SUSE SLES16: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2025:21211-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:21211-1 advisory. - CVE-2025-62594: unsigned underflow and division-by-zero can lead to OOB pointer arithmetic and process crash bsc1252749. -...

openSUSE 16 Security Update : ImageMagick (openSUSE-SU-2025:20162-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025:20162-1 advisory. - CVE-2025-62594: unsigned underflow and division-by-zero can lead to OOB pointer arithmetic and process crash bsc1252749. - CVE-2025-57807:...

Fedora 42 : cups (2025-c09b980696)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-c09b980696 advisory. fix possible issue reported by OSH ---- 2.4.16 fedora2417970 rebuild due binutils bug fedora2418285 fix division by zero crash in pstops fedora24153...

CVE-2025-68291 mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose().

In the Linux kernel, the following vulnerability has been resolved: mptcp: Initialise rcvmss before calling tcpsendactivereset in mptcpdofastclose. syzbot reported divide-by-zero in tcpselectwindow by MPTCP socket. 0 We had a similar issue for the bare TCP and fixed in commit 499350a5a6e7 "tcp:...

SUSE-SU-2025:21211-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2025-62594: unsigned underflow and division-by-zero can lead to OOB pointer arithmetic and process crash bsc1252749. - CVE-2025-57807: BlobStream Forward-Seek Under-Allocation bsc1249362. - CVE-2025-62171: incomplete fix for integer...

OPENSUSE-SU-2025:20162-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2025-62594: unsigned underflow and division-by-zero can lead to OOB pointer arithmetic and process crash bsc1252749. - CVE-2025-57807: BlobStream Forward-Seek Under-Allocation bsc1249362. - CVE-2025-62171: incomplete fix for integer...

SUSE CVE-2023-53783

In the Linux kernel, the following vulnerability has been resolved: blk-iocost: fix divide by 0 error in calclcoefs echo max of u64 to cost.model can cause divide by 0 error. echo 8:0 rbps=18446744073709551615 /sys/fs/cgroup/io.cost.model divide error: 0000 1 PREEMPT SMP RIP:...

lwext4 Heap Buffer Overflow DoS

The vulnerability of the ext4blocksetlbsize function in the lwext4 library, which can be exploited by dividing by zero when processing an incorrect ext4 image. Exploiting this vulnerability may allow a remote attacker to cause service interruptions...

PT-2025-54851

Уязвимость функции ext4 block set lb size библиотеки lwext4, связанная с делением на ноль при обработке некорректного ext4-образа. Эксплуатация уязвимости, может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...

PT-2025-55015

Уязвимость функции nv3 arb модуля drivers/video/fbdev/riva/riva hw.c ядра операционной системы Linux связана с ошибочным делением на ноль. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2026-26126

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.18.0-rc1+ Description The Linux kernel contains a flaw within the RIVA NV3 arbitration code. A userspace program can trigger this code by calling the FBIOPUT VSCREENINFO ioctl on /dev/fb. The driver recalculate...

Linux x86/cpu/hygon kernel DoS

The vulnerability of the x86/cpu/hygon kernel component in the Linux operating system is related to the lack of checks for division by zero. Exploiting this vulnerability allows an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the findHWThreadMask function in the drivers/infiniband/hw/hfi1/affinity.c file of the Linux kernel is related to the lack of a check for division by zero. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the...

USN-7888-1 mupdf vulnerabilities

It was discovered that MuPDF could be made to divide by zero. An attacker could possibly use this issue to cause a denial of service. CVE-2023-51103, CVE-2023-51104, CVE-2023-51105, CVE-2023-51106 It was discovered that MuPDF incorrectly handled memory under certain circumstances, which could lea...

PT-2026-37522

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A division by zero issue exists in the media: ccs component. The driver fails to verify that the MIN X OUTPUT SIZE limit register's value is non-zero when calculating the maximum M for...

Denial Of Service (DoS)

ImageMagick is vulnerable to Denial of Service DoS. The vulnerability is due to unsigned integer underflow and division-by-zero conditions in the CLAHEImage function when tile width or height is zero, which allows an attacker to trigger out-of-bounds memory access or application crashes by...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-47663)

staging: iio: frequency: ad9834: In ad9834writefrequency clkgetrate can return 0. In such case ad9834calcfreqreg call will lead to division by zero. Checking 'if fout clkfreq / 2' doesn't protect in case of 'fout' is 0. ad9834writefrequency is called from ad9834write, where fout is taken from tex...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-50287)

media: v4l2-tpg: prevent the risk of a division by zero As reported by Coverity, the logic at tpgprecalculateline blindly rescales the buffer even when scaledwitdh is equal to zero. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46676)

nfc: pn533: Add poll mod list filling check. In case of improtocols value is 1 and tmprotocols value is 0 this combination successfully passes the check 'if !improtocols && !tmprotocols' in the nfcstartpoll. But then after pn533pollcreatemodlist call in pn533startpoll poll mod list will remain...

Siemens SCALANCE and RUGGEDCOM Devices Divide By Zero (CVE-2024-56567)

ad7780: division by zero in ad7780writeraw In the ad7780writeraw , val2 can be zero, which might lead to a division by zero error in DIVROUNDCLOSEST. The ad7780writeraw is based on iioinfo's writeraw. While val is explicitly declared that can be zero in read mode, val2 is not specified to be...