Lucene search
+L

79 matches found

Debian CVE
Debian CVE
added 2025/04/15 4:32 p.m.62 views

CVE-2025-32776

OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. By writing specially crafted data to the matrixcustomframe file, an attacker can cause the custom kernel driver to read more bytes than provided by user space. This data will...

5.5CVSS5.2AI score0.00176EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2025/04/15 4:32 p.m.13 views

CVE-2025-32776 OpenRazer Vulnerable to Out of Bounds Read

OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. By writing specially crafted data to the matrixcustomframe file, an attacker can cause the custom kernel driver to read more bytes than provided by user space. This data will...

5.5CVSS6.7AI score0.00176EPSS
SaveExploits0References4
OSV
OSV
added 2025/04/15 4:32 p.m.17 views

CVE-2025-32776 OpenRazer Vulnerable to Out of Bounds Read

OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. By writing specially crafted data to the matrixcustomframe file, an attacker can cause the custom kernel driver to read more bytes than provided by user space. This data will...

5.5CVSS6.4AI score
SaveExploits0References7
Cvelist
Cvelist
added 2025/04/15 4:32 p.m.45 views

CVE-2025-32776 OpenRazer Vulnerable to Out of Bounds Read

OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. By writing specially crafted data to the matrixcustomframe file, an attacker can cause the custom kernel driver to read more bytes than provided by user space. This data will...

5.5CVSS0.00176EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/04/15 12:0 a.m.6 views

OpenRazer 缓冲区错误漏洞

OpenRazer is an open source driver and user space daemon for OpenRazer Open Source. It is used to control Razer lighting and other features on GNU/Linux. A buffer error vulnerability exists in OpenRazer versions prior to 3.10.2, which stems from mishandling of the matrixcustomframe file, and may...

5.5CVSS6.6AI score0.00176EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/04/15 12:0 a.m.8 views

PT-2025-16362 · Openrazer +1 · Openrazer +1

Name of the Vulnerable Software and Affected Versions: OpenRazer versions prior to 3.10.2 Description: The issue allows an attacker to cause the custom kernel driver to read more bytes than provided by user space by writing specially crafted data to the matrix custom frame file. This data will be...

9.8CVSS6.3AI score0.02295EPSS
SaveExploits3References25
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2022-23467

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. Using a modified USB device an attack...

4.6CVSS5.3AI score0.00351EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2022-29022

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A buffer overflow vulnerability exists in the razeraccessory driver of OpenRazer up to version v3.3.0 allows attackers to cause a Denial of Service DoS and...

9.8CVSS7.7AI score0.0225EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2022-29021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A buffer overflow vulnerability exists in the razerkbd driver of OpenRazer up to version v3.3.0 allows attackers to cause a Denial of Service DoS and possibly...

9.8CVSS7.9AI score0.0225EPSS
SaveExploits1References2
Veracode
Veracode
added 2023/05/15 2:0 a.m.21 views

Out-of-Bounds Read

openrazer is vulnerable to Out-of-bounds Read. This allows an attacker using a malicious USB device to bypass 'KASLR' by leakng stack addresses within 'razerattrreaddpistages' leading to the out-of-bounds read vulnerability...

4.6CVSS6.7AI score0.00351EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
added 2023/05/09 2:47 a.m.20 views

Denial Of Services (DoS)

openrazer is vulnerable to Denial Of Services DoS. The vulnerability exists due to the buffer overflow in the razermouse driver of the library, which allows an attacker to cause an application crash and possibly escalate their privileges via a crafted buffer sent to the matrixcustomframe device...

9.8CVSS9.1AI score0.02295EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
added 2023/05/09 2:44 a.m.18 views

Denial Of Services (DoS)

openrazer is vulnerable to Denial Of Services DoS. The vulnerability exists due to the buffer overflow in the razeraccessory driver of the library, which allows an attacker to cause an application crash and possibly escalate their privileges via a crafted buffer sent to the matrixcustomframe devi...

9.8CVSS9.1AI score0.0225EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2022/12/05 8:15 p.m.25 views

CVE-2022-23467

OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. Using a modified USB device an attacker can leak stack addresses of the razerattrreaddpistages, potentially bypassing KASLR. To exploit this vulnerability an attacker would...

4.6CVSS0.00351EPSS
SaveExploits0References3
OSV
OSV
added 2022/12/05 8:15 p.m.2 views

DEBIAN-CVE-2022-23467

OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. Using a modified USB device an attacker can leak stack addresses of the razerattrreaddpistages, potentially bypassing KASLR. To exploit this vulnerability an attacker would...

4.6CVSS4.8AI score0.00351EPSS
SaveExploits0References1
OSV
OSV
added 2022/12/05 8:15 p.m.7 views

UBUNTU-CVE-2022-23467

OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. Using a modified USB device an attacker can leak stack addresses of the razerattrreaddpistages, potentially bypassing KASLR. To exploit this vulnerability an attacker would...

4.6CVSS5.7AI score0.00351EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2022/12/05 8:15 p.m.23 views

CVE-2022-23467

OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. Using a modified USB device an attacker can leak stack addresses of the razerattrreaddpistages, potentially bypassing KASLR. To exploit this vulnerability an attacker would...

4.6CVSS5.8AI score0.00351EPSS
SaveExploits0References3
Prion
Prion
added 2022/12/05 8:15 p.m.20 views

Buffer overflow

OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. Using a modified USB device an attacker can leak stack addresses of the razerattrreaddpistages, potentially bypassing KASLR. To exploit this vulnerability an attacker would...

2.1CVSS4.6AI score0.00351EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/12/05 7:22 p.m.10 views

CVE-2022-23467 Out of Bounds Read in OpenRazer Driver

OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. Using a modified USB device an attacker can leak stack addresses of the razerattrreaddpistages, potentially bypassing KASLR. To exploit this vulnerability an attacker would...

4.4CVSS4.6AI score0.00351EPSS
SaveExploits0References2
CVE
CVE
added 2022/12/05 7:22 p.m.87 views

CVE-2022-23467

OpenRazer CVE-2022-23467 affects the OpenRazer Linux driver/daemon. The vulnerability is an out-of-bounds read in the razer_attr_read_dpi_stages that can leak stack addresses and potentially bypass KASLR. Exploitation requires access to a user’s keyboard/mouse or convincing the user to use a modi...

4.6CVSS4.5AI score0.00351EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
added 2022/12/05 7:22 p.m.56 views

CVE-2022-23467

OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. Using a modified USB device an attacker can leak stack addresses of the razerattrreaddpistages, potentially bypassing KASLR. To exploit this vulnerability an attacker would...

4.6CVSS4.5AI score0.00351EPSS
SaveExploits0
Rows per page
Query Builder