Underflow in aes_key_unwrap function

The aeskeyunwrap function would panic if passed a ciphertext that was too short. In a debug build, it would panic due to a subtraction underflow. In a release build, it would use the small negative quantity to allocate a vector. Since the allocator expects an unsigned quantity, the negative value...

CVE-2025-27917

An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android before 8.0.0. Remote Denial of Service can occur because of incorrect deserialization that results in failed memory...

CVE-2025-2534: Memory Allocation with Excessive Size Value

IBM Db2 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows includes Db2 Connect Server is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query...

Amazon Linux 2023 : kmod-nvidia-open-dkms (ALAS2023NVIDIA-2025-252)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2025-252 advisory. NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, escalatio...

Amazon Linux 2023 : nvidia-open (ALAS2023NVIDIA-2025-243)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2025-243 advisory. NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, escalatio...

EUVD-2025-38151

An issue was discovered in AnyDesk through 9.0.4. Remote Denial of Service can occur because of incorrect deserialization that results in failed memory allocation and a NULL pointer dereference...

expat security update

An update is available for expat. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Expat is a C library for parsing XML documents. Security Fixes: expat: libexpa...

PT-2025-45345

Name of the Vulnerable Software and Affected Versions AnyDesk versions through 9.0.4 Description A remote denial of service can occur due to incorrect deserialization, leading to failed memory allocation and a NULL pointer dereference. Recommendations Update AnyDesk to a version later than 9.0.4...

AnyDesk code-related vulnerabilities

AnyDesk is a remote desktop connection software from AnyDesk Germany. A security vulnerability exists in AnyDesk 9.0.4 and earlier versions, which stems from improper deserialization leading to memory allocation failure and null pointer dereferencing, which could lead to a remote denial of servic...

CVE-2025-27917: NULL Pointer Dereference

An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android before 8.0.0. Remote Denial of Service can occur because of incorrect deserialization that results in failed memory...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990473)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990473 advisory. In the Linux kernel, the following vulnerability has been resolved: perf/core: Bail out early if the request AUX area is out of bound When perf-record with a large A...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990531)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990531 advisory. In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix uninit-value in copyname syzbot reported BUG: KMSAN: uninit-value in...

CVE-2025-27917

CVE-2025-27917 affects AnyDesk before 9.0.5 on Windows, before 9.0.1 on macOS, before 7.0.0 on Linux, before 7.1.2 on iOS, and before 8.0.0 on Android. The issue is a remote denial of service caused by incorrect deserialization that leads to failed memory allocation and a NULL pointer dereference...

CVE-2025-27917

An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android before 8.0.0. Remote Denial of Service can occur because of incorrect deserialization that results in failed memory...

GO-2025-4087 Unchecked memory allocation during vector deserialization in github.com/consensys/gnark-crypto

Unchecked memory allocation during vector deserialization in github.com/consensys/gnark-crypto...

AZL-69893 CVE-2025-60753 affecting package libarchive for versions less than 3.6.1-8

An issue was discovered in libarchive bsdtar before version 3.8.1 in function applysubstitution in file tar/subst.c when processing crafted -s substitution rules. This can cause unbounded memory allocation and lead to denial of service Out-of-Memory crash...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988786)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988786 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/slub: fix to return errno if kmalloc fails In createuniqueid, kmalloc, GFPKERNEL can fail due...

PT-2025-52901

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description The Linux kernel’s NTFS3 filesystem component contains a flaw where allocated memory is not initialized before use. This issue is identified through Kernel Memory Sanitizer KMSAN reports...

PT-2025-45885

Unchecked memory allocation during vector deserialization in github.com/consensys/gnark-crypto...

libarchive security vulnerabilities

libarchive is a multi-format archive and compression library open-sourced by libarchive. A security vulnerability exists in versions of libarchive prior to 3.8.1, which stems from an unrestricted memory allocation when handling specially crafted -s substitution rules, and may result in a denial o...