CVE-2025-20673

CVE-2025-20673 affects the MediaTek wlan STA driver. The issue is a crash triggered by an uncaught exception, enabling local denial of service with privileges at the user level and no user interaction required. The documented impact is a local DoS, with a CVSSv3.1 base score of 5.5 (MEDIUM) and a...

MediaTek Chipsets 代码问题漏洞

MediaTek Chipsets is a family of chips from China's MediaTek Corporation MediaTek. A code issue vulnerability exists in MediaTek Chipsets that stems from an uncaught exception that could lead to a local denial of service...

PT-2025-23452 · Mediatek · Mt7902 +5

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A system crash can occur in the wlan STA driver due to an uncaught exception, potentially leading to a local denial of service. This issue requires User execution privileges and does not nee...

ASB-A-387498139

In multiple locations, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2025-23449 · Unknown · Wlan Sta Driver

Name of the Vulnerable Software and Affected Versions: WLAN STA driver affected versions not specified Description: The issue is related to a possible system crash due to an uncaught exception in the wlan STA driver. This could lead to local denial of service, with user execution privileges neede...

PT-2025-23453 · Unknown · Bluetooth Driver

Name of the Vulnerable Software and Affected Versions: Bluetooth driver affected versions not specified Description: The issue is related to a possible system crash due to an uncaught exception in the Bluetooth driver, which could lead to local denial of service. User execution privileges are...

CVE-2025-27701

In the function processcryptocmd, the values of ptrsi can be potentially equal to NULL which is valid value after calling slicemaparray. Later this values will be derefenced without prior NULL check, which can lead to local Temporary DoS or OOB Read, leading to information disclosure...

Intel Data Center GPU Flex Series Access Control Error Vulnerability (CNVD-2025-21342)

Intel Data Center GPU Flex Series is Intel's high-performance GPU solution for data centers, mainly serving cloud gaming, AI visual inference, media processing and other scenarios. The Intel Data Center GPU Flex Series suffers from an Access Control Error vulnerability that stems from improper...

CVE-2025-27701

In the function processcryptocmd, the values of ptrsi can be potentially equal to NULL which is valid value after calling slicemaparray. Later this values will be derefenced without prior NULL check, which can lead to local Temporary DoS or OOB Read, leading to information disclosure...

A memory leak issue discovered in YASM v.1.3.0 allows a local attacker to cause a denial of service via the new_Token function in the modules/preprocs/nasm/nasm-pp:1512.

...

CVE-2024-45383

A mishandling of IRP requests vulnerability exists in the HDAudBusDMA interface of Microsoft High Definition Audio Bus Driver 10.0.19041.3636 WinBuild.160101.0800. A specially crafted application can issue multiple IRP Complete requests which leads to a local denial-of-service. An attacker can...

CVE-2024-34646

Improper access control in DualDarManagerProxy prior to SMR Sep-2024 Release 1 allows local attackers to cause local permanent denial of service...

CVE-2024-21806

Improper conditions check in Linux kernel mode driver for some IntelR Ethernet Network Controllers and Adapters E810 Series before version 28.3 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-23658

In camera driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution privileges needed...

CVE-2024-34742

In shouldWrite of OwnersData.java, there is a possible edge case that prevents MDM policies from being persisted due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-1193

A vulnerability was found in Navicat 12.0.29. It has been rated as problematic. This issue affects some unknown processing of the component MySQL Conecction Handler. The manipulation leads to denial of service. Attacking locally is a requirement. The exploit has been disclosed to the public and m...

CVE-2024-20016

In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation Patch ID: ALPS07835901; Issue ID: ALPS07835901...

CVE-2024-0019

In setListening of AppOpsControllerImpl.java, there is a possible way to hide the microphone privacy indicator when restarting systemUI due to a missing check for active recordings. This could lead to local denial of service with no additional execution privileges needed. User interaction is need...

CVE-2024-31203

A “CWE-121: Stack-based Buffer Overflow” in the wd210std.dll dynamic library packaged with the ThermoscanIP installer allows a local attacker to possibly trigger a Denial-of-Service DoS condition on the target component...

CVE-2024-0047

In writeUserLP of UserManagerService.java, device policies are serialized with an incorrect tag due to a logic error in the code. This could lead to local denial of service when policies are deserialized on reboot with no additional execution privileges needed. User interaction is not needed for...