CVE-2025-20937: Out-of-bounds Write

Out-of-bounds write in Keymaster trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to write out-of-bounds memory...

CVE-2025-0467

Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory...

CVE-2025-0467: Use of Out-of-range Pointer Offset

Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory...

Ivanti Endpoint Manager Pointer Dereference Vulnerability

Ivanti Endpoint Manager is an enterprise-class endpoint management solution for centralized management of all types of devices including Windows, MacOS, Linux, iOS/Android mobile devices, etc. to achieve unified configuration, security control and remote operation and maintenance. A pointer...

Huawei HarmonyOS Memory Write Privilege Bypass Vulnerability

Huawei HarmonyOS is a new distributed operating system developed by Huawei for the Internet of Everything era. It aims to provide a unified operating platform for multiple devices, breaking the device limitations of traditional operating systems and creating a cross-device, cross-platform...

CVE-2025-31172

Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-31172

Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-31173

Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-31173

Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-31173

CVE-2025-31173 corresponds to a memory write permission bypass in the kernel futex module, with Huawei HarmonyOS repeatedly identified as affected. Descriptions across CNVD/CNNVD and related feeds indicate a privilege-bypass in the kernel futex path that can impact service confidentiality, with s...

CVE-2025-31172

CVE-2025-31172 describes a memory write permission bypass in Huawei HarmonyOS kernel futex module. The issue stems from the kernel’s permission verification when a low-privilege process performs a futex system call, allowing unauthorized memory write access and potentially exposing confidential d...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from the Chinese company Huawei. Huawei HarmonyOS suffers from a privilege bypass vulnerability that originates from a kernel futex module memory write privilege bypass, which can be exploited by an attacker to affect service confidentiality...

PT-2025-15180 · Huawei · Harmonyos

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A memory write permission bypass vulnerability exists in the kernel futex module. Successful exploitation of this issue may affect service confidentiality. Recommendations: At the moment,...

CVE-2025-31173: Improper Handling of Insufficient Permissions or Privileges

Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is a new distributed operating system developed by Huawei for the Internet of Everything era. It aims to provide a unified operating platform for multiple devices, breaking the device limitations of traditional operating systems and creating a cross-device, cross-platform...

CVE-2025-31172: Improper Handling of Insufficient Permissions or Privileges

Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

Imagination GPU Driver 安全漏洞

Imagination GPU Driver is a graphics driver from Imagination. A security vulnerability exists in Imagination GPU Driver that originates from the possibility that an unprivileged user could write to arbitrary physical memory pages via improper GPU system calls, potentially resulting in kernel data...

CVE-2025-0468: Improper Handling of Insufficient Permissions or Privileges

Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages. Under certain circumstances this exploit could be used to corrupt data pages not allocated by the GPU driver but memory pages in use by the kern...

PT-2025-25848

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified, specifically in the vhost-scsi completion path. The issue arises when the vhost-scsi completion path accesses vq-log base while...

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS and Apple iPadOS that originates from an out-of-bounds write that could cause...