PT-2025-41512

Name of the Vulnerable Software and Affected Versions libpadm.so versions prior to SMR Oct-2025 Release 1 Description An out-of-bounds write issue exists in the JPEG decoding pre-processing within libpadm.so. This allows a local attacker to write to memory outside of allocated boundaries. The iss...

SAMSUNG fingerprint trustlet 安全漏洞

SAMSUNG fingerprint trustlet is a fingerprint authentication module from Samsung South Korea. A security vulnerability exists in SAMSUNG fingerprint trustlet SMR Oct-2025 Release 1 prior to Release 1, which stems from the presence of an out-of-bounds write that could cause a locally privileged...

PT-2025-41510

Name of the Vulnerable Software and Affected Versions SecSettings versions prior to SMR Oct-2025 Release 1 Description An improper access control issue exists in SecSettings. This allows local attackers to access sensitive information. User interaction is required to trigger this issue...

PT-2025-41508

Name of the Vulnerable Software and Affected Versions KnoxGuard versions prior to SMR Oct-2025 Release 1 Description A flaw exists in access control within KnoxGuard that could allow attackers with physical access to utilize privileged APIs. This issue impacts systems where an attacker has the...

PT-2025-41505

Name of the Vulnerable Software and Affected Versions versions prior to SMR Oct-2025 Release 1 Description An out-of-bounds write issue exists in the fingerprint trustlet. This allows a locally privileged attacker to write to memory outside of allocated boundaries. Recommendations Update to SMR...

PT-2025-41516

Name of the Vulnerable Software and Affected Versions libimagecodec.quram.so versions prior to SMR Oct-2025 Release 1 Description An out-of-bounds read and write issue exists in libimagecodec.quram.so prior to SMR Oct-2025 Release 1. This allows remote attackers to access memory outside of the...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Oct-2025 Release 1 prior to Release 1, which stems from improper WindowManager access...

Microsoft Edge (Chromium-Based) < 141.0.3537.71 Multiple Vulnerabilities (Oct 2025)

Microsoft Edge Chromium-Based is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Oct-2025 Release 1, which originates from an out-of-bounds write in JP...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices from the South Korean company Samsung SAMSUNG, including cell phones, tablets, and more. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Oct-2025 Release 1, which can be exploited by attackers to cause...

PT-2025-41506

Name of the Vulnerable Software and Affected Versions Galaxy Watch versions prior to SMR Oct-2025 Release 1 Description An issue exists with the insecure storage of sensitive information in Galaxy Watch. Local attackers may be able to access sensitive information. Recommendations Update to SMR...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Oct-2025 Release 1, which originates from relative path traversal and...

CVE-2025-61783

Python Social Auth is a social authentication/registration mechanism. In versions prior to 5.6.0, upon authentication, the user could be associated by e-mail even if the associatebyemail pipeline was not included. This could lead to account compromise when a third-party authentication service doe...

CVE-2025-39664

Insufficient escaping in the report scheduler within Checkmk 2.4.0p13, 2.3.0p38, 2.2.0p46 and 2.1.0 EOL allows authenticated attackers to define the storage location of report file pairs beyond their intended root directory...

CVE-2025-39963

In the Linux kernel, the following vulnerability has been resolved: iouring: fix incorrect iokiocb reference in iolinkskb In iolinkskb function, there is a bug where prevnotif is incorrectly assigned using 'nd' instead of 'prevnd'. This causes the context validation check to compare the current...

CVE-2025-39957

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: increase scanieslen for S1G Currently the S1G capability element is not taken into account for the scanieslen, which leads to a buffer length validation failure in ieee80211prephwscan and subsequent WARN in...

Miggo Security Named a Gartner® Cool Vendor in AI Security

Tel Aviv, Israel, 8th October 2025, CyberNewsWire...

Python 'zipfile' Module Vulnerability (Oct 2025) - Linux

Python is prone to a vulnerability in the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python"; ifdescription...

Pixel Update Bulletin—October 2025Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2025-10-01 or later address all issues in this bulletin and all issues in the October 2025 Android...

Pixel Watch Security Bulletin—October 2025Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Watch Security Bulletin contains details of security vulnerabilities affecting Pixel Watch devices Google Devices. For Google devices, security patch levels of 2025-09-05 or later address all issues in this bulletin. To learn how to check a device's security patch level, see Pixel Watch...