UBUNTU-CVE-2025-11964

On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf16letoutf8truncated can write data beyond the end of the provided buffer...

QNAP Systems HBS 3 Hybrid Backup Sync security vulnerability

QNAP Systems HBS 3 Hybrid Backup Sync is a backup and synchronization tool from Taiwan, China-based QNAP Systems. A security vulnerability exists in QNAP Systems HBS 3 Hybrid Backup Sync that originates from the generation of an error message containing sensitive information that could result in...

CVE-2025-11964

A flaw was found in libpcap on Windows. When libpcap converts a Windows error message containing 4-byte UTF-8 characters, the utf16letoutf8truncated function can write data beyond its allocated buffer. This out-of-bounds write can lead to data corruption, impacting the integrity of the system...

PT-2026-27663

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the ucan driver where the system can hang due to an infinite loop. This occurs when a defective ucan device receives a message with the message length field set to 0,...

PT-2026-8194

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The acpi power meter driver in the Linux kernel contains a flaw related to deadlocks within the acpi power meter notify function. This function calls hwmon device unregister under a lock...

CVE-2023-54218

In the Linux kernel, the following vulnerability has been resolved: net: Fix load-tearing on sk-skstamp in sockrecvcmsgs. KCSAN found a data race in sockrecvcmsgs where the read access to sk-skstamp needs READONCE. BUG: KCSAN: data-race in packetrecvmsg / packetrecvmsg write marked to...

User Enumeration

ibexa/user is vulnerable to User Enumeration. The vulnerability is due to overly descriptive error messages, which allows an attacker to determine whether a user account exists by observing differences in error responses...

EUVD-2025-205868

On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf16letoutf8truncated can write data beyond the end of the provided buffer...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the utf16letoutf8truncated function. An attacker can cause data to be written beyond the end of a buffer by triggering the conversion of Windows error messages containing characters that require 4-byte UTF-8...

CVE-2025-11964

On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf16letoutf8truncated can write data beyond the end of the provided buffer...

CVE-2025-11964 OOBW in utf_16le_to_utf_8_truncated() in libpcap

On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf16letoutf8truncated can write data beyond the end of the provided buffer...

CVE-2025-11964

CVE-2025-11964 affects libpcap on Windows where utf_16le_to_utf_8_truncated() may write past the end of the output buffer when converting certain Unicode characters (4-byte UTF‑8). Root cause is a bound check deficiency in that conversion path. Impact is memory corruption that is limited by the a...

CVE-2025-11964 OOBW in utf_16le_to_utf_8_truncated() in libpcap

On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf16letoutf8truncated can write data beyond the end of the provided buffer...

EUVD-2022-55927

H3C SSL VPN contains a user enumeration vulnerability that allows attackers to identify valid usernames through the 'txtUsrName' POST parameter. Attackers can submit different usernames to the loginsubmit.cgi endpoint and analyze response messages to distinguish between existing and non-existing...

SUSE CVE-2023-54218

In the Linux kernel, the following vulnerability has been resolved: net: Fix load-tearing on sk-skstamp in sockrecvcmsgs. KCSAN found a data race in sockrecvcmsgs where the read access to sk-skstamp needs READONCE. BUG: KCSAN: data-race in packetrecvmsg / packetrecvmsg write marked to...

cbor2 security vulnerabilities

cbor2 is a library with extensive tag support for encoding and decoding binary object representations in serialized format from the individual developer Alex Grönholm. A security vulnerability exists in cbor2 version 3.0.0 up to and including version 5.8.0, which stems from the fact that when the...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992877)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992877 advisory. In the Linux kernel, the following vulnerability has been resolved: ila: do not generate empty messages in ilaxlatnlcmdgetmapping ilaxlatnlcmdgetmapping generates an...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992835)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992835 advisory. In the Linux kernel, the following vulnerability has been resolved: media: mceusb: Use new usbcontrolmsg routines Automatic kernel fuzzing led to a WARN about invali...

KYC Solutions Disclosure Information

The vulnerability of KYC Solutions’ software for customer identity verification is related to the disclosure of information in debugging messages. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose the protected information...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993262)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993262 advisory. In the Linux kernel, the following vulnerability has been resolved: rtnetlink: Allocate vfinfo size for VF GUIDs when supported Commit 30aad41721e0 net/core: Add...