The vulnerability of the elflink.c component in the GNU Binutils development environment allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the elflink.c component of the GNU Binutils development environment is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...

The vulnerability of the Linux operating system’s kernel, related to the operation of operations beyond the buffer in memory, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the bfdPutl64 function in the elf64-x86-64.c development tool of the GNU Binutils component allows a attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the bfdPutl64 function in the elf64-x86-64.c development tool from the GNU Binutils library is related to the execution of operations outside the buffer boundaries in memory. Exploitation of this vulnerability could allow an attacker to gain access to confidential data,...

The vulnerability in the drivers/ata/libata-sff.c component of the Linux operating system allows an attacker to compromise data integrity and cause service failures.

The vulnerability of the drivers/ata/libata-sff.c component in the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...

The vulnerability of the Network-Based Application Recognition (NBAR) component in Cisco IOS XE operating systems allows a hacker to induce a service failure.

The vulnerability of the Network-Based Application Recognition NBAR component in Cisco IOS XE operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

CLSA-2025-1758705355 Fix CVE(s): CVE-2025-5318

SECURITY UPDATE: out-of-bounds read in sftphandle function - debian/patches/CVE-2025-5318.patch: fix possible buffer overrun issue in sftpserver.c by changing conditional from val SFTPHANDLES to val = SFTPHANDLES - CVE-2025-5318...

The vulnerability of the sscanf function in Tenda AC23 microprogramming software allows a hacker to execute any command they desire.

The vulnerability of the sscanf function in Tenda AC23 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

DEBIAN-CVE-2025-39888

In the Linux kernel, the following vulnerability has been resolved: fuse: Block access to folio overlimit syz reported a slab-out-of-bounds Write in fusedevdowrite. When the number of bytes to be retrieved is truncated to the upper limit by fc-maxpages and there is an offset, the oob is triggered...

UBUNTU-CVE-2025-39888

In the Linux kernel, the following vulnerability has been resolved: fuse: Block access to folio overlimit syz reported a slab-out-of-bounds Write in fusedevdowrite. When the number of bytes to be retrieved is truncated to the upper limit by fc-maxpages and there is an offset, the oob is triggered...

The vulnerability of the Substance 3D Viewer application, which allows the execution of arbitrary code, arises from the possibility of operations going beyond the buffer in memory. This vulnerability allows an attacker to execute arbitrary code.

The vulnerability of the Adobe Substance 3D Viewer application for viewing and editing 3D files is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending a specially crafted maliciou...

PT-2025-49049

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc1+ 30 Description The Linux kernel contains a flaw in the serial handling code for the SH-SCI SuperH Serial Communication Interface. Specifically, the receive error handling code incorrectly manages FIFO...

ROS-20250922-03

The vulnerability in Mozilla Firefox, Firefox ESR and Thunderbird email client is related to the null pointer dereferencing. null pointer dereferencing. Exploitation of the vulnerability could allow an attacker acting remotely to affect the confidentiality of protected information. remotely to...

ROS-20250922-01

Vulnerability in Mozilla Firefox and Firefox ESR browsers, Thunderbird mail client is related to an operation exceeding the buffer boundaries when processing XPath expressions. operation exceeds buffer boundaries in memory when processing XPath expressions. Exploitation of the vulnerability could...

The vulnerability of the ins_typebuf() function in the Vim text editor allows a hacker to gain unauthorized access to protected information, compromise its integrity, and cause service failures.

The vulnerability of the instypebuf function in the Vim text editor is related to the execution of operations beyond the buffer’s memory boundaries. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information, compromise its integrity, and even cause...

The vulnerability of the fromSetSysTime() function in Tenda AC6 router software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the fromSetSysTime function in Tenda AC6 router software stems from the operation that occurs outside the buffer in memory when processing the time parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...

grub2: UFS: Integer overflow may lead to heap based out-of-bounds write when handling symlinks

A flaw was found in grub2. When performing a symlink lookup, the grub's UFS module checks the inode's data size to allocate the internal buffer to read the file content, however, it fails to check if the symlink data size has overflown. When this occurs, grubmalloc may be called with a smaller...

Apple macOS Audio APAC Frame Decoding Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the decoding of audio...

Linux Distros Unpatched Vulnerability : CVE-2025-39815

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RISC-V: KVM: fix stack overrun when loading vlenb The userspace load can put up to 2048 bits into an xlen bit stack buffer. We want only xlen bits, so check the...

SUSE CVE-2025-39815

In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: fix stack overrun when loading vlenb The userspace load can put up to 2048 bits into an xlen bit stack buffer. We want only xlen bits, so check the size beforehand...

CVE-2025-39815

In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: fix stack overrun when loading vlenb The userspace load can put up to 2048 bits into an xlen bit stack buffer. We want only xlen bits, so check the size beforehand...