6406 matches found
CVE-2025-21487
CVE-2025-21487 concerns information disclosure in Qualcomm closed‑source components due to incorrect handling of RTP payload length when decoding packets. The root cause is a buffer length mismatch that can lead to over-read and leakage of information from the UE. The vulnerability is categorized...
CVE-2025-21484 Buffer Over-read in Data Network Stack & Connectivity
Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet...
CVE-2025-21484 Buffer Over-read in Data Network Stack & Connectivity
Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet...
CVE-2025-4582
Buffer Over-read, Off-by-one Error vulnerability in RTI Connext Professional Core Libraries allows File Manipulation, Overread Buffers.This issue affects Connext Professional: from 7.4.0 before 7.6.0, from 7.0.0 before 7.3.0.8, from 6.1.0 before 6.1.2.26, from 6.0.0 before 6.0., from 5.3.0 before...
CVE-2025-4582
Buffer Over-read, Off-by-one Error vulnerability in RTI Connext Professional Core Libraries allows File Manipulation, Overread Buffers.This issue affects Connext Professional: from 7.4.0 before 7.6.0, from 7.0.0 before 7.3.0.8, from 6.1.0 before 6.1.2.26, from 6.0.0 before 6.0.1.43, from 5.3.0...
CVE-2025-4582
The CVE-2025-4582 entry describes a Buffer Over-read and off-by-one error in RTI Connext Professional (Core Libraries) that could allow file manipulation. Affected versions include RTI Connext Professional 4.4a–5.2., 5.3.0–5.3. , 6.0.0–6.0.*, 6.1.0–6.1.2.26, 7.0.0–7.3.0.8, and 7.4.0–7.6.0. Remedi...
CVE-2025-4582
Buffer Over-read, Off-by-one Error vulnerability in RTI Connext Professional Core Libraries allows File Manipulation, Overread Buffers.This issue affects Connext Professional: from 7.4.0 before 7.6.0, from 7.0.0 before 7.3.0.8, from 6.1.0 before 6.1.2.26, from 6.0.0 before 6.0.1.43, from 5.3.0...
CVE-2025-4582 Buffer Over-read, Off-by-one Error vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation, Overread Buffers.
Buffer Over-read, Off-by-one Error vulnerability in RTI Connext Professional Core Libraries allows File Manipulation, Overread Buffers.This issue affects Connext Professional: from 7.4.0 before 7.6.0, from 7.0.0 before 7.3.0.8, from 6.1.0 before 6.1.2.26, from 6.0.0 before 6.0.1.43, from 5.3.0...
dovecot: Fix of CVE-2020-12673
CVE-2020-12673: fix reading past buffer...
CLSA-2025-1758645976 dovecot: Fix of CVE-2020-12673
CVE-2020-12673: fix reading past buffer...
PT-2025-39194
Name of the Vulnerable Software and Affected Versions RTI Connext Professional versions 4.4a through 5.2. RTI Connext Professional versions 5.3.0 through 5.3. RTI Connext Professional versions 6.0.0 through 6.0. RTI Connext Professional versions 6.1.0 through 6.1.2.26 RTI Connext Professional...
RTI Connext Professional 安全漏洞
RTI Connext Professional is a connectivity platform from RTI USA designed to meet the demanding requirements of the Industrial Internet of Things IIoT. A security vulnerability exists in RTI Connext Professional versions prior to 7.6.0, prior to 7.3.0.8, prior to 6.1.2.26, 6.0 and prior, 5.3 and...
PT-2025-44112
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0-rc4-syzkaller-00261-g850925a8133c Description The Linux kernel contains a flaw within the UDF filesystem implementation. Specifically, the handling of Allocation Extent Descriptors lacks proper validation ...
The vulnerability of the WebPage rendering modules in WebKitGTK and WebKit, related to reading data beyond the allowed buffer limits, allows attackers to gain unauthorized access to protected information.
The vulnerability of WebPageView and WebKit modules relates to reading data beyond the allowed buffer limits. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Dassault Systèmes eDrawings Viewer PAR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...
SUSE-SU-2025:03257-1 Security update for raptor
This update for raptor fixes the following issues: - CVE-2024-57823: Fixed integer underflow when normalizing a URI with the turtle parser bsc1235673. - CVE-2024-57822: Fixed heap buffer overread when parsing triples with the nquads parser bsc1235674...
Security update for raptor
This update for raptor fixes the following issues: CVE-2024-57823: Fixed integer underflow when normalizing a URI with the turtle parser bsc1235673 CVE-2024-57822: Fixed heap buffer overread when parsing triples with the nquads parser bsc1235674 Patch Instructions: To install this SUSE update use...
CLSA-2025-1758102067 php: Fix of CVE-2020-7059
CVE-2020-7059: fix read past the allocated buffer in the fgetss function...
The vulnerability of the fd_index() function in the program, which is used for querying and managing Udisks storage devices, allows a malicious actor to escalate their privileges and cause service failures.
The vulnerability of the fdindex function in the Udisks device management and storage-related operations is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to increase their privileges and cause service failures...