CVE-2025-9336

A stack buffer overflow has been identified in the AsIO3.sys driver. This vulnerability can be triggered by input manipulation, may leading to a system crash BSOD or other potentially undefined execution. Refer to the 'Security Update for Armoury Crate App' section on the ASUS Security Advisory f...

CVE-2025-9336

The CVE-2025-9336 entry concerns the ASUS Armoury Crate software, specifically the AsIO3.sys driver. Multiple sources confirm a stack buffer overflow in AsIO3.sys that can be triggered by input manipulation, potentially leading to a system crash (BSOD) or other undefined execution. Consequences n...

kernel: net_sched: ets: Fix double list add in class with netem as child qdisc

A use-after-free vulnerability was found in the Linux kernel’s netem qdisc. This issue occurs when it incorrectly manages duplicated packets in classful parent qdiscs. This leads to a corrupted internal state and eventual dereferencing of freed memory, resulting in unpredictable behavior, system...

kernel: net_sched: ets: Fix double list add in class with netem as child qdisc

A use-after-free vulnerability was found in the Linux kernel’s netem qdisc. This issue occurs when it incorrectly manages duplicated packets in classful parent qdiscs. This leads to a corrupted internal state and eventual dereferencing of freed memory, resulting in unpredictable behavior, system...

ASUS Armoury Crate 安全漏洞

ASUS Armoury Crate is a utility software developed by ASUS to centrally control and manage ROG Gamerland and some ASUS gaming products. ASUS Armoury Crate suffers from a stack buffer overflow vulnerability that can be exploited by attackers to cause a system crash or other undefined execution...

ASUS Armoury Crate 安全漏洞

ASUS Armoury Crate is a utility software developed by ASUS to centrally control and manage ROG Gamerland and some ASUS gaming products. ASUS Armoury Crate suffers from a null pointer dereference vulnerability that can be exploited by attackers to cause a system crash...

PT-2025-41781

Name of the Vulnerable Software and Affected Versions ASUS AsIO3.sys driver affected versions not specified Description A stack buffer overflow exists in the AsIO3.sys driver. This issue is triggered by input manipulation and could result in a system crash, also known as a Blue Screen of Death...

EUVD-2025-33802

In modem, there is a possible system crash due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed...

CVE-2025-31718

In modem, there is a possible system crash due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed...

CVE-2025-31718

In modem, there is a possible system crash due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed...

CVE-2025-31717

In modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed...

PT-2025-41625

Name of the Vulnerable Software and Affected Versions Unisoc modem firmware affected versions not specified Description Improper input validation within the modem processing routines can lead to a system crash. This flaw allows for remote escalation of privilege, enabling an attacker to execute...

CVE-2025-61861

An out-of-bounds read vulnerability exists in VS6ComFile!loadlinkinf of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end ABEND, and arbitrary code execution...

CVE-2025-61861

An out-of-bounds read vulnerability exists in VS6ComFile!loadlinkinf of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end ABEND, and arbitrary code execution...

CVE-2025-61863

CVE-2025-61863 describes an out-of-bounds read vulnerability in the VS6ComFile component of Fuji Electric V-SFT, specifically in CSaveData::delete_mem. Affected versions are V-SFT up to 6.2.7.0 and earlier. The issue can cause information disclosure, abnormal termination (ABEND), and arbitrary co...

CVE-2025-61858

An out-of-bounds write vulnerability exists in VS6ComFile!setAnimationItem of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end ABEND, and arbitrary code execution...

PT-2025-44377

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's Network File System Direct NFSD component. Specifically, the issue involves the handling of LAYOUTCOMMIT operations on FlexFiles layouts by pNFS...

Fuji Electric V-SFT 资源管理错误漏洞

Fuji Electric V-SFT is a screen configuration software from Fuji Electric Japan. A resource management error vulnerability exists in Fuji Electric V-SFT v6.2.7.0 and earlier versions, which stems from the existence of post-release reuse of VS6ComFile!loadlinkinf, which could lead to information...

PT-2025-41554

Name of the Vulnerable Software and Affected Versions V-SFT versions prior to 6.2.7.0 Description An out-of-bounds read issue exists in the CSaveData::delete mem function within the VS6ComFile component. Opening specifically designed V-SFT files can result in information disclosure, system crashe...

PT-2025-41548

Name of the Vulnerable Software and Affected Versions V-SFT versions 6.2.7.0 and earlier Description An out-of-bounds write issue exists in the VS6ComFile!CItemExChange::WinFontDynStrCheck function. Processing specially crafted V-SFT files can lead to information disclosure, system crashes ABEND,...