5996 matches found
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414621)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414621 advisory. An issue was discovered in the Linux kernel through 5.11.10. drivers/net/ethernet/freescale/gianfar.c in the Freescale Gianfar Ethernet driver allows attackers to...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-984807)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984807 advisory. In the Linux kernel, the following vulnerability has been resolved: xhci: handle isoc Babble and Buffer Overrun events properly xHCI 4.9 explicitly forbids assuming...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414295)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414295 advisory. The fix for XSA-423 added logic to Linux'es netback driver to deal with a frontend splitting a packet in a way such that not all of the headers would come in one...
CVE-2025-59733
When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that all image channels have the same pixel type and size, and that if there are four channels, the first four are "B", "G", "R" and "A". The channel parsing code can be found in decodeheader. The...
EUVD-2025-32519
When calculating the content path in handling of MPEG-DASH manifests, there's an out-of-bounds NUL-byte write one byte past the end of the buffer.When we call xmlNodeGetContent below 0, it returns a buffer precisely allocated to match the string length, using strdup internally. If this buffer is...
ROS-20251006-01
A vulnerability in the certtool utility of the GnuTLS transport layer security library is related to an operation exceeding the buffer boundaries. operation outside of a buffer in memory. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...
The vulnerability in the SkRegion.cpp component of the Firefox ESR web browser and Thunderbird email client allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability in the SkRegion.cpp component of the Firefox ESR web browser and Thunderbird email client is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...
CVE-2023-53553
In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: avoid struct memcpy overrun warning A previous patch addressed the fortified memcpy warning for most builds, but I still see this one with gcc-9: In file included from include/linux/string.h:254, from...
UBUNTU-CVE-2023-53589
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't trust firmware nchannels If the firmware sends us a corrupted MCC response with nchannels much larger than the command response can be, we might copy far too much uninitialized memory and even crash if t...
UBUNTU-CVE-2023-53553
In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: avoid struct memcpy overrun warning A previous patch addressed the fortified memcpy warning for most builds, but I still see this one with gcc-9: In file included from include/linux/string.h:254, from...
CVE-2023-53553
CVE-2023-53553 is a Linux kernel issue tied to Hyper-V HID handling. The vulnerability arises from a fortify memcpy-related codepath in HID Hyper-V (mousevsc_on_receive) where a __write_overflow_field warning could be triggered, prompting a patch to rework the code to avoid the warning. Connected...
CVE-2025-39949
In the Linux kernel, the following vulnerability has been resolved: qed: Don't collect too many protection override GRC elements In the protection override dump path, the firmware can return far too many GRC elements, resulting in attempting to write past the end of the previously-kmalloc'ed dump...
CVE-2025-39949
The CVE-2025-39949 issue affects the Linux kernel QED driver path (drivers/net/ethernet/qlogic/qed/qeddebug.c) where qed_protection_override_dump may process more GRC elements than the allocated buffer, causing a write past the end and a kernel panic (BUG: unable to handle kernel paging request a...
CVE-2025-39949 qed: Don't collect too many protection override GRC elements
In the Linux kernel, the following vulnerability has been resolved: qed: Don't collect too many protection override GRC elements In the protection override dump path, the firmware can return far too many GRC elements, resulting in attempting to write past the end of the previously-kmalloc'ed dump...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a shift overrun or overflow in the nilfssb2badoffset function, which could cause the kernel to crash...
EUVD-2022-43162
Malicious code in bioql PyPI...
EUVD-2024-51814
Malicious code in bioql PyPI...
EUVD-2025-31912
Malicious code in bioql PyPI...