843 matches found
UBUNTU-CVE-2025-6712
MongoDB Server may be susceptible to disruption caused by high memory usage, potentially leading to server crash. This condition is linked to inefficiencies in memory management related to internal operations. In scenarios where certain internal processes persist longer than anticipated, memory...
CVE-2025-6712
MongoDB Server (MongoDB Server v8.0.x prior to 8.0.10) is affected by a DoS risk due to high memory usage. The issue stems from inefficient memory management in internal operations, where certain internal processes persisting longer than expected can cause memory consumption to spike, potentially...
CVE-2025-38116
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix uaf in ath12kcoreinit When the execution of ath12kcorehwgroupassign or ath12kcorehwgroupcreate fails, the registered notifier chain is not unregistered properly. Its memory is freed after rmmod, which may trigge...
CVE-2025-49763
CVE-2025-49763 affects Apache Traffic Server via the ESI plugin. The vulnerability arises when ESI requests stack with no limit on inclusion depth, allowing memory exhaustion and potential DoS on ATS nodes. Affected versions are ATS 10.0.0–10.0.5 and 9.0.0–9.2.10. Remediation is to upgrade to 9.2...
CVE-2022-50188 drm/meson: Fix refcount leak in meson_encoder_hdmi_init
In the Linux kernel, the following vulnerability has been resolved: drm/meson: Fix refcount leak in mesonencoderhdmiinit offinddevicebynode takes reference, we should use putdevice to release it when not need anymore. Add missing putdevice in error path to avoid refcount leak...
TencentOS Server 3: nodejs:18 (TSSA-2024:0766)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0766 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
KB5060842: Windows 11 Version 24H2 / Windows Server 2025 Security Update (June 2025)
The remote Windows host is missing security update 5060842 or Hot Patch 5060841. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network. CVE-2025-33066 -...
CVE-2025-20993
Out-of-bounds write in libsecimaging.camera.samsung.so prior to SMR Jun-2025 Release 1 allows local attackers to write out-of-bounds memory...
PT-2025-23754 · Samsung · Libsecimaging.Camera.Samsung.So
Name of the Vulnerable Software and Affected Versions: libsecimaging.camera.samsung.so versions prior to SMR Jun-2025 Release 1 Description: The issue is an out-of-bounds write that allows local attackers to write out-of-bounds memory. This can be exploited by local attackers. Recommendations: Fo...
CVE-2025-44906
CVE-2025-44906 : jhead v3.08 contains a heap-use-after-free in the ProcessFile function (jhead.c), causing memory corruption. Public sources describe an application‑level issue upon processing crafted JPEG files; CVSSv3.1 base score is 7.8 (HIGH) with local access and user interaction required. T...
The vulnerability of the Mojo library for Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code.
The vulnerability of the Mojo library for Google Chrome and Microsoft Edge browsers stems from the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
ABB M2M Gateway Uncontrolled Resource Consumption in embedded Bind (CVE-2023-3341)
The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of available stack memory,...
CVE-2024-25452
Bento4 v1.6.0-640 was discovered to contain an out-of-memory bug via the AP4UrlAtom::AP4UrlAtom function...
CVE-2024-6609
When almost out-of-memory an elliptic curve key which was never allocated could have been freed again. This vulnerability affects Firefox 128 and Thunderbird 128...
CVE-2023-25656
notation-go is a collection of libraries for supporting Notation sign, verify, push, and pull of oci artifacts. Prior to version 1.0.0-rc.3, notation-go users will find their application using excessive memory when verifying signatures. The application will be killed, and thus availability is...
CVE-2022-48292
The Bluetooth module has an out-of-memory OOM vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...
CVE-2022-35009
PNGDec commit 8abf6be was discovered to contain a memory allocation problem via asanmalloclinux.cpp...
CVE-2022-29546
HtmlUnit NekoHtml Parser before 2.61.0 suffers from a denial of service vulnerability. Crafted input associated with the parsing of Processing Instruction PI data leads to heap memory consumption. This is similar to CVE-2022-28366 but affects a much later version of the product...