CVE-2025-12745

A weakness has been identified in QuickJS up to eb2c89087def1829ed99630cb14b549d7a98408c. This affects the function jsarraybufferslice of the file quickjs.c. This manipulation causes buffer over-read. The attack is restricted to local execution. The exploit has been made available to the public a...

PT-2025-45149

Name of the Vulnerable Software and Affected Versions QuickJS versions prior to eb2c89087def1829ed99630cb14b549d7a98408c Description A flaw exists in QuickJS that allows for a buffer over-read. This issue is related to the js array buffer slice function within the quickjs.c file. Exploitation is...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990362)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990362 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't read past the mfuart notifcation In case the firmware sends a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989853)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989853 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't read past the mfuart notifcation In case the firmware sends a...

CVE-2025-47368

CVE-2025-47368 affects Qualcomm DSP Service (Memory corruption in MCDM IOCTL processing when dereferencing an invalid userspace address in a user buffer). The CVSS v3.1 vector indicates a Local, Low-Complexity exploit with Low Privileges Required, no user interaction, and impacts on confidentiali...

CVE-2025-47362

CVE-2025-47362 affects an Automotive Software platform based on QNX . The issue is an information disclosure triggered by processing a client message with an invalid payload, attributed to a buffer over-read in the affected software component. Documented impact indicates high confidentiality risk...

CVE-2025-27064 Buffer Over-read in Core Services

Information disclosure while registering commands from clients with diag through diagHal...

CVE-2025-27064 Buffer Over-read in Core Services

Information disclosure while registering commands from clients with diag through diagHal...

PT-2025-44929

Name of the Vulnerable Software and Affected Versions Automotive Software platform based on QNX affected versions not specified Description An information disclosure issue exists when processing messages from a client with an invalid payload. The issue involves a buffer over-read. Recommendations...

PT-2025-44921

Name of the Vulnerable Software and Affected Versions Core Services affected versions not specified Description An information disclosure issue exists when registering commands from clients using diag through diagHal. The issue involves a buffer over-read. Recommendations At the moment, there is ...

PT-2025-44932

Name of the Vulnerable Software and Affected Versions versions prior to 2025 Description A memory corruption issue exists when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing. This can lead to a buffer over-read in the DSP Service. Recommendations At the...

Astra Linux - уязвимость в linux-5.10, linux-5.15, linux-6.1

A flaw was found within the parsing of SMB2 requests that have a transform header in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose...

Astra Linux - уязвимость в vim

Buffer Over-read in GitHub repository vim/vim prior to 8.2...

Astra Linux - уязвимость в curl

libcurl's URL API function curlurlget offers punycode conversions, to and from IDN. Asking to convert a name that is exactly 256 bytes, libcurl ends up reading outside of a stack based buffer when built to use the macidn IDN backend. The conversion function then fills up the provided buffer exact...

U-Boot net/nfs.c Heap Buffer Overflow DoS

The vulnerability of the nfsreadreply function in the net/nfs.c component of the U-Boot loader is related to reading data beyond the allowable buffer size. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause service failures...

CVE-2025-62787

Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.10.2, a buffer over-read occurs in DecodeWinevt when childattrp-attributesj is accessed, because the corresponding index j is incorrect. A compromised agent can cause a READ operation beyond t...

CVE-2025-62792

Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.12.0, a buffer over-read occurs in wexpressionmatch when strlen is called on strtest, because the corresponding buffer is not being properly NULL terminated during its allocation in OSCleanMSG...

CVE-2025-62787

Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.10.2, a buffer over-read occurs in DecodeWinevt when childattrp-attributesj is accessed, because the corresponding index j is incorrect. A compromised agent can cause a READ operation beyond t...

CVE-2025-62792 Wazuh vulnerable to Heap-based Buffer Over-read in w_expression_match

Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.12.0, a buffer over-read occurs in wexpressionmatch when strlen is called on strtest, because the corresponding buffer is not being properly NULL terminated during its allocation in OSCleanMSG...

EUVD-2025-36674

Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.12.0, a buffer over-read occurs in wexpressionmatch when strlen is called on strtest, because the corresponding buffer is not being properly NULL terminated during its allocation in OSCleanMSG...