CVE-2023-54250 ksmbd: avoid out of bounds access in decode_preauth_ctxt()

In the Linux kernel, the following vulnerability has been resolved: ksmbd: avoid out of bounds access in decodepreauthctxt Confirm that the accessed pnegctxt-HashAlgorithms address sits within the SMB request boundary; deassemblenegcontexts only checks that the eight byte smb2negcontext header +...

UBUNTU-CVE-2025-68254

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing The Extended Supported Rates ESR IE handling in OnBeacon accessed p + 1 + ielen and p + 2 + ielen without verifying that these offsets lie within the received...

CVE-2025-68254

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing The Extended Supported Rates ESR IE handling in OnBeacon accessed p + 1 + ielen and p + 2 + ielen without verifying that these offsets lie within the received...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a lack of boundary checking for map-maxosd, which could lead to out-of-bounds access...

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, an American company. Google Pixel has a security vulnerability that stems from a boundary check error in GetHostAddress in gxpbuffer.h, which could lead to local elevation of privilege...

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel that stems from a boundary check error in ssDecodeLcsAssistDataReqMsg in ssLcsManagement.c, which could lead to remote elevation of privilege...

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, an American company. Google Pixel has a security vulnerability that stems from the lack of boundary checking in GetHostAddress in gxpbuffer.h, which could lead to local elevation of privilege...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-991155)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991155 advisory. In the Linux kernel, the following vulnerability has been resolved: selinux: Add boundary check in putentry Just like nextentry, boundary check is necessary to preve...

OESA-2025-2768 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: udf: Detect system inodes linked into directory hierarchy When UDF filesystem is corrupted, hidden system inodes can be linked into directory hierarchy which is ...

ROS-20251125-01

A vulnerability in the cross-platform software development framework Qt is related to a bug in the data boundary checking when reading data from Bluetooth L2CAP socket in processUnsolicitedReply and processReply in bluetooth/qlowenergycontrollerbluez.cpp. Exploitation of the vulnerability could...

PT-2025-51667

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the staging driver for rtl8723bs related to handling Extended Supported Rates ESR Information Elements IE within beacon frames. A malformed beacon...

The vulnerability of the asn_build_objid() function in the Squid proxy server allows a hacker to induce a service failure.

The vulnerability of the asnbuildobjid function in the Squid proxy server is related to errors in data boundary checking during the processing of ASN.1-encoded long OID SNMP identifiers. Exploiting this vulnerability can allow attackers to cause service failures...

kernel: usbnet: ipheth: use static NDP16 location in URB

In the Linux kernel, the following vulnerability has been resolved: usbnet: ipheth: use static NDP16 location in URB Original code allowed for the start of NDP16 to be anywhere within the URB based on the wNdpIndex value in NTH16. Only the start position of NDP16 was checked, so it was possible f...

Apple Xcode Insufficient Boundary Check Vulnerability

Apple Xcode is an integrated development environment developed by Apple Inc. Apple Xcode suffers from a boundary check insufficiency vulnerability that can be exploited by an attacker to cause a denial of service...

Apple iOS and iPadOS Insufficient Boundary Check Vulnerability

Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer. Apple iOS and iPadOS suffer from a boundary check insufficiency vulnerability that can be exploited by an attacker to cause a process crash triggered by a malicious HID...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-988771)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988771 advisory. In the Linux kernel, the following vulnerability has been resolved: media: vivid: fix compose size exceed boundary syzkaller found a bug: BUG: unable to handle page...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989249)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989249 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix u8 overflow By keep sending L2CAPCONFREQ packets, chan-numconfrsp increases...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets, which stems from an incorrect boundary check, which could lead to out-of-bounds writes, and could lead to a local elevation of privilege if a malicious attacker...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets, which stems from an incorrect boundary check that could lead to an out-of-bounds write, which could result in a local elevation of privilege if an attacker has...

Xen 安全漏洞

Xen is an open source virtual machine monitor product from Xen Open Source. The product enables different and incompatible operating systems to run on the same computer and supports migration at runtime to ensure uptime and avoid downtime. A security vulnerability exists in Xen that stems from a...