7447 matches found
tinyusb:msc: Crash in dcd_int_handler
Project: https://github.com/hathach/tinyusb.git Detailed Report: https://oss-fuzz.com/testcase?key=6587755753963520 Project: tinyusb Fuzzing Engine: libFuzzer Fuzz Target: msc Job Type: libfuzzerasantinyusb Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7a2cd5de5e00 Crash State:...
SUSE-SU-2025:03246-1 Security update for nvidia-open-driver-G06-signed
This update for nvidia-open-driver-G06-signed fixes the following issues: Updated CUDA variant to 580.82.07: - CVE-2025-23277: Fixed access to memory outside bounds permitted under normal use cases in NVIDIA Display Driver bsc1247528. - CVE-2025-23278: Fixed improper index validation by issuing a...
CVE-2025-54262
CVE-2025-54262 affects Adobe Substance 3D Stager (versions 3.1.3 and earlier). The vulnerability is an out-of-bounds read triggered while parsing a crafted file, which could allow an attacker to execute code in the context of the current user. Exploitation requires user interaction (victim opens ...
CVE-2023-53285
In the Linux kernel, the following vulnerability has been resolved: ext4: add bounds checking in getmaxinlinexattrvaluesize Normally the extended attributes in the inode body would have been checked when the inode is first opened, but if someone is writing to the block device while the file syste...
Linux Distros Unpatched Vulnerability : CVE-2023-53165
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - udf: Fix uninitialized array access for some pathnames For filenames that begin with . and are between 2 and 5 characters long, UDF charset conversion code woul...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to properly validate the dentry length in the efivarfsdcompare function, which could result in an...
FUSE-Rust: Uninitalized memory read and leak caused by fuser crate
During the creation of a new libfuse session with fusesessionnew, the operation list was passed as NULL incorrectly. libfuse expects this argument to always point to list of operations. This caused uninitialized memory read and leaks in libfuse.so...
GHSA-CVMJ-47V9-35M9 FUSE-Rust: Uninitalized memory read and leak caused by fuser crate
During the creation of a new libfuse session with fusesessionnew, the operation list was passed as NULL incorrectly. libfuse expects this argument to always point to list of operations. This caused uninitialized memory read and leaks in libfuse.so...
PT-2025-39505
During the creation of a new libfuse session with fuse session new, the operation list was passed as NULL incorrectly. libfuse expects this argument to always point to list of operations. This caused uninitialized memory read and leaks in libfuse.so...
Linux Distros Unpatched Vulnerability : CVE-2020-1892
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient boundary checks when decoding JSON in JSONparser allows read access to out of bounds memory, potentially leading to information leak and DOS. This...
Linux Distros Unpatched Vulnerability : CVE-2020-1918
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In-memory file operations ie: using fopen on a data URI did not properly restrict negative seeking, allowing for the reading of memory prior to the in-memory...
Linux Distros Unpatched Vulnerability : CVE-2018-14545
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There exists one invalid memory read bug in AP4SampleDescription::GetType in Ap4SampleDescription.h in Bento4 1.5.1-624, which can allow attackers to cause a...
Linux Distros Unpatched Vulnerability : CVE-2018-14544
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There exists one invalid memory read bug in AP4SampleDescription::GetFormat in Ap4SampleDescription.h in Bento4 1.5.1-624, which can allow attackers to cause a...
CVE-2025-1761
IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory...
CVE-2023-31330
An out-of-bounds read in the ASP could allow a privileged attacker with access to a malicious bootloader to potentially read sensitive memory resulting in loss of confidentiality...
CVE-2023-31330
An out-of-bounds read in the ASP could allow a privileged attacker with access to a malicious bootloader to potentially read sensitive memory resulting in loss of confidentiality...
CVE-2023-31330
CVE-2023-31330 concerns an out-of-bounds read in the ASP bootloader that could let a privileged attacker with access to a malicious bootloader read sensitive memory, leading to loss of confidentiality. The affected component is the ASP bootloader on AMD Client Processor platforms (ASP/SMM and rel...
firmware: cs_dsp: Fix OOB memory read access in KUnit test (ctl cache)
...