org.jboss.hal:hal-standalone (>=3.5.0.final, <=3.7.10.final), org.wildfly:wildfly-ee-feature-pack-common (>=28.0.0.beta1, <=28.0.1.final) +3 more potentially affected by CVE-2025-2901 via org.jboss.hal:hal-console (>=3.5.0.final, <=3.7.10.final)

org.jboss.hal:hal-console MAVEN version =3.5.0.final, =3.5.0.final, =28.0.0.beta1, =29.0.0.alpha1, =28.0.0.beta1, =28.0.0.beta1, =36.0.0.final Source cves: CVE-2025-2901 Source advisory: GHSA-F7JH-M6WP-JM7F...

CVE-2025-21467

Memory corruption while reading the FW response from the shared queue...

CVE-2025-21467

Memory corruption while reading the FW response from the shared queue...

CVE-2025-21467

CVE-2025-21467 describes memory corruption that occurs when reading the firmware (FW) response from the shared queue in Qualcomm chipsets. The issue affects Qualcomm mobile firmware components (notably in camera-related workflows per CVE listings) and is caused by improper handling of the FW resp...

CVE-2025-21467 Out-of-bounds Write in Computer Vision

Memory corruption while reading the FW response from the shared queue...

CVE-2025-21467: Out-of-bounds Write

Memory corruption while reading the FW response from the shared queue...

Qualcomm Chipsets Buffer Error Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A buffer error vulnerability exists in Qualcomm Chipsets that stems from memory corruption when reading FW responses from a shared queue...

CVE-2025-1493

IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service due to concurrent execution of shared resources...

CVE-2025-1493

CVE-2025-1493 affects IBM Db2 for Linux, UNIX and Windows (including Db2 Connect Server) 12.1.0–12.1.1. An authenticated user could trigger a denial of service via concurrent execution of shared resources (race condition). IBM’s security bulletins detail a fix path: for V12.1.0, apply Special Bui...

CVE-2025-1493 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service due to concurrent execution of shared resources...

CVE-2025-1493 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service due to concurrent execution of shared resources...

BIT-MOODLE-2024-34004 moodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod_wiki backup

In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore wiki modules and direct access to the web server outside of the Moodle webroot could execute a local file include...

BIT-MOODLE-2024-34003 moodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod_workshop backup

In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore workshop modules and direct access to the web server outside of the Moodle webroot could execute a local file include...

BIT-MOODLE-2024-34002 moodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod_feedback backup

In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore feedback modules and direct access to the web server outside of the Moodle webroot could execute a local file include...

Linux arch/s390/include/asm/ccwgroup.h Heap Buffer Overflow DoS

The vulnerability of the getccwgroupdevbybusid function in the arch/s390/include/asm/ccwgroup.h module of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2022-49891 tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd()

In the Linux kernel, the following vulnerability has been resolved: tracing: kprobe: Fix memory leak in testgenkprobe/kretprobecmd testgenkprobecmd only free buf in fail path, hence buf will leak when there is no failure. Move kfreebuf from fail path to common path to prevent the memleak. The sam...

CVE-2022-49840 bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb()

In the Linux kernel, the following vulnerability has been resolved: bpf, testrun: Fix alignment problem in bpfprogtestrunskb We got a syzkaller problem because of aarch64 alignment fault if KFENCE enabled. When the size from user bpf program is an odd number, like 399, 407, etc, it will cause the...

CVE-2025-23159

In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: add a check to handle OOB in sfr region sfr-bufsize is in shared memory and can be modified by malicious user. OOB write is possible when the size is made higher than actual sfr data buffer. Cap the size to...

DEBIAN-CVE-2025-23159

In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: add a check to handle OOB in sfr region sfr-bufsize is in shared memory and can be modified by malicious user. OOB write is possible when the size is made higher than actual sfr data buffer. Cap the size to...

UBUNTU-CVE-2025-23159

In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: add a check to handle OOB in sfr region sfr-bufsize is in shared memory and can be modified by malicious user. OOB write is possible when the size is made higher than actual sfr data buffer. Cap the size to...