CVE-2025-9903

Out-of-bounds write vulnerabilities in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Driver / Generic Plus LIPSLX Printer Driver / Generic Plus PS Printer Driver / UFRII LT Printer Driver / CARPS2 Printer Driver / Generic FA...

CVE-2025-9903

CVE-2025-9903 affects Canon printer drivers (Generic Plus PCL6/ UFR II/ LIPS4/ LIPSLX/ PS/ UFRII LT/ CARPS2/ Generic FAX). The root cause is an out-of-bounds write in the drivers’ print processing path. Canon and partners list affected production/office laser-printers drivers; vulnerability could...

CVE-2025-9903

Out-of-bounds write vulnerabilities in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Driver / Generic Plus LIPSLX Printer Driver / Generic Plus PS Printer Driver / UFRII LT Printer Driver / CARPS2 Printer Driver / Generic FA...

CVE-2025-9903

Out-of-bounds write vulnerabilities in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Driver / Generic Plus LIPSLX Printer Driver / Generic Plus PS Printer Driver / UFRII LT Printer Driver / CARPS2 Printer Driver / Generic FA...

PT-2025-39853

Name of the Vulnerable Software and Affected Versions macOS versions prior to 14.8.1 macOS Tahoe versions prior to 26.0.1 macOS Sequoia versions prior to 15.7.1 visionOS versions prior to 26.0.1 iOS versions prior to 26.0.1 iPadOS versions prior to 26.0.1 iOS versions prior to 18.7.1 iPadOS...

Canon多款产品 安全漏洞

Canon Generic PCL6 Printer Driver and others are products of Canon Japan.Canon Generic PCL6 Printer Driver is a Canon Generic PCL6 V4 printer driver.Canon Generic UFR II V4 Printer Canon Generic UFR II V4 Printer Driver is a Canon Generic UFR II V4 printer driver.Canon Generic Plus LIPS4 Printer...

PT-2025-39800

Name of the Vulnerable Software and Affected Versions Generic Plus PCL6 Printer Driver Generic Plus UFR II Printer Driver Generic Plus LIPS4 Printer Driver Generic Plus LIPSLX Printer Driver Generic Plus PS Printer Driver affected versions not specified Description The software contains...

Canon多款产品 安全漏洞

Canon Generic PCL6 Printer Driver and others are products of Canon Japan.Canon Generic PCL6 Printer Driver is a Canon Generic PCL6 V4 printer driver.Canon Generic UFR II V4 Printer Canon Generic UFR II V4 Printer Driver is a Canon Generic UFR II V4 printer driver.Canon Generic Plus LIPS4 Printer...

PT-2025-39802

Name of the Vulnerable Software and Affected Versions Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Driver / Generic Plus LIPSLX Printer Driver / Generic Plus PS Printer Driver affected versions not specified Description An unallocated memory...

Canon多款产品 安全漏洞

Canon Generic Plus PCL6 Printer Driver and others are a printer driver from Canon Japan. A security vulnerability exists in various Canon products, which originates from an out-of-bounds write in print processing. The following products are affected: Generic Plus PCL6 Printer Driver, Generic Plus...

CVE-2025-11107

A vulnerability was found in code-projects Simple Scheduling System 1.0. This issue affects some unknown processing of the file /schedulingsystem/addcourse.php. Performing manipulation of the argument corcode results in sql injection. The attack is possible to be carried out remotely. The exploit...

ALSA: seq: oss: Fix races at processing SysEx messages

...

The vulnerability of components such as drivers, GPU, DRM, and XE in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drivers/gpu/drm/xe components of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the elfswapshdr function in bfd/elfcode.h of the Linker component. An attacker can execute arbitrary code or cause a denial of service by providing crafted input that triggers a heap-based buffer overflow...

CVE-2025-11032 kidaze CourseSelectionSystem COUNT3s6.php sql injection

A flaw has been found in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. This issue affects some unknown processing of the file /Profilers/PriProfile/COUNT3s6.php. Executing manipulation of the argument CPU can lead to sql injection. The attack may be performed from...

OpenMLS improper persistence of the secret tree during message processing

Summary A bug in the OpenMLS library prevented private key material from being updated in storage during message processing. The key material in question are the keys stored in the MLS secret tree, which are used for decryption of private MLS messages. The effects of the bug are limited in scope,...

GHSA-QR9H-X63W-VQFM OpenMLS improper persistence of the secret tree during message processing

Summary A bug in the OpenMLS library prevented private key material from being updated in storage during message processing. The key material in question are the keys stored in the MLS secret tree, which are used for decryption of private MLS messages. The effects of the bug are limited in scope,...

Security update for jasper

This update for jasper fixes the following issues: CVE-2025-8835: missing range check in the JPEG-2000 JPC Encoder leads to assertion failure and crash when processing a malformed JPEG2000 image with an invalid cblkwidth parameter bsc1247904. CVE-2025-8836: out-of-bounds array indexing in functio...

Denial Of Service (DoS)

github.com/hashicorp/vault is vulnerable to Denial of Service DoS. The vulnerability is due to processing specially crafted complex payloads within the default request size limit, which allows an attacker to consume excessive memory and CPU resources...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the ReadMolecule function in the PQSFormat component. An attacker can cause a denial of service by providing crafted input that triggers a null pointer dereference during local processing. Remediation There ...