The vulnerability of the Linux operating system’s kernel, related to reading beyond the buffer data boundary, allows an attacker to access confidential data and also cause a service failure.

The vulnerability of the Linux operating system’s kernel is related to reading data from beyond the allowed buffer limits. Exploiting this vulnerability allows an attacker to access confidential data and also cause service failures...

The vulnerability of the ixgbe_ethtool.c component in the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ixgbeethtool.c component in the Linux operating system is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the `comedi/drivers/pcl726.c` component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the comedi/drivers/pcl726.c component in the Linux operating system is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability allows an attacker to cause service failures...

PT-2025-51194

In the Eclipse OMR compiler component, since release 0.7.0, an optimization enabled for Eclipse OpenJ9 consumers of OMR on Z processors incorrectly handles NUL 0x00 characters during the Latin-compatible charset UTF-8, ISO8859-1, ASCII, etc to IBM-1047/037 translation sequence. This can cause the...

Eclipse OMR 缓冲区错误漏洞

Eclipse OMR is an open source toolkit from the Eclipse Foundation for building language runtime environments. A buffer error vulnerability exists in Eclipse OMR versions prior to 0.8.0, which stems from the incorrect handling of NUL characters during the character conversion process, and may resu...

The vulnerability of the Linux operating system’s kernel, related to reading data beyond the allowed buffer limits, allows an attacker to access confidential data and cause service interruptions.

The vulnerability of the Linux operating system’s kernel is related to reading data from beyond the allowed buffer limits. Exploiting this vulnerability allows an attacker to access confidential data and also cause service failures...

The vulnerability of the Linux operating system’s kernel tracing component, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s kernel trace component is related to reading data beyond the acceptable buffer size. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the nfs_fh_to_dentry() function in the fs/nfs/export.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the nfsfhtodentry function in the fs/nfs/export.c component of the Linux operating system is related to reading data from beyond the allowed buffer size. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the qcom/venus/hfi_venus.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the qcom/venus/hfivenus.c component in the Linux operating system is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel, related to reading beyond the buffer boundaries of memory, allows an attacker to compromise data integrity and cause service failures.

The vulnerability of the Linux operating system’s kernel is related to reading data beyond the acceptable buffer size. Exploiting this vulnerability allows an attacker to compromise the integrity of data and also cause service failures due to the corrupted image file...

The vulnerability in the `fs/smb/client/smb2ops.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fs/smb/client/smb2ops.c component in the Linux operating system is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability in the `sound/usb/validate.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the sound/usb/validate.c component of the Linux operating system is related to reading data from beyond the allowed buffer limits. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the Venus kernel component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the Venus kernel component in the Linux operating system is related to reading data from beyond the allowed buffer limits. Exploiting this vulnerability allows an attacker to cause a service failure...

Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames

...

SUSE SLES12: libpng12-0 / libpng12-0-32bit / libpng12-compat-devel / etc (SUSE-SU-2025:4383-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:4383-1 advisory. - CVE-2025-64505: Fixed heap buffer over-read in pngdoquantize via malformed palette index bsc1254157 Tenable has extracted the preceding description...

Security update for libpng12

This update for libpng12 fixes the following issues: CVE-2025-64505: Fixed heap buffer over-read in pngdoquantize via malformed palette index bsc1254157 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

SUSE-SU-2025:4383-1 Security update for libpng12

This update for libpng12 fixes the following issues: - CVE-2025-64505: Fixed heap buffer over-read in pngdoquantize via malformed palette index bsc1254157...

EUVD-2025-202862

In AzeoTech DAQFactory release 20.7 Build 2555, an Out-of-bounds Read vulnerability can be exploited by an attacker to cause the program to read data past the end of an allocated buffer. This could allow an attacker to disclose information or cause a system crash...

CVE-2025-66589 Out-of-bounds Read vulnerability in AzeoTech DAQFactory

In AzeoTech DAQFactory release 20.7 Build 2555, an Out-of-bounds Read vulnerability can be exploited by an attacker to cause the program to read data past the end of an allocated buffer. This could allow an attacker to disclose information or cause a system crash...

SUSE CVE-2025-14104

A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the setpwnam function, affecting SUID Set User ID login-utils utilities writing to the password database...