The vulnerability of the Wlan AP Driver software driver in MediaTek microprogramming chips allows attackers to enhance their privileges and disclose protected information.

The vulnerability of the Wlan AP Driver software driver from MediaTek relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow attackers to enhance their privileges and disclose sensitive information...

The vulnerability of the amdgpu_unmap_static_csa() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_csa.c file of the Linux kernel’s Direct Rendering Infrastructure (DRI) AMD GPU driver allows a malicious actor to cause a system crash.

The vulnerability of the amdgpuunmapstaticcsa function in the drivers/gpu/drm/amd/amdgpu/amdgpucsa.c file of the Linux kernel’s Direct Rendering Infrastructure DRI AMD GPU driver is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability in the driver/net/wwan/t7xx/t7xx_netdev.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/net/wwan/t7xx/t7xxnetdev.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2025-31745

Name of the Vulnerable Software and Affected Versions NVIDIA Display Driver for Linux and Windows affected versions not specified Description The NVIDIA Display Driver for Linux and Windows contains an issue in the kernel mode driver that could allow an attacker to access memory outside of...

The vulnerability in the driver module drivers/net/vxlan/vxlan_core.c of Linux operating systems allows a attacker to compromise the integrity of protected information.

The vulnerability in the drivers/net/vxlan/vxlancore.c module of Linux operating systems is related to the state of the network competition. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected information...

The vulnerability of the sun8i-ce_cipher_prepare() function in the drivers/crypto/allwinner/sun8i-ce/sun8i-ce-cipher.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the sun8i-cecipherprepare function in the drivers/crypto/allwinner/sun8i-ce/sun8i-ce-cipher.c module of the Linux operating system is related to improper release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition

...

The vulnerability of the MBT Transport Driver for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the MBT Transport Driver driver for Windows operating systems is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

CVE-2025-20693

In wlan STA driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09812521; Issue ID: MSV-34...

The vulnerability of the Windows operating system’s tcpip.sys driver allows attackers to increase their privileges.

The vulnerability of the Windows TCP/IP.sys driver is related to the assignment of the null pointer. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Vulnerability of the drm_mode_page_flip_ioctls function in the drivers/gpu/drm/drm_plane.c module – A driver for supporting Direct Rendering Infrastructure (DRI) in the Linux operating system, which allows a hacker to trigger a service failure.

Vulnerability of the drmmodepageflipioctls function in the drivers/gpu/drm/drmplane.c module – The Linux kernel’s Direct Rendering Infrastructure DRI driver has vulnerabilities related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to...

CVE-2025-49661 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2025-20687

In Bluetooth driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418045; Issue ID: MSV-3481...

CVE-2025-20691

In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418039; Issue ID: MSV-3477...

CVE-2025-20681

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416936; Issue ID: MSV-3446...

CVE-2025-20687

In Bluetooth driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418045; Issue ID: MSV-3481...

CVE-2025-20687

In Bluetooth driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418045; Issue ID: MSV-3481...

CVE-2025-20687

CVE-2025-20687 affects the Bluetooth driver (MediaTek chipset family in various advisories). The vulnerability is an out-of-bounds read caused by an incorrect bounds check, enabling local denial of service with the attacker gaining user privileges; exploitation does not require user interaction. ...

CVE-2025-20680

In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418044; Issue ID: MSV-3482...

CVE-2025-20680

CVE-2025-20680 affects the Bluetooth driver, with an out-of-bounds write caused by an incorrect bounds check. The vulnerability can lead to local escalation of privilege with User execution privileges required and no user interaction needed. Patch ID: WCNCR00418044; Issue ID: MSV-3482. Vulnerabil...