CVE-2025-1403: Deserialization of Untrusted Data

Qiskit SDK 0.45.0 through 1.2.4 could allow a remote attacker to cause a denial of service using a maliciously crafted QPY file containing a malformed symengine serialization stream which can cause a segfault within the symengine library...

PT-2025-7587 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-641 Description: An issue in Bento4 allows an attacker to trigger a segmentation fault via Ap4Atom.cpp, specifically in AP4 AtomParent::RemoveChild, during the execution of mp4encrypt with a specially crafted MP4 input...

Fedora 40 : python3.13 (2025-33e7714792)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-33e7714792 advisory. Update to 3.13.2 ---- Statically build the datetime module into libpython. This fixes a segfault when importing it from Python 3.13.0 updated to 3.13.1+ whil...

SUSE CVE-2025-24031

PAM-PKCS11 is a Linux-PAM login module that allows a X.509 certificate based user login. In versions 0.6.12 and prior, the pampkcs11 module segfaults when a user presses ctrl-c/ctrl-d when they are asked for a PIN. When a user enters no PIN at all, pamgetpwd will never initialize the password...

CVE-2025-24031

PAM-PKCS11 is a Linux-PAM login module that allows a X.509 certificate based user login. In versions 0.6.12 and prior, the pampkcs11 module segfaults when a user presses ctrl-c/ctrl-d when they are asked for a PIN. When a user enters no PIN at all, pamgetpwd will never initialize the password...

CVE-2025-24031

PAM-PKCS11 is a Linux-PAM login module that allows a X.509 certificate based user login. In versions 0.6.12 and prior, the pampkcs11 module segfaults when a user presses ctrl-c/ctrl-d when they are asked for a PIN. When a user enters no PIN at all, "pamgetpwd" will never initialize the password...

CVE-2025-24031

CVE-2025-24031 affects the PAM-PKCS#11 Linux-PAM module (version 0.6.12 and earlier). The issue is a dereference of an uninitialized pointer when a user enters no PIN, and a segfault when a user presses Ctrl-C/Ctrl-D during PIN entry, producing an availability impact (daemon crash). The vulnerabi...

CVE-2025-24031 PAM-PKCS#11 vulnerable to segmentation fault on ctrl-c/ctrl-d when asked for PIN

PAM-PKCS11 is a Linux-PAM login module that allows a X.509 certificate based user login. In versions 0.6.12 and prior, the pampkcs11 module segfaults when a user presses ctrl-c/ctrl-d when they are asked for a PIN. When a user enters no PIN at all, pamgetpwd will never initialize the password...

CVE-2025-24031

PAM-PKCS11 is a Linux-PAM login module that allows a X.509 certificate based user login. In versions 0.6.12 and prior, the pampkcs11 module segfaults when a user presses ctrl-c/ctrl-d when they are asked for a PIN. When a user enters no PIN at all, pamgetpwd will never initialize the password...

CVE-2025-24031: NULL Pointer Dereference

PAM-PKCS11 is a Linux-PAM login module that allows a X.509 certificate based user login. In versions 0.6.12 and prior, the pampkcs11 module segfaults when a user presses ctrl-c/ctrl-d when they are asked for a PIN. When a user enters no PIN at all, pamgetpwd will never initialize the password...

Fedora 41 : python3-docs / python3.13 (2025-e911f71d99)

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-e911f71d99 advisory. Update to 3.13.2 ---- Statically build the datetime module into libpython. This fixes a segfault when importing it from Python 3.13.0 updated to 3.13.1+ whil...

ndpi:fuzz_ndpi_reader: Segv on unknown address in ndpi_snprintf

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=4661103107309568 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireader Job Type: libfuzzermsanndpi Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

ntopng:fuzz_dissect_packet: Segv on unknown address in ___interceptor_free

Project: https://github.com/ntop/ntopng.git Detailed Report: https://oss-fuzz.com/testcase?key=6599096806211584 Project: ntopng Fuzzing Engine: libFuzzer Fuzz Target: fuzzdissectpacket Job Type: libfuzzerasanntopng Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

DEBIAN-CVE-2024-50665

gpac 2.4 contains a SEGV at src/isomedia/drmsample.c:1562:96 in isomcencgetsaibysaizsaio in MP4Box...

UBUNTU-CVE-2024-50665

gpac 2.4 contains a SEGV at src/isomedia/drmsample.c:1562:96 in isomcencgetsaibysaizsaio in MP4Box...

DEBIAN-CVE-2025-24014

Vim is an open source, command line text editor. A segmentation fault was found in Vim before 9.1.1043. In silent Ex mode -s -e, Vim typically doesn't show a screen and just operates silently in batch mode. However, it is still possible to trigger the function that handles the scrolling of a gui...

[SECURITY] [DLA 4026-1] tiff security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4026-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk January 20, 2025 https://wiki.debian.org/LTS -...

CVE-2024-53184

In the Linux kernel, the following vulnerability has been resolved: um: ubd: Do not use drvdata in release The drvdata is not available in release. Let's just use containerof to get the ubd instance. Otherwise, removing a ubd device will result in a crash: RIP: 0033:blkmqfreetagset+0x1f/0xba RSP:...

vulkan-loader:settings_fuzzer: Segv on unknown address in loader_delete_layer_list_and_properties

Project: https://github.com/khronosgroup/Vulkan-Loader.git Detailed Report: https://oss-fuzz.com/testcase?key=4809992808497152 Project: vulkan-loader Fuzzing Engine: libFuzzer Fuzz Target: settingsfuzzer Job Type: libfuzzerasanvulkan-loader Platform Id: linux Crash Type: Segv on unknown address...

CVE-2024-53181

In the Linux kernel, the following vulnerability has been resolved: um: vector: Do not use drvdata in release The drvdata is not available in release. Let's just use containerof to get the vectordevice instance. Otherwise, removing a vector device will result in a crash: RIP:...