CVE-2025-29974

Integer underflow wrap or wraparound in Windows Kernel allows an unauthorized attacker to disclose information over an adjacent network...

CVE-2025-29974

Integer underflow wrap or wraparound in Windows Kernel allows an unauthorized attacker to disclose information over an adjacent network...

gstreamer1-plugins-good: integer underflow in extract_cc_from_data leading to OOB-read

A flaw was found in the GStreamer library. Integer underflow in the MP4/MOV demuxer can cause crashes for certain input files, potentially allowing a malicious actor to trigger an application crash...

gstreamer1-plugins-good: OOB-read in FOURCC_SMI_ parsing

A flaw was found in the GStreamer library. An integer underflow due to missing size checks in the MP4/MOV demuxer can lead to out-of-bounds reads and cause crashes for certain input files. This issue can allow a malicious actor to trigger a crash of the application...

Windows Kernel Information Disclosure Vulnerability

Integer underflow wrap or wraparound in Windows Kernel allows an unauthorized attacker to disclose information over an adjacent network...

Adobe Photoshop 数字错误漏洞

Adobe Photoshop is a set of image processing software from the American company Audobee Adobe. The software is mainly used for processing pictures. Adobe Photoshop suffers from a numeric error vulnerability that originates from an integer underflow, which can be exploited by an attacker to execut...

PT-2025-21019 · Adobe · Animate

Name of the Vulnerable Software and Affected Versions: Animate versions 24.0.8, 23.0.11 and earlier Description: The issue is an Integer Underflow Wrap or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires...

PT-2025-21024 · Bridge · Bridge

Name of the Vulnerable Software and Affected Versions: Bridge versions 15.0.3, 14.1.6 and earlier Description: The issue is an Integer Underflow Wrap or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires...

Adobe Photoshop 25.x < 25.12.3 / 26.x < 26.6 Multiple Vulnerabilities (macOS APSB25-40)

The version of Adobe Photoshop installed on the remote macOS or Mac OS X host is prior to 25.12.3/26.6. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb25-40 advisory. - Photoshop Desktop versions 26.5, 25.12.2 and earlier are affected by an Access of Uninitialized...

Adobe Bridge 14.x < 14.1.7 / 15.x < 15.0.4 Multiple Vulnerabilities (APSB25-44)

The version of Adobe Bridge installed on the remote Windows host is prior to 14.1.7 or 15.0.4. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb25-44 advisory. - Bridge versions 15.0.3, 14.1.6 and earlier are affected by an Integer Overflow or Wraparound vulnerabili...

Adobe Animate 23.x < 23.0.12 / 24.x < 24.0.9 Multiple Vulnerabilities (APSB25-42)

The version of Adobe Animate installed on the remote Windows host is prior to 23.0.12 or 24.0.9. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb25-42 advisory. - Animate versions 24.0.8, 23.0.11 and earlier are affected by an Access of Uninitialized Pointer...

PT-2025-20976 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to an integer underflow wrap or wraparound in the Windows Kernel, allowing an unauthorized attacker to disclose information over an adjacent network. This...

PT-2025-21013 · Adobe · Photoshop Desktop

Name of the Vulnerable Software and Affected Versions: Photoshop Desktop versions 26.5, 25.12.2 and earlier Description: The issue is an Integer Underflow Wrap or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...

K000151255: GStreamer vulnerability CVE-2024-47606

Security Advisory Description GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemuxparsetheoraextension within qtdemux.c. The vulnerability occurs due to an underflow of the gint size variable, which causes size...

CVE-2023-53068

In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Limit packet length to skb-len Packet length retrieved from descriptor may be larger than the actual socket buffer length. In such case the cloned skb passed up the network stack will leak kernel memory content...

SUSE CVE-2023-53068

In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Limit packet length to skb-len Packet length retrieved from descriptor may be larger than the actual socket buffer length. In such case the cloned skb passed up the network stack will leak kernel memory content...

CVE-2023-53068

In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Limit packet length to skb-len Packet length retrieved from descriptor may be larger than the actual socket buffer length. In such case the cloned skb passed up the network stack will leak kernel memory content...

AZL-70126 CVE-2023-53068 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Limit packet length to skb-len Packet length retrieved from descriptor may be larger than the actual socket buffer length. In such case the cloned skb passed up the network stack will leak kernel memory content...

CVE-2023-53068

In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Limit packet length to skb-len Packet length retrieved from descriptor may be larger than the actual socket buffer length. In such case the cloned skb passed up the network stack will leak kernel memory content...

CVE-2023-53068 net: usb: lan78xx: Limit packet length to skb->len

In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Limit packet length to skb-len Packet length retrieved from descriptor may be larger than the actual socket buffer length. In such case the cloned skb passed up the network stack will leak kernel memory content...