Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm, Inc. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption that occurs when allocating memory from source DDR memory...

FreeBSD : Mozilla -- use-after-free after failed memory allocation (ee407762-116c-11f0-8b2c-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the ee407762-116c-11f0-8b2c-b42e991fc52e advisory. [email protected] reports: Assuming a controlled failed memory allocation, an attacker could have...

RHEL 9 : opentelemetry-collector (RHSA-2025:3411)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:3411 advisory. Collector with the supported components for a Red Hat build of OpenTelemetry Security Fixes: golang-jwt/jwt: jwt-go allows excessive memory allocatio...

SUSE CVE-2025-21932

In the Linux kernel, the following vulnerability has been resolved: mm: abort vmamodify on merge out of memory failure The remainder of vmamodify relies upon the vmg state remaining pristine after a merge attempt. Usually this is the case, however in the one edge case scenario of a merge attempt...

AZL-59557 CVE-2025-32049 affecting package libsoup for versions less than 3.4.4-12

A flaw was found in libsoup. The SoupWebsocketConnection may accept a large WebSocket message, which may cause libsoup to allocate memory and lead to a denial of service DoS...

UBUNTU-CVE-2025-32049

A flaw was found in libsoup. The SoupWebsocketConnection may accept a large WebSocket message, which may cause libsoup to allocate memory and lead to a denial of service DoS...

CVE-2025-32049 Libsoup: denial of service attack to websocket server

A flaw was found in libsoup. The SoupWebsocketConnection may accept a large WebSocket message, which may cause libsoup to allocate memory and lead to a denial of service DoS...

CVE-2025-32049

A flaw was found in libsoup. The SoupWebsocketConnection may accept a large WebSocket message, which may cause libsoup to allocate memory and lead to a denial of service DoS...

CVE-2025-32049 Libsoup: denial of service attack to websocket server

A flaw was found in libsoup. The SoupWebsocketConnection may accept a large WebSocket message, which may cause libsoup to allocate memory and lead to a denial of service DoS...

CVE-2025-32049

CVE-2025-32049 affects libsoup; the SoupWebsocketConnection may accept a large WebSocket message, causing memory allocation and DoS. Multiple advisories (e.g., ALAS2-2025-3006, ALAS2023-2025-1187/1134, ALSA-2025:8126/8132) indicate libsoup updates are available. Remediation: apply the correspondi...

CVE-2025-21997 xsk: fix an integer overflow in xp_create_and_assign_umem()

In the Linux kernel, the following vulnerability has been resolved: xsk: fix an integer overflow in xpcreateandassignumem Since the i and pool-chunksize variables are of type 'u32', their product can wrap around and then be cast to 'u64'. This can lead to two different XDP buffers pointing to the...

CVE-2025-21997 xsk: fix an integer overflow in xp_create_and_assign_umem()

In the Linux kernel, the following vulnerability has been resolved: xsk: fix an integer overflow in xpcreateandassignumem Since the i and pool-chunksize variables are of type 'u32', their product can wrap around and then be cast to 'u64'. This can lead to two different XDP buffers pointing to the...

The vulnerability of the TIFFInput::read_native_tile() function in the src/tiff.imageio/tiffinput.cpp module of the OpenImageIO library allows a attacker to cause a service failure.

The vulnerability of the TIFFInput::readnativetile function in the src/tiff.imageio/tiffinput.cpp module of the OpenImageIO library is related to improper memory allocation. Exploiting this vulnerability may allow an attacker to cause a service failure...

PT-2025-14591 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the registration of efivars in the uefisecapp firmware component. The issue arises from the efivars service being...

CVE-2024-45700

Zabbix server is vulnerable to a DoS vulnerability due to uncontrolled resource exhaustion. An attacker can send specially crafted requests to the server, which will cause the server to allocate an excessive amount of memory and perform CPU-intensive decompression operations, ultimately leading t...

CVE-2024-45700 DoS vulnerability due to uncontrolled resource exhaustion

Zabbix server is vulnerable to a DoS vulnerability due to uncontrolled resource exhaustion. An attacker can send specially crafted requests to the server, which will cause the server to allocate an excessive amount of memory and perform CPU-intensive decompression operations, ultimately leading t...

CVE-2024-45700 DoS vulnerability due to uncontrolled resource exhaustion

Zabbix server is vulnerable to a DoS vulnerability due to uncontrolled resource exhaustion. An attacker can send specially crafted requests to the server, which will cause the server to allocate an excessive amount of memory and perform CPU-intensive decompression operations, ultimately leading t...

Denial Of Service (DoS)

Ollama is vulnerable to Denial of Service DoS. The vulnerability is due to improper handling of GGUF model files, allowing a malicious user to create a crafted file that causes the server to allocate unlimited memory, leading to a DoS condition...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from incorrect validation of the numaces field of smbacl by the ksmbd module, which could lead to memory allocati...

PT-2025-27724

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A NULL pointer dereference issue has been identified in the Linux kernel. The problem arises because devm kasprintf returns NULL when memory allocation fails, but udma probe does not...