CVE-2023-53707 drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix integer overflow in amdgpucspass1 The type of size is unsigned int, if size is 0x40000000, there will be an integer overflow, size will be zero after size = sizeofuint32t, will cause uninitialized memory to be...

CVE-2023-53707 drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix integer overflow in amdgpucspass1 The type of size is unsigned int, if size is 0x40000000, there will be an integer overflow, size will be zero after size = sizeofuint32t, will cause uninitialized memory to be...

CVE-2023-53707

CVE-2023-53707 concerns the Linux kernel DRM/AMDGPU driver: amdgpu_cs_pass1 contains an unsigned int overflow when size equals 0x40000000, causing size to become 0 after size *= sizeof(uint32_t) and potentially referencing uninitialized memory. The issue is in the amdgpu_cs_pass1 path of the AMDG...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from an integer overflow and could lead to unexpected behavior...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an integer overflow in the amdgpucspass1 function, which could lead to references to uninitialized memory...

FreeBSD : Mozilla -- integer overflow (c7383de4-ab7a-11f0-b961-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the c7383de4-ab7a-11f0-b961-b42e991fc52e advisory. [email protected] reports: Integer overflow in the SVG component Tenable has extracted the preceding...

JLSEC-2025-178 The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based...

The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench...

gstreamer: EXIF Metadata Parsing Integer Overflow

A flaw was found in the GStreamer library. This flaw allows a remote attacker to send specially crafted content to the victim, allowing for arbitrary code execution within the context of the affected installation's process. The vulnerability is caused by improper parsing of EXIF metadata and a la...

Moderate: Red Hat Security Advisory: Automotive bug fix and enhancement update

An update for gstreamer1, gstreamer1-plugins-bad-free, gstreamer1-plugins-ugly-free, and gstreamer1-rtsp-server is now available for Red Hat In-Vehicle-OS version 1.0.0. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987584)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987584 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: prevent integer overflow on 32 bit systems On a 32 bit system, the len sizeofp operation ca...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987691)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987691 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Fix potential integer multiplication overflow errors When multiplying of different...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-987675)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987675 advisory. In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd: fix potential integer overflow on shift of a int The left shift of int 32 bit integ...

AlmaLinux 9 : perl-JSON-XS (ALSA-2025:17162)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2025:17162 advisory. JSON-XS: integer buffer overflow causing a segfault when parsing crafted JSON CVE-2025-40928 Tenable has extracted the preceding description block directly from t...

CVE-2025-11680

CVE-2025-11680 affects libwebsockets’ unfilter_scanline in the warmcat library. When compiled with LWS_WITH_UPNG and the HTML display stack is used, a crafted PNG with a large width can trigger an integer overflow that determines the size of a heap allocation, enabling an out-of-bounds write and ...

📄 Transmission Torrent Parsing Integer Overflows

Torrent file parsing in Transmission suffers from multiple integer overflow vulnerabilities. I took a look at torrent file parsing in libtransmission, there are a few integer overflows because the trnew/trnew0 allocation wrappers don't handle overflow. define trnewstructtype, nstructs \ structtyp...

JLSEC-2025-155 GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in...

GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in goptiongroupaddentries. NOTE: the vendor's position is "Realistically this is not a security issue. The standard pattern is for callers to provide a static list of option entries in a fixed number of...

JLSEC-2025-157 An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3

An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function gbytesnew has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption...

JLSEC-2025-137 FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an...

FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting in a denial-of-service DoS condition...

JLSEC-2025-145 FFmpeg n6.1.1 has a vulnerability in the DXA demuxer of the libavformat library allowing for an...

FFmpeg n6.1.1 has a vulnerability in the DXA demuxer of the libavformat library allowing for an integer overflow, potentially resulting in a denial-of-service DoS condition or other undefined behavior...

JLSEC-2025-139 An integer overflow in the component `/libavformat/westwood_vqa.c` of FFmpeg n6.1.1 allows attackers...

An integer overflow in the component /libavformat/westwoodvqa.c of FFmpeg n6.1.1 allows attackers to cause a denial of service in the application via a crafted VQA file...