CVE-2024-58109

Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-58108

CVE-2024-58108 is a buffer overflow vulnerability in the codec module of Huawei HarmonyOS. The issue is linked to the codec component and is stated to potentially affect availability if exploited. Public technical details are limited across the provided documents, but PT Security notes that there...

CVE-2024-58108

Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-58106

Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability...

PT-2025-15161 · Arkui · Arkui

Name of the Vulnerable Software and Affected Versions: ArkUI framework affected versions not specified Description: The issue is related to a buffer overflow vulnerability in the SVG parsing module of the framework. Successful exploitation of this vulnerability may affect availability...

CVE-2025-29482

Buffer Overflow vulnerability in libheif 1.19.7 allows a local attacker to execute arbitrary code via the SAO Sample Adaptive Offset processing of libde265...

PT-2025-15160 · Arkui · Arkui

Name of the Vulnerable Software and Affected Versions: ArkUI framework affected versions not specified Description: The issue is related to a buffer overflow vulnerability in the SVG parsing module of the framework. Successful exploitation of this vulnerability may affect availability...

Google Android Buffer Overflow Vulnerability (CNVD-2025-07523)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a buffer overflow vulnerability that stems from the program not properly checking boundaries, which can be exploited by an attacker to execute remote code...

CVE-2025-3194

CVE-2025-3194 concerns the npm package bigint-buffer. The vulnerability affects versions starting at 0.0.0 and later, where the function toBigIntLE() contains a buffer overflow that can cause the application to crash. Multiple sources consistently describe the root cause as improper bounds checki...

PT-2025-15039 · C-Blosc2 · C-Blosc2

Name of the Vulnerable Software and Affected Versions: c-blosc2 versions 2.17.0 and before Description: The issue is related to a Buffer Overflow vulnerability in the compress chunk fuzzer function when used with oss-fuzz. This vulnerability is identified in c-blosc2 on commit...

USN-7413-1: Linux kernel (IoT) vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. CVE-2022-38096 Ye Zhang and Nicolas Wu discovered th...

OESA-2025-1354 zvbi security update

The ZVBI library provides functions to read from Linux V4L, V4L2 and FreeBSD BKTR raw VBI capture devices, from Linux DVB devices and from a VBI proxy to share V4L and V4L2 VBI devices between multiple applications. It can demodulate raw to sliced VBI data in software, with support for a wide ran...

CVE-2025-28398

D-LINK DI-8100 16.07.26A1 is vulnerable to Buffer Overflow in the ipsecnetasp function via the remotip parameter...

CVE-2025-29462

A buffer overflow vulnerability has been discovered in Tenda Ac15 V15.13.07.13. The vulnerability occurs when the webCgiGetUploadFile function calls the socketRead function to process HTTP request messages, resulting in the overwriting of a buffer on the stack...

PT-2025-14768

Name of the Vulnerable Software and Affected Versions Ivanti Connect Secure versions prior to 22.7R2.6 Ivanti Policy Secure versions prior to 22.7R1.4 Ivanti ZTA Gateways versions prior to 22.8R2.2 Pulse Connect Secure versions 9.x Description A stack-based buffer overflow in the HTTPS web server...

The vulnerability of the dcn_bw_update_from_pplib_fclks() function in the DRI driver for AMD Linux kernel-based video cards allows a hacker to cause a service failure.

The vulnerability of the dcnbwupdatefrompplibfclks function in the DRI driver for AMD kernel-based Linux operating system-related graphics cards is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability can allow an attacker to cause a service failure...

Medium: containerd

Issue Overview: containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a UID:GID larger than the maximum 32-bit signed integer can cause an overflow condition where the container...

Ubuntu 20.04 LTS : Linux kernel (FIPS) vulnerabilities (USN-7393-1)

"The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7393-1 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cau...

Ubuntu 24.04 LTS : Linux kernel (Azure) vulnerabilities (USN-7384-1)

"The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7384-1 advisory. Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker...

Analyzing open-source bootloaders: Finding vulnerabilities faster with AI

By leveraging Microsoft Security Copilot to expedite the vulnerability discovery process, Microsoft Threat Intelligence uncovered several vulnerabilities in multiple open-source bootloaders, impacting all operating systems relying on Unified Extensible Firmware Interface UEFI Secure Boot as well ...