5636 matches found
CVE-2025-38710
The CVE-2025-38710 vulnerability affects the Linux kernel GFS2: it relies on i_depth validation for exhash directories. A fuzzer introduced corruption that could yield a dir_e_read() depth of 0, causing an undefined shift by 32 at index = hash >> (32 - dip->i_depth). The minimum depth is...
assimp: Open Asset Import Library Assimp LWO File LWOAnimation.cpp UpdateAnimRangeSetup heap-based overflow
A flaw has been found in the Open Asset Import Library assimp. In affected versions, a malformed LWO file may trigger a heap-based buffer overflow, which may lead to an application crash or other undefined behavior...
drm/amd/display: fix a UBSAN warning in DML2.1
...
bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
...
Incorrect code generation could have led to unexpected numeric conversions and potential undefined behavior.*Note:* This issue only affects 32-bit ARM devices. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.
...
kunit/overflow: Fix UB in overflow_allocation_test
...
CVE-2025-38710: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: gfs2: Validate idepth for exhash directories A fuzzer test introduced corruption that ends up with a depth of 0 in direread, causing an undefined shift by 32 at: index = hash 32 - dip-idepth; As calculated in an open-coded way in...
The incorrect object was checked for NULL in the built-in profiler, potentially leading to invalid memory access and undefined behavior. *Note:* This issue only affects the application when the profiler is running. This vulnerability affects Firefox < 123.
...
Undefined Behavior in bounded Crossbeam channel
...
An iterator stop condition was missing when handling WASM code in the built-in profiler, potentially leading to invalid memory access and undefined behavior. *Note:* This issue only affects the application when the profiler is running. This vulnerability affects Firefox < 126.
...
glib: buffer overflow in set_connect_msg()
A flaw was found in the Glib library. A buffer overflow condition can be triggered in certain conditions due to an off-by-one error in SOCKS4CONNMSGLEN. This issue may lead to an application crash or other undefined behavior...
Linux Distros Unpatched Vulnerability : CVE-2022-32546
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned long' at coders/pcl.c, when crafted or untruste...
The vulnerability of the Internet Key Exchange version 1 protocol (IKEv1) in Cisco IOS XE operating systems allows a attacker to induce a service failure.
The vulnerability of the Internet Key Exchange version 1 IKEv1 protocol in Cisco IOS XE operating systems is related to improper handling of undefined values. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
Linux Distros Unpatched Vulnerability : CVE-2022-32545
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' at coders/psd.c, when crafted or untruste...
Linux Distros Unpatched Vulnerability : CVE-2024-31031
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in coappdu.c in libcoap 4.3.4 allows attackers to cause undefined behavior via a sequence of messages leading to unsigned integer overflow...
GHSA-6HGW-6X87-578X ImageMagick has Undefined Behavior (function-type-mismatch) in CloneSplayTree
Summary - Target: ImageMagick commit ecc9a5eb456747374bae8e07038ba10b3d8821b3 - Type: Undefined Behavior function-type-mismatch in splay tree cloning callback - Impact: Deterministic abort under UBSan DoS in sanitizer builds. No crash in a non-sanitized build; likely low security impact. - Trigge...
ImageMagick has Undefined Behavior (function-type-mismatch) in CloneSplayTree
Summary - Target: ImageMagick commit ecc9a5eb456747374bae8e07038ba10b3d8821b3 - Type: Undefined Behavior function-type-mismatch in splay tree cloning callback - Impact: Deterministic abort under UBSan DoS in sanitizer builds. No crash in a non-sanitized build; likely low security impact. - Trigge...
angle: insufficient input validation can cause undefined behavior
A flaw was found in the libANGLE library. An improper input validation can cause undefined behavior when a specially crafted webpage is visited, potentially resulting in code execution...
angle: insufficient input validation can cause undefined behavior
A flaw was found in the libANGLE library. An improper input validation can cause undefined behavior when a specially crafted webpage is visited, potentially resulting in code execution...
angle: insufficient input validation can cause undefined behavior
A flaw was found in the libANGLE library. An improper input validation can cause undefined behavior when a specially crafted webpage is visited, potentially resulting in code execution...