Lucene search
+L

16748 matches found

Vulnrichment
Vulnrichment
•added 2025/10/09 3:18 a.m.•13 views

CVE-2025-27060 Untrusted Pointer Dereference in TZ Firmware

Memory corruption while performing SCM call with malformed inputs...

8.8CVSS6AI score0.00087EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/09 3:18 a.m.•47 views

CVE-2025-27060

CVE-2025-27060 describes a memory corruption vulnerability in Qualcomm chipsets TZ firmware related to System Configuration Manager (SCM) calls with malformed inputs. Multiple connected sources corroborate the issue as a memory corruption/untrusted pointer dereference scenario with high impact, i...

8.8CVSS6AI score0.00087EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/10/09 3:18 a.m.•40 views

CVE-2025-27059 Use of Out-of-range Pointer Offset in TZ Firmware

Memory corruption while performing SCM call...

8.8CVSS0.00088EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/09 3:18 a.m.•40 views

CVE-2025-27059

CVE-2025-27059 is a memory corruption issue occurring when performing an SCM call in Qualcomm TZ firmware. The CVE entry and multiple connected sources (Red Hat, NVD, CVEList, CNNVD) describe memory corruption triggered during SCM calls, with the CVEList title explicitly noting use of an out-of-r...

8.8CVSS6AI score0.00088EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/10/09 3:18 a.m.•15 views

CVE-2025-27059 Use of Out-of-range Pointer Offset in TZ Firmware

Memory corruption while performing SCM call...

8.8CVSS6AI score0.00088EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/09 3:17 a.m.•13 views

CVE-2025-27049 Buffer Over-read in Camera

Transient DOS while processing IOCTL call for image encoding...

5.5CVSS5.8AI score0.00077EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/09 3:17 a.m.•15 views

EUVD-2025-33248

Memory corruption may occur while processing IOCTL call for DMM/WARPNCC CONFIG request...

6.6CVSS6.6AI score0.00079EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/10/09 12:00 a.m.•24 views

PT-2025-41344

Name of the Vulnerable Software and Affected Versions Affected versions not specified Description A memory corruption issue exists when performing a System Configuration Manager SCM call. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

8.8CVSS6AI score0.00088EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/09 12:00 a.m.•11 views

CVE-2025-47340: Out-of-bounds Write

Memory corruption while processing IOCTL call to get the mapping...

7.8CVSS6AI score0.00087EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/09 12:00 a.m.•7 views

CVE-2025-27060: Untrusted Pointer Dereference

Memory corruption while performing SCM call with malformed inputs...

8.8CVSS6AI score0.00087EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/09 12:00 a.m.•7 views

CVE-2025-27049: Buffer Over-read

Transient DOS while processing IOCTL call for image encoding...

5.5CVSS5.8AI score0.00077EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/09 12:00 a.m.•6 views

CVE-2025-27039: Detection of Error Condition Without Action

Memory corruption may occur while processing IOCTL call for DMM/WARPNCC CONFIG request...

6.6CVSS6AI score0.00079EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/09 12:00 a.m.•8 views

CVE-2025-47349: Use of Out-of-range Pointer Offset

Memory corruption while processing an escape call...

7.8CVSS6AI score0.00087EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/09 12:00 a.m.•11 views

CVE-2025-27059: Use of Out-of-range Pointer Offset

Memory corruption while performing SCM call...

8.8CVSS6AI score0.00088EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/10/08 11:39 p.m.•13 views

SUSE CVE-2022-50521

In the Linux kernel, the following vulnerability has been resolved: platform/x86: mxm-wmi: fix memleak in mxmwmicallmxds|mx The ACPI buffer memory out.pointer returned by wmievaluatemethod is not freed after the call, so it leads to memory leak. The method results in ACPI buffer is not used, so...

5.5CVSS6AI score0.00156EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2025/10/08 11:31 p.m.•12 views

SUSE CVE-2023-53634

In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fixed a BTI error on returning to patched function When BPFTRAMPFCALLORIG is set, BPF trampoline uses BLR to jump back to the instruction next to call site to call the patched function. For BTI-enabled kernel, the...

5.5CVSS5.6AI score0.0021EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/10/08 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2023-53592

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: gpio: sifive: Fix refcount leak in sifivegpioprobe ofirqfindparent returns a node pointer wi...

5.5CVSS5.7AI score0.00145EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/10/08 12:00 a.m.•9 views

SUSE SLES15 Security Update : kernel RT (Live Patch 0 for SLE 15 SP7) (SUSE-SU-2025:03480-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03480-1 advisory. This update for the Linux Kernel 6.4.0-1507005 fixes several issues. The following security issues were fixed: - CVE-2025-38477: net/sched:...

9.8CVSS6.8AI score0.00547EPSS
SaveExploits2References7
SUSE CVE
SUSE CVE
•added 2025/10/07 11:46 p.m.•15 views

SUSE CVE-2023-53686

In the Linux kernel, the following vulnerability has been resolved: net/handshake: fix null-ptr-deref in handshakenldonedoit We should not call tracehandshakecmddoneerr if socket lookup has failed. Also we should call tracehandshakecmddoneerr before releasing the file, otherwise dereferencing...

5.5CVSS5.9AI score0.00127EPSS
SaveExploits0References15
NVD
NVD
•added 2025/10/07 8:15 p.m.•26 views

CVE-2025-44823

Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a /nagioslogserver/index.php/api/system/getusers call. This is GL:NLS475...

9.9CVSS0.16118EPSS
SaveExploits2References2
Rows per page
Query Builder