An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS when an empty array is processed with oneflow.tensordot...

PT-2025-16727

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an array bounds error with may goto in the Linux kernel's BPF Berkeley Packet Filter functionality. The may goto function uses additional stack space, causing the...

PT-2025-14506

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns an incorrect validation in the Linux kernel, specifically in the ksmbd component, related to the num aces field of smb acl. The problem arises from the potential to...

Astra Linux – vulnerability in dcmtk

An improper array index validation vulnerability exists in the determineMinMax functionality of OFFIS DCMTK 3.6.8. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Fixed the field-spanning write warning in mwifiexconfigscan Replace the one-element array with a flexible-array member in struct mwifiexietypeswildcardssidparams to resolve the following warning on an MT8173...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: protect the fetch of -fdfd in dodup2 from mispredictions Both callers have verified that fd is not greater than -maxfds; however, a misprediction might end up causing tofree = fdt-fdfd; to be executed speculatively. This is...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Fix negative array index read Avoid using the negative values for clkidex as an index into an array pptable-DpmDescriptor. V2: fix clkindex return check Tim Huang...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: bnx2x: Fix multiple UBSAN array-index-out-of-bounds Fix UBSAN warnings that occur when using a system with 32 physical cpu cores or more, or when the user defines a number of Ethernet queues greater than or equal to FPSBMAXE1x...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ep93xx: clock: Fix off by one in ep93xxdivrecalcrate The psc-div array has psc-numdiv elements. These values are generated when we call clkhwregisterdiv. They are adcdivisors and ARRAYSIZEadcdivisors etc. Therefore, this conditio...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: platform/x86: toshibaacpi: Fix array out-of-bounds access To use toshibadmiquirks alongside standard DMI matching functions, it must be terminated by an empty entry. Since this entry is missing, an array out-of-bounds access occu...