CVE-2025-4638 Improper Pointer Arithmetic in pcl

A vulnerability exists in the inftrees.c component of the zlib library, which is bundled within the PointCloudLibrary PCL. This issue may allow context-dependent attackers to cause undefined behavior by exploiting improper pointer arithmetic. Since version 1.14.0, PCL by default uses a zlib...

Point Cloud Library 缓冲区错误漏洞

Point Cloud Library PCL is a library in the Point Cloud Library open source. A security vulnerability exists in Point Cloud Library version 1.14.0 and earlier, which stems from improper pointer arithmetic in the zlib library that could lead to undefined behavior...

The vulnerability of the KVM kernel component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the KVM kernel component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the kzalloc() function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the kzalloc function in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the alloc_precpu() function in the Linux operating system allows a hacker to perform a denial-of-service attack.

The vulnerability of the allocprecpu function in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to perform a denial-of-service attack...

`VMABuffer::set_data` may allow out-of-bounds writes from safe code

VMABuffer::setdata was a publicly accessible safe function. It accepted an arbitrary offset and a data slice, then used the offset in unsafe pointer arithmetic before copying the slice into a mapped allocation. Affected versions did not check that the requested write range fit within the allocati...

The vulnerability of the `cache_setFlush()` function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the cachesetFlush function in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to trigger a service failure...

Vulnerability of the ieee80211_probereq_get() function in the drivers/net/wireless/realtek/rtw89/fw.c module of the Linux kernel, allowing a hacker to cause a service failure

The vulnerability of the ieee80211probereqget function in the drivers/net/wireless/realtek/rtw89/fw.c module of the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the memset() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_job.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the memset function in the drivers/gpu/drm/amd/amdgpu/amdgpujob.c module of the Linux kernel’s CPU is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the cppc_get_cpu_cost() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the cppcgetcpucost function in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mlx5e_tir_builder_alloc() function in the net/mlx5e component of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the mlx5etirbuilderalloc function in the net/mlx5e component of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the __hci_cmd_sync_sk() function in the net/bluetooth/hci_sync.c component of the Linux operating system allows a malicious actor to trigger a service failure.

The vulnerability of the hcicmdsyncsk function in the net/bluetooth/hcisync.c component of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the cpufreq_cpu_get_raw() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the cpufreqcpugetraw function in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the DRM/AMD/display components in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the DRM/amd/display components in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the DRM/AMD/display components of the Linux operating system allows a perpetrator to influence the accessibility of protected information.

The vulnerability of the DRM/AMD/display components in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to influence the accessibility of protected information...

The vulnerability of the DRM/Mediatek kernel components in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the DRM/Mediatek kernel components in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability could allow a hacker to cause a service failure...

The vulnerability of the bdev_open_by_dev() function in the block/bdev.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the bdevopenbydev function in the block/bdev.c module of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic

...

inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic

...

Linux Distros Unpatched Vulnerability : CVE-2021-29155

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel through 5.11.x. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading ...