CVE-2024-45565

Memory corruption when blob structure is modified by user-space after kernel verification...

CVE-2024-45565

Memory corruption when blob structure is modified by user-space after kernel verification...

CVE-2024-45565

CVE-2024-45565 describes a TOCTOU race condition in the Qualcomm camera driver where memory corruption can occur if a blob structure is modified by user-space after kernel verification. The issue affects Qualcomm chipsets with a camera driver component and is triggered by a mismatch between kerne...

CVE-2024-45565 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver

Memory corruption when blob structure is modified by user-space after kernel verification...

CVE-2024-45565: Time-of-check Time-of-use (TOCTOU) Race Condition

Memory corruption when blob structure is modified by user-space after kernel verification...

CBL Mariner 2.0 Security Update: kernel (CVE-2025-21687)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21687 advisory. - In the Linux kernel, the following vulnerability has been resolved: vfio/platform: check the bounds of...

Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets, which originates from a Camera kernel driver memory corruption during a user-space call to IOCTL to dump request information...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21699)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21699 advisory. - In the Linux kernel, the following vulnerability has been resolved: gfs2: Truncate address space when flippi...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a kernel validation followed by a user-space modification of the blob structure, which could result in memory corruption...

Improper Handling of Highly Compressed Data (Data Amplification)

Overview mobsf is a Mobile Security Framework MobSF is an automated, all-in-one mobile application Android/iOS/Windows pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. Affected versions of this package are vulnerable to Improper...

Mobile Security Framework (MobSF) Allows Web Server Resource Exhaustion via ZIP of Death Attack

Vulnerable MobSF Versions: = v4.3.2 Details: MobSF is a widely adopted mobile application security testing tool used by security teams across numerous organizations. Typically, MobSF is deployed on centralized internal or cloud-based servers that also host other security tools and web application...

libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()

A flaw was found in libsoup. A vulnerability in snifffeedorhtml and skipinsignificantspace functions may lead to a heap buffer over-read...

CVE-2025-46730: Improper Handling of Highly Compressed Data (Data Amplification)

MobSF is a mobile application security testing tool used. Typically, MobSF is deployed on centralized internal or cloud-based servers that also host other security tools and web applications. Access to the MobSF web interface is often granted to internal security teams, audit teams, and external...

The vulnerabilities of the functions sniff_feed_or_html() and skip_insignificant_space() in the GNOME graphical interface library libsoup allow a attacker to cause a service failure.

The vulnerabilities of the functions snifffeedorhtml and skipinsignificantspace in the GNOME graphical interface library libsoup are related to the lack of checks for buffer length and reading beyond the memory boundaries. Exploiting these vulnerabilities could allow a remote attacker to cause a...

[SECURITY] Fedora 42 Update: nodejs-pnpm-10.9.0-1.fc42

A fast, disk space efficient package manager for NodeJS...

[SECURITY] Fedora 40 Update: nodejs-pnpm-10.9.0-1.fc40

A fast, disk space efficient package manager for NodeJS...

CVE-2023-53076

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

AZL-70117 CVE-2022-49932 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Do all initialization before exposing /dev/kvm to userspace Call kvminit only after all setup is complete, as kvminit exposes /dev/kvm to userspace and thus allows userspace to create VMs and call other ioctls. E.g. KVM...

UBUNTU-CVE-2023-53109

In the Linux kernel, the following vulnerability has been resolved: net: tunnels: annotate lockless accesses to dev-neededheadroom IP tunnels can apparently update dev-neededheadroom in their xmit path. This patch takes care of three tunnels xmit, and also the core LLRESERVEDSPACE and...

UBUNTU-CVE-2023-53141

In the Linux kernel, the following vulnerability has been resolved: ila: do not generate empty messages in ilaxlatnlcmdgetmapping ilaxlatnlcmdgetmapping generates an empty skb, triggerring a recent sanity check 1. Instead, return an error code, so that user space can get it. 1 skbassertlen WARNIN...