ROS-20260128-73-0044

Vulnerability in kernel-lt related to writing outside buffer boundaries in memory. Exploitation of the vulnerability may allow an attacker to execute arbitrary code...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005178)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005178 advisory. In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential out-of-bounds memory access in nilfsfindentry Syzbot reported that when...

ROS-20260121-73-0035

A vulnerability in the Linux operating system kernel is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000584)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000584 advisory. drivers/hid/hid-pl.c in the Human Interface Device HID subsystem in the Linux kernel through 3.11, when CONFIGHIDPANTHERLORD is enabled, allows physically proximate...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001158)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001158 advisory. kernel/bpf/verifier.c in the Linux kernel 4.9.x through 4.9.71 does not check the relationship between pointer values and the BPF stack, which allows local users to...

ROS-20260113-7342

A vulnerability in the Linux operating system kernel is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260113-7367

A vulnerability in the fs/ntfs3/inode.c component of the Linux operating system kernel is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260113-7340

A vulnerability in the void function of the kernel/rcu/tasks.h module of the synchronization subsystem in multithreaded systems of the Linux kernel is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability may allow an attacker to cause a denial of servic...

ROS-20260113-7311

A vulnerability in the ModeSupportAndSystemConfiguration function of driver drivers/gpu/drm/amd/display/dc/dml/displaymodevba.c of the Linux kernel is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability may allow an intruder to affect the integrity and...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992700)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992700 advisory. In the Linux kernel, the following vulnerability has been resolved: power: supply: gpio-charger: Fix set charge current limits Fix set charge current limits for...

Medium: cups-filters

Issue Overview: CUPS is a standards-based, open-source printing system, and libcupsfilters contains the code of the filters of the former cups-filters package as library functions to be used for the data format conversion tasks needed in Printer Applications. In CUPS-Filters versions up to and...

ROS-20251105-04

A vulnerability in the debugtypesamep function of the objdump component of the GNU Binutils development tool is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to cause a denial of service Vulnerability of the elfgcsweep...

UBUNTU-CVE-2025-10920

GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open...

CVE-2025-59733

When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that all image channels have the same pixel type and size, and that if there are four channels, the first four are "B", "G", "R" and "A". The channel parsing code can be found in decodeheader. The...

UBUNTU-CVE-2023-53589

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't trust firmware nchannels If the firmware sends us a corrupted MCC response with nchannels much larger than the command response can be, we might copy far too much uninitialized memory and even crash if t...

CVE-2025-39949

The CVE-2025-39949 issue affects the Linux kernel QED driver path (drivers/net/ethernet/qlogic/qed/qeddebug.c) where qed_protection_override_dump may process more GRC elements than the allocated buffer, causing a write past the end and a kernel panic (BUG: unable to handle kernel paging request a...

EUVD-2022-54995

Malicious code in bioql PyPI...

EUVD-2025-28067

Malicious code in bioql PyPI...

K000156725: Multiple ImageMagick vulnerabilities

Security Advisory Description CVE-2020-25663 A call to ConformPixelInfo in the SetImageAlphaChannel routine of /MagickCore/channel.c caused a subsequent heap-use-after-free or heap-buffer-overflow READ when GetPixelRed or GetPixelBlue was called. This could occur if an attacker is able to submit ...

ROS-20250929-12

Vulnerability in Mozilla Firefox, Mozilla Firefox ESR, Mozilla Thunderbird email client is related to with an operation exceeding the memory buffer boundaries. Exploitation of the vulnerability could allow an attacker, acting remotely, to execute arbitrary code Vulnerability in JavaScript Engine...