638 matches found
USN-7942-2 glib2.0 vulnerabilities
USN-7942-1 fixed vulnerabilities in GLib. This update provides the corresponding updates for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. CVE-2025-3360 only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was discovered that GLib...
The vulnerability of ASDA-Soft’s software for configuring and maintaining servo drives lies in the possibility of operations going beyond the buffer in memory, which allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of ASDA-Soft software for configuring and maintaining servo drives is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 : FFmpeg vulnerabilities (USN-7982-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7982-1 advisory. It was discovered that FFmpeg did not correctly handle certain memory operations. An attacker cou...
The vulnerability of the Adobe InCopy text creation and editing software lies in the occurrence of out-of-buffer operations in memory, which allows an attacker to execute arbitrary code.
The vulnerability of the Adobe InCopy text creation and editing software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted malicious file...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000873)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000873 advisory. Multiple race conditions in ipc/shm.c in the Linux kernel before 3.12.2 allow local users to cause a denial of service use-after-free and system crash or possibly ha...
CVE-2022-35481
OTFCC v0.10.4 was discovered to contain a segmentation violation via /multiarch/memmove-vec-unaligned-erms.S...
USN-7923-1: Qt vulnerability
It was discovered that Qt did not correctly handle certain memory operations. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service or execute arbitrary code...
The vulnerability of the virtualization technology pKVM (protected Kernel-based Virtual Machine) in Android operating systems allows attackers to increase their privileges.
The vulnerability of the virtualization technology pKVM protected Kernel-based Virtual Machine in Android operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of the PlayReady TA component of MediaTek’s microprogramming software allows intruders to enhance their privileges.
The vulnerability of the PlayReady TA microprogramming software component of MediaTek is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to enhance their privileges...
The vulnerability of the SROOT component in NVIDIA’s DGX OS workstation operating system for DGX Spark artificial intelligence systems allows attackers to execute arbitrary code, replace data, cause system failures, or gain elevated privileges.
The vulnerability of the SROOT component in NVIDIA’s DGX OS workstation operating system for DGX Spark AI systems involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code, replace data, cause system...
PT-2025-54723
Out-of-bounds memory operations in org.lz4:lz4-java 1.8.0 and earlier allow remote attackers to cause denial of service and read adjacent memory via untrusted compressed input. This is fixed in a forked release: at.yawk.lz4:lz4-java version 1.8.1. The original project has been archived:...
The vulnerability of the Video Decoder component in the NVIDIA GPU Display Driver software allows a hacker to trigger a service failure.
The vulnerability of the Video Decoder component in the NVIDIA GPU Display Driver software lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to access protected information or cause system failures...
USN-7894-1: EDK II vulnerabilities
It was discovered that EDK II was susceptible to a predictable TCP Initial Sequence Number. An attacker could possibly use this issue to gain unauthorized access. This issue only affected Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. CVE-2023-45236, CVE-2023-45237 It was discovered that EDK II...
USN-7823-1 ffmpeg vulnerabilities
It was discovered that FFmpeg did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 24.04 LTS. CVE-2024-35365 It was discovered that FFmpeg did not correctly handle...
USN-7814-1 libhtp vulnerabilities
It was discovered that LibHTP did not correctly handle certain HTTP headers. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. CVE-2024-23837 It was discovered that LibH...
Ubuntu 16.04 LTS / 18.04 LTS : GStreamer Base Plugins vulnerabilities (USN-7807-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7807-1 advisory. Michael Randrianantenaina discovered that GStreamer Base Plugins did not correctly handle certain integer operations. An attacker could...
The vulnerability of the PSD File Parsing component in the FastStone Image Viewer software, which is used for viewing, editing, and managing images. This vulnerability allows attackers to execute arbitrary code.
The vulnerability of the PSD File Parsing component in the FastStone Image Viewer software, which is used for viewing, editing, and managing images, relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
USN-7807-1 gst-plugins-base1.0 vulnerabilities
Michael Randrianantenaina discovered that GStreamer Base Plugins did not correctly handle certain integer operations. An attacker could possibly use this issue to execute arbitrary code. CVE-2023-37327, CVE-2024-4453 Michael Randrianantenaina discovered that GStreamer Base Plugins did not correct...
