3554 matches found
JLSEC-2026-71
A security regression CVE-2006-5051 was discovered in OpenSSH's server sshd. There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period...
EUVD-2026-20964
Tmds.DBus provides .NET libraries for working with D-Bus from .NET. Tmds.DBus and Tmds.DBus.Protocol are vulnerable to malicious D-Bus peers. A peer on the same bus can spoof signals by impersonating the owner of a well-known name, exhaust system resources or cause file descriptor spillover by...
CVE-2026-39959 Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service
Tmds.DBus provides .NET libraries for working with D-Bus from .NET. Tmds.DBus and Tmds.DBus.Protocol are vulnerable to malicious D-Bus peers. A peer on the same bus can spoof signals by impersonating the owner of a well-known name, exhaust system resources or cause file descriptor spillover by...
CVE-2026-39959
CVE-2026-39959 affects Tmds.DBus and Tmds.DBus.Protocol. A malicious D-Bus peer on the same bus can spoof signals, exhaust file descriptor resources by sending many Unix FDs, and crash apps via malformed messages that trigger unhandled SynchronizationContext exceptions. Fixes are in Tmds.DBus 0.9...
EUVD-2026-20756
OpenClaw has Signal group allowlist authorization bypass via DM pairing-store leakage...
GHSA-XRW6-GWF8-VVR9 Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service
Tmds.DBus and Tmds.DBus.Protocol are vulnerable to malicious D-Bus peers. A peer on the same bus can spoof signals by impersonating the owner of a well-known name, exhaust system resources or cause file descriptor spillover by sending messages with an excessive number of Unix file descriptors, an...
Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service
Tmds.DBus and Tmds.DBus.Protocol are vulnerable to malicious D-Bus peers. A peer on the same bus can spoof signals by impersonating the owner of a well-known name, exhaust system resources or cause file descriptor spillover by sending messages with an excessive number of Unix file descriptors, an...
CVE-2025-69515
An issue in JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to force the infotainment system into accepting falsified GPS signals as legitimate, resulting in the device reporting an incorrect or static location...
ROS-20260408-73-0014
A vulnerability in the arch/arm/mach-rockchip component of the Linux operating system kernel is related to a race condition in the signal handler. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
CVE-2025-47374
Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling...
EUVD-2025-209222
Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling...
CVE-2025-47374
Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling...
CVE-2026-21380
CVE-2026-21380 involves memory corruption (use-after-free) in the DSP service when deprecated DMABUF IOCTL calls are used to manage video memory. Documents describe a local, low-privilege attack with no user interaction and high impact to confidentiality, integrity, and availability. Root cause i...
CVE-2025-47374 Use After Free in Camera Driver
Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling...
CVE-2025-47374 Use After Free in Camera Driver
Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling...
CVE-2025-47374
CVE-2025-47374 involves a use-after-free in the camera driver leading to memory corruption. Reported cause: memory access to freed memory due to concurrent fence deregistration and signal handling. Affected component is the camera driver; impact as described is memory corruption with potential im...
Qualcomm Chipsets Resource Management Vulnerability
Qualcomm Chipsets are a series of chipset developed by Qualcomm Incorporation. Qualcomm Chipsets have a resource management vulnerability that stems from accessing released memory during concurrent fence cancellation and signal processing, which may lead to memory corruption...
CVE-2025-47374: Use After Free
Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling...
PT-2026-30634
Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling...
CVE-2026-33950
Signal K Server is a server application that runs on a central hub in a boat. Prior to version 2.24.0-beta.4, there is a privilege escalation vulnerability by Admin Role Injection via /enableSecurity. An unauthenticated attacker can gain full Administrator access to the SignalK server at any time...