USN-7346-3 opensc vulnerabilities

USN-7346-1 fixed vulnerabilities in OpenSC. The update introduced a regression which broke smartcard based authentication. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that OpenSC did not correctly handle certain memory operations...

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.

...

The vulnerability of Google Chrome and Microsoft Edge browsers, related to the ability to utilize memory after deallocation, allows attackers to influence the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability can allow a malicious actor to influence the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Windows Hyper-V hardware virtualization system allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows Hyper-V hardware virtualization system is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Vulnerability of the dm9000_drv_remove() function in the drivers/net/ethernet/davicom/dm9000.c module – This driver provides support for Ethernet adapter devices in Linux operating systems. It can be exploited by attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the dm9000drvremove function in the drivers/net/ethernet/davicom/dm9000.c module – The Ethernet adapter driver from Davicom’s Linux kernel has a vulnerability related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromi...

The vulnerability of the padata_free_shell() function in the kernel/padata.c module of the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the padatafreeshell function in the kernel/padata.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the professional video editing software Adobe Premiere Pro, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of the professional video editing software Adobe Premiere Pro lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Microsoft Office and Microsoft 365 Apps for Enterprise software lies in the use of memory after it is released, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Office and Microsoft 365 Apps for Enterprise software packages is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

CVE-2025-27732

CVE-2025-27732 is a Windows Graphics Component Elevation of Privilege vulnerability in the Win32K GRFX subsystem. The flaw stems from Sensitive data stored in improperly locked memory in the GRFX path, enabling an authorized, local attacker to elevate privileges. The vulnerability affects Windows...

CVE-2025-20948

Summary : CVE-2025-20948 describes an out-of-bounds read in the enrollment with the cdsp frame secfr trustlet on Samsung devices, affecting versions prior to the SMR Apr-2025 Release 1. Impact : local privileged attackers could read out-of-bounds memory. Affected scope : Samsung mobile devices wi...

CVE-2025-31173

Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-31172

Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-31172

Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to memory usage after it is released, allowing attackers to trigger a service failure and gain unauthorized access to protected information.

The vulnerability of software for modeling, designing, and drawing in AutoCAD is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to cause a service failure and gain unauthorized access to protected information using a specially created 3DM fi...

The vulnerability of software for modeling, design, and drawing in AutoCAD, related to reading data outside of the buffer in memory, allows a perpetrator to cause a service failure.

The vulnerability of software for modeling, design, and drawing in AutoCAD is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created CATPART file...

The vulnerability of the xsltGetInheritedNsList function in the libxslt library allows a attacker to influence the integrity and accessibility of the protected information.

The vulnerability of the xsltGetInheritedNsList function in the libxslt library is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...

Mozilla -- stack memory read

[email protected] reports: An attacker could read 32 bits of values spilled onto the stack in a JIT compiled function...

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for the iPad tablet computer. A security vulnerability exists in Apple iOS and Apple iPadOS that stems from a memory handling issue that cou...

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS and Apple iPadOS that stems from a memory handling issue that could result in...

CVE-2023-37405

IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, and 2.3.4.1 stores sensitive data in memory, that could be obtained by an unauthorized user...