Security Bulletin: IBM Cognos PowerPlay has addressed a vulnerability in FreeType (CVE-2025-27363)

Summary IBM Cognos PowerPlay is considered affected by an arbitrary code execution in FreeType CVE-2025-27363. Vulnerability Details CVEID:CVE-2025-27363 DESCRIPTION: An out of bounds write exists in FreeType versions 2.13.0 and below newer versions of FreeType are not vulnerable when attempting ...

The vulnerability of the `init_overdrivelimits()` function in the Linux kernel’s drivers/gpu/drm/amd/pm/powerplay/hwmgr/processpptables.c file allows a malicious actor to trigger a service failure.

The vulnerability of the initoverdrivelimits function in the drivers/gpu/drm/amd/pm/powerplay/hwmgr/processpptables.c file of the Linux kernel is related to the pointer dereferencing. Exploiting this vulnerability could allow an attacker to trigger a service failure...

PT-2025-20503

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to error handling in the amd powerplay create function, specifically when amdgpu cgs create device fails. To...

DEBIAN-CVE-2025-21780

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid buffer overflow attach in smusyssetpptable It malicious user provides a small pptable through sysfs and then a bigger pptable, it may cause buffer overflow attack in function smusyssetpptable...

SUSE CVE-2024-26949

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm: Fix NULL pointer dereference when get power limit Because powerplaytable initialization is skipped under sriov case, We check and set default lower and upper OD value if powerplaytable is NULL...

AZL-42180 CVE-2024-26949 affecting package kernel for versions less than 6.6.35.1-4

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm: Fix NULL pointer dereference when get power limit Because powerplaytable initialization is skipped under sriov case, We check and set default lower and upper OD value if powerplaytable is NULL...

AZL-42276 CVE-2024-26949 affecting package kernel for versions less than 5.15.158.2-1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm: Fix NULL pointer dereference when get power limit Because powerplaytable initialization is skipped under sriov case, We check and set default lower and upper OD value if powerplaytable is NULL...

DEBIAN-CVE-2024-26949

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm: Fix NULL pointer dereference when get power limit Because powerplaytable initialization is skipped under sriov case, We check and set default lower and upper OD value if powerplaytable is NULL...

UBUNTU-CVE-2024-26949

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm: Fix NULL pointer dereference when get power limit Because powerplaytable initialization is skipped under sriov case, We check and set default lower and upper OD value if powerplaytable is NULL...

kernel: drm/amdgpu/powerplay/psm: Fix memory leak in power state init

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/powerplay/psm: Fix memory leak in power state init Commit 902bc65de0b3 "drm/amdgpu/powerplay/psm: return an error in power state init" made the power state init function return early in case of failure to get an entry...

kernel: drm/amdgpu/powerplay/psm: Fix memory leak in power state init

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/powerplay/psm: Fix memory leak in power state init Commit 902bc65de0b3 "drm/amdgpu/powerplay/psm: return an error in power state init" made the power state init function return early in case of failure to get an entry...

GSD-2023-1001180 drm/amdgpu/powerplay/psm: Fix memory leak in power state init

drm/amdgpu/powerplay/psm: Fix memory leak in power state init This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000796 drm/amdgpu/powerplay/psm: Fix memory leak in power state init

drm/amdgpu/powerplay/psm: Fix memory leak in power state init This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

PT-2023-33873 · Amd · Amdgpu

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: A memory leak issue was discovered in the power state initialization of the AMDGPU powerplay module. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-38214

Уязвимость функции pp set fine grain clk vol модуля drivers/gpu/drm/amd/pm/powerplay/amd powerplay.c драйвера инфраструктуры прямого рендеринга DRI видеокарт AMD ядра операционной системы Linux связана с реализацией некорректного потока управления. Эксплуатация уязвимости может позволить нарушите...

PT-2025-49458

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the power state initialization function within the DRM/amdgpu/powerplay/psm module of the Linux kernel. A commit 902bc65de0b3 intended to improve error handling...

CVE-2021-20464

IBM Cognos Analytics PowerPlay IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could be vulnerable to an XML Bomb attack by a malicious authenticated user. IBM X-Force ID: 196813...

CVE-2021-20464

IBM Cognos Analytics PowerPlay IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could be vulnerable to an XML Bomb attack by a malicious authenticated user. IBM X-Force ID: 196813...

CVE-2021-20464

CVE-2021-20464 affects IBM Cognos Analytics PowerPlay (IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7). A malicious authenticated user could trigger an XML Bomb attack, leading to a denial of service of the affected PowerPlay component. Connected sources confirm impacted product lines and the XM...

CVE-2021-20464: Improper Restriction of Recursive Entity References in DTDs

IBM Cognos Analytics PowerPlay IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could be vulnerable to an XML Bomb attack by a malicious authenticated user. IBM X-Force ID: 196813...