12696 matches found
CVE-2025-70293
An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fsgetbgdtable, the size calculation can lead to under allocation and this underallocated buffer will be used in memcpy which could lead to arbitrary code execution, a denial of service,...
CVE-2025-70293
An integer overflow vulnerability exists in Denx U-Boot versions prior to 2026.04 . The flaw is located in the ext4fs_get_bgdtable function, where an incorrect size calculation results in an underallocated buffer. This buffer is subsequently used in a memcpy() operation, which could lead to arbit...
PT-2026-82241
Name of the Vulnerable Software and Affected Versions Denx U-Boot versions prior to 2026.04 Description An integer overflow occurs in the ext4fs get bgdtable function. The size calculation can result in an under-allocated buffer, which is subsequently used in memcpy. This flaw may lead to arbitra...
CVE-2025-70293
An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fsgetbgdtable, the size calculation can lead to under allocation and this underallocated buffer will be used in memcpy which could lead to arbitrary code execution, a denial of service,...
EUVD-2025-210792
An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fsgetbgdtable, the size calculation can lead to under allocation and this underallocated buffer will be used in memcpy which could lead to arbitrary code execution, a denial of service,...
CVE-2025-70290
An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk metadata. The issue may result in incorrect memory allocation followed by out-of-bounds memory access, potentially leading to a crash or...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-099003)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099003 advisory. In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: restrict usage in unprivileged domU The Xen privcmd driver allows to issue arbitrary...
CLSA-2026-1787673713 TuxCare security update for org.springframework.boot (1 CVE)
TuxCare rebuilt 77 org.springframework.boot packages to address 1 CVE. Fixed in 2.4.6-tuxcare.10...
CLSA-2026-1787671361 TuxCare security update for org.springframework.boot (1 CVE)
TuxCare rebuilt 78 org.springframework.boot packages to address 1 CVE. Fixed in 3.1.8-tuxcare.9...
Automotive HSMs - Architectural Challenges and Security Implications
Automotive electronic control units ECUs increasingly depend on hardware-rooted security to protect software integrity, authenticity, and lifecycle management in the presence of remote and physical threats. Hardware Security Modules HSMs have become a key building block in automotive...
This Week in Spring - August 25th, 2026
Hi, Spring fans! Welcome back to another installment of This Week in Spring. It’s a big week ahead: I’m about to head out on a packed tour through Europe—Wrocław for a friend’s wedding, Oslo for JavaZone, Paris for a Spring meetup details coming soon, Amsterdam for IntelliJ IDEA conf—and then on ...
CVE-2026-13213
The Hearing Access Service HAS GATT server in subsys/bluetooth/audio/has.c installs a connection-callback set unconditionally via BTCONNCBDEFINE, so securitychanged runs for every connection that establishes security even before the application has called bthasregister. The service attribute...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: arm64: errata: Add missing sentinel entries to Spectre-BHB MIDR arrays The commit a5951389e58d “arm64: errata: Add newer ARM cores to the spectrebhbloopaffected lists” added some additional CPUs to the Spectre-BHB workaround. Thi...
Astra Linux – Vulnerability in Linux, Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: x86/ioremap: Maps EFI-reserved memory as encrypted for SEV. Some drivers require memory that is marked as EFI boot services data. To prevent this memory from being reused by the kernel after ExitBootServices, efimemreserve is use...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: LoongArch: Move jumplabelinit before parseearlyparam. When both CONFIGMEMALLOCPROFILING=y and CONFIGMEMALLOCPROFILINGENABLEDBYDEFAULT=y are enabled, disabling memory profiling by adding the boot parameter 'sysctl.vm.memprofiling=...
PT-2026-80937
The Hearing Access Service HAS GATT server in subsys/bluetooth/audio/has.c installs a connection-callback set unconditionally via BT CONN CB DEFINE, so security changed runs for every connection that establishes security even before the application has called bt has register. The service attribut...
virt-firmware v26.8.1
Tools for ovmf / armvirt firmware volumes This is a small collection of tools for edk2 firmware images. They support decoding and printing the content of firmware volumes. Variable stores OVMFVARS.fd can be modified, for example to enroll secure boot certificates. virt-fw-dump Decodes and prints...
owasp-top10-2025-labs
OWASP Top 10:2025 — Labs Repositorio de portafolio: replica y...
Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot
Check Point Research has disclosed a technique that uses Microsoft Defender's own legitimately signed boot-time remediation driver to perform arbitrary kernel-level file and registry operations on Windows systems ranging from Windows 7 through Windows 11 25H2, with no software flaw exploited and ...