10655 matches found
EUVD-2025-124935
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL pointer checks in dcstream cursor attribute functions The function dcstreamsetcursorattributes currently dereferences the stream pointer and nested members stream-ctx-dc-currentstate without checking for...
CVE-2025-40148
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL pointer checks in dcstream cursor attribute functions The function dcstreamsetcursorattributes currently dereferences the stream pointer and nested members stream-ctx-dc-currentstate without checking for...
CVE-2025-40165
In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: m2m: Fix streaming cleanup on release If streamon/streamoff calls are imbalanced, such as when exiting an application with Ctrl+C when streaming, the m2m usagecount will never reach zero and the ISI channel...
CVE-2025-40148
Summary of CVE-2025-40148 : In the Linux kernel’s AMD display code, a NULL pointer dereference can occur in the dc_stream cursor attribute path. The function dc_stream_set_cursor_attributes() dereferenced stream and nested fields (stream->ctx->dc->current_state) without validating stream...
CVE-2025-40148 drm/amd/display: Add NULL pointer checks in dc_stream cursor attribute functions
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL pointer checks in dcstream cursor attribute functions The function dcstreamsetcursorattributes currently dereferences the stream pointer and nested members stream-ctx-dc-currentstate without checking for...
CVE-2025-40148
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL pointer checks in dcstream cursor attribute functions The function dcstreamsetcursorattributes currently dereferences the stream pointer and nested members stream-ctx-dc-currentstate without checking for...
CVE-2025-40148 drm/amd/display: Add NULL pointer checks in dc_stream cursor attribute functions
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL pointer checks in dcstream cursor attribute functions The function dcstreamsetcursorattributes currently dereferences the stream pointer and nested members stream-ctx-dc-currentstate without checking for...
CVE-2025-40129 sunrpc: fix null pointer dereference on zero-length checksum
In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gsskrb5verifymicv2...
Information Exposure
mllogger is vulnerable to Information Exposure. The vulnerability is due to insufficient validation of the key argument in the streamhandler function of mllogger/server.py, which allows a remote attacker to manipulate that argument to disclose sensitive information...
Malicious code in 4meme-readable-stream (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bf6d930ea2c0ad7b353677dfafdbe18356b2cb350a496f593dfd2a284b6ec3e The package 4meme-readable-stream was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-120001
Malicious code in 4meme-readable-stream npm...
MAL-2025-149904 Malicious code in 4meme-readable-stream (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bf6d930ea2c0ad7b353677dfafdbe18356b2cb350a496f593dfd2a284b6ec3e The package 4meme-readable-stream was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-115203
Malicious code in command-gulp-stream-stream npm...
EUVD-2025-114728
Malicious code in cygnus-stream-lyra-apex npm...
Malicious code in pino-pretty-gemini-blaze-stream (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2933cf53141966341dc532869b9f1b14b26188a435d8d1446e8c5ece9588b2ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113816
Malicious code in europa-stream-yildun-relay npm...
EUVD-2025-114205
Malicious code in electron-builder-hydra-mensa-stream npm...
EUVD-2025-123659
Malicious code in pipe-dynamo-nodejs-stream npm...