Lucene search
+L

163 matches found

Snyk
Snyk
•added 2025/09/08 3:41 p.m.•18 views

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the SIMD.xs process. An attacker can cause a segmentation fault and potentially disrupt service availability by submitting specially crafted JSON input. Remediation Upgrade pjuhasz/JSON-SIMD to version 1.0...

7.5CVSS5.8AI score0.00708EPSS
SaveExploits0References2
NVD
NVD
•added 2025/09/08 3:15 p.m.•23 views

CVE-2025-40930

JSON::SIMD before version 1.07 and earlier for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact...

7.5CVSS0.00708EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/09/08 3:09 p.m.•8 views

CVE-2025-40930 JSON::SIMD before version 1.07 and earlier for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact

JSON::SIMD before version 1.07 and earlier for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact...

6.1AI score0.00708EPSS
SaveExploits0References3
Mend
Mend
•added 2025/09/08 3:09 p.m.•8 views

CVE-2025-40930

JSON::SIMD before version 1.07 and earlier for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact...

8.7CVSS6.1AI score0.00708EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/08 12:00 a.m.•7 views

CVE-2025-40930: Heap-based Buffer Overflow

JSON::SIMD before version 1.07 and earlier for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact...

7.5CVSS6.1AI score0.00708EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/08 12:00 a.m.•14 views

MetaCPAN JSON::SIMD security vulnerability

MetaCPAN JSON::SIMD is a JSON codec module in the Perl language from the MetaCPAN Foundation. A security vulnerability exists in MetaCPAN JSON::SIMD versions prior to 1.07, which stems from an integer buffer overflow that could lead to a denial of service attack...

7.5CVSS6AI score0.00708EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/09/08 12:00 a.m.•25 views

PT-2025-36475

Name of the Vulnerable Software and Affected Versions: JSON::SIMD versions prior to 1.07 Description: JSON::SIMD, a Perl module, contains an integer buffer overflow that can lead to a segmentation fault when processing specially crafted JSON data. This issue may result in denial-of-service attack...

7.5CVSS6.1AI score0.00708EPSS
SaveExploits0References7
Packet Storm News
Packet Storm News
•added 2025/08/07 12:00 a.m.•22 views

Performance and Storage Analysis of CRYSTALS Kyber As a Post Quantum Replacement for RSA and ECC

The steady advancement in quantum computer error correction technology has pushed the current record to 48 stable logical qubits, bringing us closer to machines capable of running Shor's algorithm at scales that threaten RSA and ECC cryptography. While the timeline for developing such quantum...

6.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2025/07/14 11:26 p.m.•13 views

simd:simd_load_fuzzer: Index-out-of-bounds in Simd::Avx2::jpeg__jpeg_decode_block

Detailed Report: https://oss-fuzz.com/testcase?key=5711505591173120 Project: simd Fuzzing Engine: libFuzzer Fuzz Target: simdloadfuzzer Job Type: libfuzzerubsansimd Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: Simd::Avx2::jpegjpegdecodeblock...

5.4AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2025/07/13 12:00 a.m.•12 views

Secure and Efficient UAV-Based Face Detection Via Homomorphic Encryption and Edge Computing

This paper aims to propose a novel machine learning ML approach incorporating Homomorphic Encryption HE to address privacy limitations in Unmanned Aerial Vehicles UAV-based face detection. Due to challenges related to distance, altitude, and face orientation, high-resolution imagery and...

6.9AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/07/11 12:00 a.m.•24 views

PT-2025-37485

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's poly1305 function within the arm64/poly1305 module. The issue involves register corruption in contexts where Single Instruction Multiple Data SIMD is...

7.8CVSS7.2AI score0.00252EPSS
SaveExploits0References18
osv_debian
osv_debian
•added 2025/07/03 9:15 a.m.•10 views

DEBIAN-CVE-2025-38169

In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: Avoid clobbering kernel FPSIMD state with SMSTOP On system with SME, a thread's kernel FPSIMD state may be erroneously clobbered during a context switch immediately after that state is restored. Systems without SME...

5.5CVSS6.6AI score0.00173EPSS
SaveExploits0References1
AstraLinux
AstraLinux
•added 2025/06/16 11:28 a.m.•13 views

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state There are several issues with the way the hyp code lazily saves the host’s FPSIMD/SVE state. These include: The host SVE state is unexpectedly discarded due to...

7.3CVSS6.4AI score0.00212EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/05/23 9:20 a.m.•14 views

CVE-2024-3207

A vulnerability was found in ermig1979 Simd up to 6.0.134. It has been declared as critical. This vulnerability affects the function ReadUnsigned of the file src/Simd/SimdMemoryStream.h. The manipulation leads to heap-based buffer overflow. The exploit has been disclosed to the public and may be...

9.8CVSS5.7AI score0.00968EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 1:02 a.m.•25 views

CVE-2022-31104

Wasmtime is a standalone runtime for WebAssembly. In affected versions wasmtime's implementation of the SIMD proposal for WebAssembly on x8664 contained two distinct bugs in the instruction lowerings implemented in Cranelift. The aarch64 implementation of the simd proposal is not affected. The bu...

6.8CVSS6.1AI score0.01785EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 8:11 a.m.•19 views

CVE-2019-15550

An issue was discovered in the simd-json crate before 0.1.15 for Rust. There is an out-of-bounds read and an incorrect crossing of a page boundary...

7.5CVSS7.3AI score0.01398EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/09 12:00 a.m.•21 views

PT-2025-27754

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, specifically related to the arm64/fpsimd component. The issue occurs when a thread's kernel FPSIMD state is restored during a...

7.8CVSS6.6AI score0.00173EPSS
SaveExploits0
Fedora
Fedora
•added 2024/12/22 2:13 a.m.•27 views

[SECURITY] Fedora 40 Update: mingw-orc-0.4.40-1.fc40

Orc is a library and set of tools for compiling and executing very simple programs that operate on arrays of data. The "language" is a generic assembly language that represents many of the features available in SIMD architectures, including saturated addition and subtraction, and many arithmetic...

9.8CVSS6.8AI score0.01728EPSS
SaveExploits2
osv_ghsa
osv_ghsa
•added 2024/11/12 8:53 p.m.•18 views

GHSA-PQPW-89W5-82V5 `simd-json-derive` vulnerable to `MaybeUninit` misuse

An invalid use of MaybeUninit::uninit.assumeinit in simd-json-derive's derive macro can cause undefined behavior. The original code used MaybeUninit to avoid initialisation of the struct and then set the fields using ptr::write. The undefined behavior triggered by this misuse of MaybeUninit can...

8.7CVSS7.2AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2024/11/12 8:53 p.m.•25 views

`simd-json-derive` vulnerable to `MaybeUninit` misuse

An invalid use of MaybeUninit::uninit.assumeinit in simd-json-derive's derive macro can cause undefined behavior. The original code used MaybeUninit to avoid initialisation of the struct and then set the fields using ptr::write. The undefined behavior triggered by this misuse of MaybeUninit can...

7.2AI score
SaveExploits0References3Affected Software1
Rows per page
Query Builder