EUVD-2022-32653

Malicious code in bioql PyPI...

EUVD-2023-28817

Malicious code in bioql PyPI...

EUVD-2023-25802

Malicious code in bioql PyPI...

EUVD-2023-49776

Malicious code in bioql PyPI...

EUVD-2023-28811

Malicious code in bioql PyPI...

EUVD-2025-22049

Malicious code in bioql PyPI...

EUVD-2021-8414

Malicious code in bioql PyPI...

EUVD-2022-55153

Malicious code in bioql PyPI...

The vulnerability in the `net/mptcp/protocol.c` component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability in the net/mptcp/protocol.c component of the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `net/ipv6/mcast.c` component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the net/ipv6/mcast.c component in the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024167 fixes several issues. The following security issues were fixed: CVE-2025-38177: schhfsc: make hfscqlennotify idempotent bsc1246356. CVE-2025-38181: calipso: Fix null-ptr-deref in calipsoreqset,delattr bsc1246001. CVE-2025-38498: dochangetype:...

CVE-2025-21488 Buffer Over-read in Data Network Stack & Connectivity

Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set...

CVE-2025-21488 Buffer Over-read in Data Network Stack & Connectivity

Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set...

CVE-2025-21488

CVE-2025-21488 affects Qualcomm closed‑source components (Data Network Stack & Connectivity) and is caused by improper handling of padding bits when decoding RTP packet headers, leading to information disclosure in the UE. The CVE is described as a buffer over‑read/information leak. Public connec...

CVE-2025-21487 Buffer Over-read in Data Network Stack & Connectivity

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length...

CVE-2025-21487

CVE-2025-21487 concerns information disclosure in Qualcomm closed‑source components due to incorrect handling of RTP payload length when decoding packets. The root cause is a buffer length mismatch that can lead to over-read and leakage of information from the UE. The vulnerability is categorized...

CVE-2025-21484

CVE-2025-21484 is an information-disclosure issue described as a buffer over-read in the Qualcomm data-network stack, triggered when a User Equipment (UE) decodes and reassembles RTP fragments received over the network. Public descriptions consistently state that the vulnerability causes informat...

CVE-2025-21484 Buffer Over-read in Data Network Stack & Connectivity

Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet...

CVE-2025-21483 Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & Connectivity

Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs...

CVE-2025-21483 Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & Connectivity

Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs...