4863 matches found
CVE-2025-40354
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: increase max link count and fix link-enc NULL pointer access why 1. dc-linksMAXLINKS array size smaller than actual requested. maxconnector + maxdpia + 4 virtual = 14. increase from 12 to 14. 2. hwinit access nul...
CVE-2025-40354 drm/amd/display: increase max link count and fix link->enc NULL pointer access
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: increase max link count and fix link-enc NULL pointer access why 1. dc-linksMAXLINKS array size smaller than actual requested. maxconnector + maxdpia + 4 virtual = 14. increase from 12 to 14. 2. hwinit access nul...
CVE-2025-40354
CVE-2025-40354 affects the Linux kernel DRM/AMD display stack. The root cause is an undersized dc->links[MAX_LINKS] array (max_connector + max_dpia + 4) causing a NULL pointer access to LINK_ENC in hw_init() for dpia non display_endpoint. The patch increases the max link count from 12 to 14 (f...
DEBIAN-CVE-2025-67735
Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.129.Final and 4.2.8.Final, the io.netty.handler.codec.http.HttpRequestEncoder has a CRLF injection with the request URI when constructing a request. This leads to request smuggling when HttpRequestEncod...
CVE-2025-67735
Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.129.Final and 4.2.8.Final, the io.netty.handler.codec.http.HttpRequestEncoder has a CRLF injection with the request URI when constructing a request. This leads to request smuggling when HttpRequestEncod...
CVE-2025-67735
Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.129.Final and 4.2.8.Final, the io.netty.handler.codec.http.HttpRequestEncoder has a CRLF injection with the request URI when constructing a request. This leads to request smuggling when HttpRequestEncod...
UBUNTU-CVE-2025-67735
Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.129.Final and 4.2.8.Final, the io.netty.handler.codec.http.HttpRequestEncoder has a CRLF injection with the request URI when constructing a request. This leads to request smuggling when HttpRequestEncod...
EUVD-2025-203450
Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.129.Final and 4.2.8.Final, the io.netty.handler.codec.http.HttpRequestEncoder has a CRLF injection with the request URI when constructing a request. This leads to request smuggling when HttpRequestEncod...
CVE-2025-67735 Netty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoder
Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.129.Final and 4.2.8.Final, the io.netty.handler.codec.http.HttpRequestEncoder has a CRLF injection with the request URI when constructing a request. This leads to request smuggling when HttpRequestEncod...
CVE-2025-67735 Netty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoder
Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.129.Final and 4.2.8.Final, the io.netty.handler.codec.http.HttpRequestEncoder has a CRLF injection with the request URI when constructing a request. This leads to request smuggling when HttpRequestEncod...
ScamSweeper: Detecting Illegal Accounts in Web3 Scams Via Transactions Analysis
The web3 applications have recently been growing, especially on the Ethereum platform, starting to become the target of scammers. The web3 scams, imitating the services provided by legitimate platforms, mimic regular activity to deceive users. However, previous studies have primarily concentrated...
GHSA-84H7-RJJ3-6JX4 Netty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoder
Summary The io.netty.handler.codec.http.HttpRequestEncoder CRLF injection with the request uri when constructing a request. This leads to request smuggling when HttpRequestEncoder is used without proper sanitization of the uri. Details The HttpRequestEncoder simply UTF8 encodes the uri without...
checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr
Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=5027326644781056 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...
PT-2026-37583
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A crash occurs in the AMD Linux display driver when attempting to access the link enc on a dpia link. This issue is related to a missing signal type check in the get phyd32clk src functi...
BIT-NGINX-GATEWAY-2024-32760 NGINX HTTP/3 QUIC vulnerability
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 encoder instructions can cause NGINX worker processes to terminate or cause or other potential impact...
The vulnerability of the sixeldebug_print_palette function in the src/encoder.c file of the SIXEL Libsixel encoder/decoder implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the sixeldebugprintpalette function in the src/encoder.c file of the SIXEL Libsixel encoder/decoder implementation is related to the occurrence of operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to compromise the...
Vulnerability of the dpu_encoder_helper_phys_cleanup() function in the drivers/gpu/drm/msm/disp/dpu1/dpu_encoder.c module – A driver for supporting Direct Rendering Infrastructure (DRI) in Linux kernels, which can be exploited by attackers to cause service failures.
Vulnerability of the dpuencoderhelperphyscleanup function in the drivers/gpu/drm/msm/disp/dpu1/dpuencoder.c module – The Linux kernel’s DRI support driver has a vulnerability related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an...
The vulnerability of BERT, the language model encoder for NVIDIA NeMo’s complex platform for training and applying neural networks in speech processing and natural language processing, allows a perpetrator to execute arbitrary code, gain unauthorized access to protected information, or replace data.
The vulnerability of BERT, the language model encoder for NVIDIA NeMo’s complex platform used for training and applying neural networks in speech processing and natural language processing, relates to improper code generation management. Exploiting this vulnerability can allow attackers to genera...
PT-2025-51671
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the multiq3 driver related to configuration options within the multiq3 attach function. Syzbot identified that crafted configuration options,...