10177 matches found
SUSE SLES15 Security Update : squid (SUSE-SU-2025:03521-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03521-1 advisory. - CVE-2025-59362: fixed buffer overflow bsc1250627 - CVE-2024-37894: fixed denial of service in ESI processing bsc1227086 -...
CVE-2025-11617 Buffer Over-read when receiving IPv6 packets with incorrect payload length in FreeRTOS-Plus-TCP
A missing validation check in FreeRTOS-Plus-TCP's IPv6 packet processing code can lead to an out-of-bounds read when receiving a IPv6 packet with incorrect payload lengths in the packet header. This issue only affects applications using IPv6. We recommend users upgrade to the latest version and...
CVE-2025-11617 Buffer Over-read when receiving IPv6 packets with incorrect payload length in FreeRTOS-Plus-TCP
A missing validation check in FreeRTOS-Plus-TCP's IPv6 packet processing code can lead to an out-of-bounds read when receiving a IPv6 packet with incorrect payload lengths in the packet header. This issue only affects applications using IPv6. We recommend users upgrade to the latest version and...
CVE-2025-11616 Buffer Over-read when receiving improperly sized ICMPv6 packets in FreeRTOS-Plus-TCP
A missing validation check in FreeRTOS-Plus-TCP's ICMPv6 packet processing code can lead to an out-of-bounds read when receiving ICMPv6 packets of certain message types which are smaller than the expected size. These issues only affect applications using IPv6. Users should upgrade to the latest...
CVE-2025-11616
CVE-2025-11616 affects FreeRTOS-Plus-TCP: a missing validation check in the ICMPv6 packet processing code can cause an out-of-bounds read when handling certain ICMPv6 message types smaller than expected. The issue applies to IPv6-enabled applications. The documented mitigation is to upgrade to th...
SUSE-SU-2025:03521-1 Security update for squid
This update for squid fixes the following issues: - CVE-2025-59362: fixed buffer overflow bsc1250627 - CVE-2024-37894: fixed denial of service in ESI processing bsc1227086 - CVE-2024-33427: fixed possible buffer overread leading to denial of service bsc1225417...
FFmpeg Heap Buffer Overflow RCE
The vulnerability of the rlerawsize function in the FFmpeg multimedia library relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
PT-2026-50786
Name of the Vulnerable Software and Affected Versions libssh2 versions prior to 1.11.1 commit 2dae302 Description An out-of-bounds heap read exists in the sftp symlink function within src/sftp.c. A malicious SSH server or man-in-the-middle attacker can disclose heap memory contents or cause a cra...
Oracle Linux 8 : vim (ELSA-2025-17715)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-17715 advisory. - RHEL-112003 CVE-2025-53905 vim: Vim path traversial - RHEL-112007 CVE-2025-53906 vim: Vim path traversal - CVE-2022-1785 vim: Out-of-bounds Write -...
CVE-2025-27049 Buffer Over-read in Camera
Transient DOS while processing IOCTL call for image encoding...
CVE-2025-27045
CVE-2025-27045 is a vulnerability affecting the Video driver in Qualcomm chipsets, reported as information disclosure during batch command processing. The issue impacts the driver’s handling of batch executions, with a potential exposure of sensitive data through the affected path. According to c...
CVE-2025-27045 Buffer Over-read in Video
Information disclosure while processing batch command execution in Video driver...
CVE-2025-27045 Buffer Over-read in Video
Information disclosure while processing batch command execution in Video driver...
CVE-2025-27041 Buffer Over-read in Video
Transient DOS while processing video packets received from video firmware...
CVE-2025-27041
CVE-2025-27041 is described across multiple sources as a transient denial-of-service in Qualcomm chipsets stemming from improper handling of video firmware packets, effectively a buffer over-read during video packet processing. The public records (NVD/Red Hat/CVE listings) cite a MEDIUM base scor...
cJSON Parser Heap Buffer Overflow Info Disclosure
The vulnerability of the decodearrayindexfrompointer function in the cJSONUtils.c file of the cJSON parser is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain access to confidential information...
PCRE2 Heap Buffer Overflow Info Disclosure
The vulnerability of the PCRE2 regular expression library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information...
ROS-20251008-10
A vulnerability in the fdindex function of the Udisks storage device query and management program is related to a reading beyond buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to escalate their privileges and cause a denial of service...
