CVE-2025-5456

CVE-2025-5456 is a buffer over-read in Ivanti Connect Secure prior to 22.7R2.8 or 22.8R2, Ivanti Policy Secure prior to 22.7R1.5, Ivanti ZTA Gateway prior to 2.8R2.3-723, and Ivanti Neurons for Secure Access prior to 22.8R1.4. The issue allows a remote unauthenticated attacker to trigger a denial...

PT-2025-32841 · Microsoft · Office Word +1

Name of the Vulnerable Software and Affected Versions: Microsoft Office Word affected versions not specified Description: A buffer over-read issue exists in Microsoft Office Word, potentially allowing a local attacker to disclose information. Recommendations: At the moment, there is no informatio...

Ivanti多款产品 缓冲区错误漏洞

Ivanti Connect Secure ICS and others are products of Ivanti Corporation, U.S.A. Ivanti Connect Secure is a secure remote network connection tool.Ivanti Policy Secure IPS is a network access control NAC solution.Ivanti ZTA Gateway is a component in a network access software. A buffer error...

CVE-2025-47219

A flaw was found in gstreamer1-plugins-good. The isomp4 plugin's qtdemuxparsetrak function incorrectly handles MP4 file parsing, resulting in a heap buffer over-read. This flaw allows a local attacker to provide a specially crafted MP4 file. This over-read can lead to information disclosure...

CVE-2025-47183

A flaw was found in gstreamer1-plugins-good. The isomp4 plugin's qtdemuxparsetree function incorrectly handles MP4 file parsing, resulting in a heap buffer over-read. This flaw allows a local attacker to trigger this vulnerability by providing a specially crafted MP4 file. This over-read can lead...

Linux Distros Unpatched Vulnerability : CVE-2017-8240

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In all Android releases from CAF using the Linux kernel, a kernel driver has an off-by-one buffer over- read vulnerability. CVE-2017-8240 Note that Nessus relie...

Linux Distros Unpatched Vulnerability : CVE-2020-36426

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Arm Mbed TLS before 2.24.0. mbedtlsx509crlparseder has a buffer over-read of one byte. CVE-2020-36426 Note that Nessus relies on the...

SUSE-SU-2025:02718-1 Security update for libarchive

This update for libarchive fixes the following issues: - CVE-2025-5914: Fixed double free due to an integer overflow in the archivereadformatrarseekdata function bsc1244272 - CVE-2025-5915: Fixed heap buffer over read in copyfromlzsswindow at archivereadsupportformatrar.c bsc1244273 -...

CVE-2025-27068 Buffer Over-read in Camera

Memory corruption while processing an IOCTL command with an arbitrary address...

CVE-2025-27068 Buffer Over-read in Camera

Memory corruption while processing an IOCTL command with an arbitrary address...

CVE-2025-27068

CVE-2025-27068 describes memory corruption while processing an IOCTL command with an arbitrary address, affecting Qualcomm chipsets per multiple feeds. The core issue is a problematic handling path during IOCTL processing that can lead to corruption of memory (severity High, CVSSv3.1: 7.8; Local ...

CVE-2025-27065 Buffer Over-read in WLAN Firmware

Transient DOS while processing a frame with malformed shared-key descriptor...

CVE-2025-27065 Buffer Over-read in WLAN Firmware

Transient DOS while processing a frame with malformed shared-key descriptor...

CVE-2025-27065

CVE-2025-27065 is described across multiple feeds as a transient DoS in WLAN firmware caused by a buffer over-read when processing a frame with a malformed shared-key descriptor. Affected component: Qualcomm closed‑source WLAN firmware. The CVE is listed with high severity and indicates a DoS out...

CVE-2025-21457 Buffer Over-read in Automotive OS Platform Android

Information disclosure while opening a fastrpc session when domain is not sanitized...

CVE-2025-21457 Buffer Over-read in Automotive OS Platform Android

Information disclosure while opening a fastrpc session when domain is not sanitized...

CVE-2025-21457

CVE-2025-21457 relates to an information disclosure in Qualcomm-chipset environments involving opening a fastrpc session when the domain is not sanitized. The vulnerability is described as a local impact with a CVSSv3.1 base score of 6.1 (Medium), with Confidentiality Impact: High, Integrity/Avai...

Linux Distros Unpatched Vulnerability : CVE-2020-10769

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A buffer over-read flaw was found in RH kernel versions before 5.0 in cryptoauthencextractkeys in crypto/authenc.c in the IPsec Cryptographic algorithm's module...

Linux Distros Unpatched Vulnerability : CVE-2025-2784

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skipinsightwhitespace function. Libsoup clients...

Linux Distros Unpatched Vulnerability : CVE-2019-25013

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The iconv feature in the GNU C Library aka glibc or libc6 through 2.32, when processing invalid multi- byte input sequences in the EUC-KR encoding, may have a...