20451 matches found
CVE-2025-46711 GPU DDK - NULL Pointer dereference occurs in LockHandle on bridge entry when connection misused
Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger NULL pointer dereference kernel exceptions...
CVE-2025-46711
A security vulnerability exists in the Imagination Graphics DDK suite of GPU driver tools. An unprivileged user can conduct improper GPU system calls, which triggers a NULL pointer dereference kernel exception . Specifically, the issue occurs in LockHandle on bridge entry when a connection is mis...
CVE-2025-25177
Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions...
CVE-2025-25177
A security vulnerability exists in the Imagination Graphics DDK , a suite of GPU driver tools from Imagination UK. An unprivileged user can conduct improper GPU system calls, which may trigger use-after-free (UAF) kernel exceptions . Specific details regarding the affected versions and a confirme...
DEBIAN-CVE-2025-59798
Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdfwritecmap in devices/vector/gdevpdtw.c...
Important: Red Hat Security Advisory: firefox security update
An update for firefox is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
firefox: thunderbird: Sandbox escape due to use-after-free in the Graphics: Canvas2D component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the Graphics...
firefox: thunderbird: Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to undefined behavior, invalid pointer in the Graphics...
Intel Graphics Software August 2025 Security Update
Intel has informed HP of potential security vulnerabilities for some Intel® Graphics software, which might allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the potential...
Imagination Graphics DDK 安全漏洞
Imagination Graphics DDK is a suite of GPU driver tools from Imagination UK. A security vulnerability exists in Imagination Graphics DDK, which originates from the possibility that an unprivileged user may execute an improper GPU system call, triggering a reuse-after-release kernel exception...
Imagination Graphics DDK 安全漏洞
Imagination Graphics DDK is a suite of GPU driver tools from Imagination UK. A security vulnerability exists in Imagination Graphics DDK, which originates from the possibility that an unprivileged user may execute an improper GPU system call, triggering a null pointer dereference kernel exception...
PT-2025-38690
Name of the Vulnerable Software and Affected Versions Admin and Site Enhancements ASE WordPress plugin versions prior to 7.9.8 Description The software does not properly sanitize SVG files when uploaded through the xmlrpc.php file, if SVG uploads are enabled. This could allow an attacker to uploa...
ALSA-2025:16260 Important: firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: Sandbox escape due to use-after-free in the Graphics: Canvas2D component CVE-2025-10527 firefox: thunderbird: Incorrect boundary conditions in the...
RUSTSEC-2025-0071 Incorrect handling of embedded SVG and MathML leads to mutation XSS after removal
Affected versions of this crate did not correctly strip namespace-incompatible tags in certain situations, causing it to incorrectly account for differences between HTML, SVG, and MathML. This vulnerability only has an effect when the svg or math tag is allowed, because it relies on a tag being...
drm/amd/display: Prevent crash when disable stream
...
CVE-2025-59216
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
CVE-2025-59215
Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
CVE-2025-59417
Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.129.4, there is a a cross-site scripting XSS vulnerability when handling chat message in lobe-chat that can be escalated to remote code execution on the user’s machine. In lobe-chat, when the response from the...