CVE-2022-35972

TensorFlow is an open source platform for machine learning. If QuantizedBiasAdd is given mininput, maxinput, minbias, maxbias tensors of a nonzero rank, it results in a segfault that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

CVE-2022-36027

TensorFlow is an open source platform for machine learning. When converting transposed convolutions using per-channel weight quantization the converter segfaults and crashes the Python process. We have patched the issue in GitHub commit aa0b852a4588cea4d36b74feb05d93055540b450. The fix will be...

CVE-2021-41222

TensorFlow is an open source platform for machine learning. In affected versions the implementation of SplitV can trigger a segfault is an attacker supplies negative arguments. This occurs whenever sizesplits contains more than one value and at least one value is negative. The fix will be include...

CVE-2021-37677

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the shape inference code for tf.rawops.Dequantize has a vulnerability that could trigger a denial of service via a segfault if an attacker provides invalid arguments. The shape inference implementation use...

CVE-2021-29539

TensorFlow is an end-to-end open source platform for machine learning. Calling tf.rawops.ImmutableConsthttps://www.tensorflow.org/apidocs/python/tf/rawops/ImmutableConst with a dtype of tf.resource or tf.variant results in a segfault in the implementation as code assumes that the tensor contents...

CVE-2021-25904

An issue was discovered in the av-data crate before 0.3.0 for Rust. A raw pointer is dereferenced, leading to a read of an arbitrary memory address, sometimes causing a segfault...

CVE-2021-41204

TensorFlow is an open source platform for machine learning. In affected versions during TensorFlow's Grappler optimizer phase, constant folding might attempt to deep copy a resource tensor. This results in a segfault, as these tensors are supposed to not change. The fix will be included in...

CVE-2021-37690

TensorFlow is an end-to-end open source platform for machine learning. In affected versions when running shape functions, some functions such as MutableHashTableShape produce extra output information in the form of a ShapeAndType struct. The shapes embedded in this struct are owned by an inferenc...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : openssh (SUSE-SU-2025:01638-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:01638-1 advisory. This update for openssh fixes the following issue: Security fixes: - CVE-2025-32728: Fixed logic error i...

SUSE-SU-2025:01615-1 Security update for grub2

This update for grub2 rebuilds the existing package with the new 4k RSA secure boot key for IBM Power and Z. Note: the signing key of x86 / x8664 and aarch64 architectures are unchanged. Also the following issue were fixed: - CVE-2025-4382: TPM auto-decryption data exposure bsc1242971 - Fix...

libzmq:test_connect_fuzzer: Segv on unknown address in test_connect_fuzzer

Detailed Report: https://oss-fuzz.com/testcase?key=6301312457703424 Project: libzmq Fuzzing Engine: libFuzzer Fuzz Target: testconnectfuzzer Job Type: libfuzzerasanlibzmq Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: testconnectfuzzer Sanitizer: address ASAN...

PT-2025-25829

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, which was causing a segfault when using PEBS-via-PT with a sample frequency instead of a sample period. The issue occurred because...

Alibaba Cloud Linux 3 : 0082: raptor2 (ALINUX3-SA-2022:0082)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0082 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2017-18926:...

cpython3:fuzz_json_loads: Segv on unknown address in _Py_Dealloc

Project: https://github.com/python/cpython.git Detailed Report: https://oss-fuzz.com/testcase?key=6725673932881920 Project: cpython3 Fuzzing Engine: honggfuzz Fuzz Target: fuzzjsonloads Job Type: honggfuzzasancpython3 Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash...

njs:njs_process_script_fuzzer: Segv on unknown address in njs_string_prop

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5460990361927680 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: njsstringpr...

mruby:mruby_fuzzer: Segv on unknown address in gc_mark_children

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6467930120585216 Project: mruby Fuzzing Engine: afl Fuzz Target: mrubyfuzzer Job Type: aflasanmruby Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: gcmarkchildren...

Security update for pam_pkcs11

This update for pampkcs11 fixes the following issues: CVE-2025-24031: Fixed segmentation fault on ctrl-c/ctrl-d when asked for PIN bsc1237058. CVE-2025-24032: Fixed authentication bypass with default value for certpolicy none bsc1237062. Patch Instructions: To install this SUSE update use the SUS...

ffmpeg:ffmpeg_AV_CODEC_ID_SANM_fuzzer: Segv on unknown address in std::__Fuzzer::pair<std::__Fuzzer::__hash_iterator<std::__Fuzzer::__hash_node<st

Detailed Report: https://oss-fuzz.com/testcase?key=6365392807460864 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDSANMfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

PT-2025-36474

Name of the Vulnerable Software and Affected Versions: Cpanel::JSON::XS versions prior to 4.40 Description: Cpanel::JSON::XS, a Perl module, contains an integer buffer overflow. This overflow occurs when parsing specially crafted JSON data, leading to a segmentation fault. This can result in...

Security Bulletin: Qiskit SDK Vulnerability Allows Remote Attackers to Cause Denial of Service via Maliciously Crafted QPY File

Summary A maliciously crafted QPY file containing a malformed symengine serialization stream as part of the larger QPY serialization of a ParameterExpression object can cause a segfault within the symengine library, allowing an attacker to terminate the hosting process. Vulnerability Details...