PT-2025-32139

Name of the Vulnerable Software and Affected Versions: Bluetooth Host affected versions not specified Description: A memory corruption issue exists while processing IOCTL commands with larger buffers in the Bluetooth Host. Recommendations: At the moment, there is no information about a newer...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/hns: Fixed a soft lockup that occurred during the loop that allocates BT pages. The driver executes a for-loop when allocating BT pages and mapping them with buffer pages. When allocating a large buffer e.g., an MR of ove...

CVE-2023-21640

Memory corruption in Linux when the file upload API is called with parameters having large buffer...

AZL-59852 CVE-2025-22010 affecting package kernel for versions less than 6.6.85.1-2

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix soft lockup during bt pages loop Driver runs a for-loop when allocating bt pages and mapping them with buffer pages. When a large buffer e.g. MR over 100GB is being allocated, it may require a considerable loop coun...

UBUNTU-CVE-2025-22010

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix soft lockup during bt pages loop Driver runs a for-loop when allocating bt pages and mapping them with buffer pages. When a large buffer e.g. MR over 100GB is being allocated, it may require a considerable loop coun...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a buffer overwrite problem when using buffers larger than 32. No details of the vulnerability are provided a...

netty: SniHandler 16MB allocation leads to OOM

A flaw was found in Netty's SniHandler while navigating TLS handshake which may permit a large heap allocation if the handler did not have a timeout configured. This issue may allow an attacker to send a client hello packet which would cause the server to buffer large amounts of data per...

SUSE CVE-2016-7422

The virtqueuemapdesc function in hw/virtio/virtio.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service NULL pointer dereference and QEMU process crash via a large I/O descriptor buffer length value...

SUSE CVE-2022-30634

Infinite loop in Read in crypto/rand before Go 1.17.11 and Go 1.18.3 on Windows allows attacker to cause an indefinite hang by passing a buffer larger than 1 32 - 1 bytes...

GO-2022-0477 Indefinite hang with large buffers on Windows in crypto/rand

On Windows, rand.Read will hang indefinitely if passed a buffer larger than 1 32 - 1 bytes...

Uncontrolled Recursion

Overview std/crypto/rand is a Go standard library package std/crypto/rand Affected versions of this package are vulnerable to Uncontrolled Recursion. Go Vulnerability Report: in the rand.Read function on Windows when a buffer larger than 1 32 - 1 bytes is provided. An attacker can cause the proce...

usbredirparser 资源管理错误漏洞

usbredirparser is checking header length deserialized data. A resource management error vulnerability exists in usbredirparser that stems from a use-after vulnerability found in usbredirparser serialize in usbredirparser usbredirparser.c in versions of usbredirparser prior to 0.11.0. This issue...

CVE-2021-32627

Redis is an open source, in-memory database that persists on disk. In affected versions an integer overflow bug in Redis can be exploited to corrupt the heap and potentially result with remote code execution. The vulnerability involves changing the default proto-max-bulk-len and...

USN-4759-1 glib2.0 vulnerabilities

Krzesimir Nowak discovered that GLib incorrectly handled certain large buffers. A remote attacker could use this issue to cause applications linked to GLib to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2021-27218 Kevin Backhouse discovered that GLib incorrect...

The vulnerability of Google Chrome browser allows a malicious actor to trigger a service failure.

The Google Chrome browser contains a vulnerability related to excessively large values of integer-type data in the InMemoryUrlProtocol::Read function found in media/filters/inmemoryurlprotocol.cc. Exploiting this vulnerability allows malicious actors to induce a denial-of-service attack by using ...

UBUNTU-CVE-2014-1746

The InMemoryUrlProtocol::Read function in media/filters/inmemoryurlprotocol.cc in Google Chrome before 35.0.1916.114 relies on an insufficiently large integer data type, which allows remote attackers to cause a denial of service out-of-bounds read via vectors that trigger use of a large buffer...