SUSE-SU-2025:03423-1 Security update for apache2-mod_security2

This update for apache2-modsecurity2 fixes the following issues: - CVE-2025-54571: Fixed insufficient return value handling on modsecurity leads to xss and source code disclosure bsc1247674...

IBM License Metric Tool 访问控制错误漏洞

The IBM License Metric Tool is a free tool from International Business Machines IBM that helps IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU licensing needs. An Access Control Error vulnerability exists in IBM License Metric Tool...

PT-2025-39874

Name of the Vulnerable Software and Affected Versions Medical Informatics Engineering Enterprise Health versions prior to 2025-03-14 Description A CSV injection issue exists that permits a remote, authenticated attacker to inject macros into downloadable CSV files. The issue was resolved on March...

llvm:clang-fuzzer: Use-of-uninitialized-value in clang::Parser::ParseOptionalCXXScopeSpecifier

Detailed Report: https://oss-fuzz.com/testcase?key=5126446348828672 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: clang::Parser::ParseOptionalCXXScopeSpecifier...

matio:matio_fuzzer: Use-of-uninitialized-value in H5T__bit_find

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=4640034911485952 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzermsanmatio Platform Id: linux Crash Type: Use-of-uninitialized-val...

The vulnerability of the x86/mm kernel component of the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the x86/mm kernel component of the Linux operating system is related to an unvalidated return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the dequeue_entities() function in the kernel/sched/fair.c component of the Linux operating system allows a attacker to trigger a service failure.

The vulnerability of the dequeueentities function in the kernel/sched/fair.c component of the Linux operating system is related to an unvalidated return value. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the npcm-video.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the npcm-video.c component in the Linux operating system’s kernel is related to an unvalidated return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the blkdev_read_iter() function in the block/fops.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the blkdevreaditer function in the block/fops.c component of the Linux operating system’s kernel is related to an unvalidated return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the inftlcore.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the inftlcore.c component in the Linux operating system’s kernel is related to an unvalidated return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the tegra-se-aes.c and tegra-se-hash.c components of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the tegra-se-aes.c and tegra-se-hash.c components of the Linux operating system’s kernel is related to an unvalidated return value. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the virtiofs component in the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the virtiofs component in Linux operating systems is related to improper checking of the returned value from the function. Exploiting this vulnerability can allow an attacker to cause a service failure...

quickjs:fuzz_compile: Use-of-uninitialized-value in JS_DefineProperty

Project: https://github.com/horhof/quickjs.git https://github.com/bellard/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=4551913271263232 Project: quickjs Fuzzing Engine: libFuzzer Fuzz Target: fuzzcompile Job Type: libfuzzermsanquickjs Platform Id: linux Crash Type:...

CVE-2025-60018

glib-networking's OpenSSL backend fails to properly check the return value of a call to BIOwrite, resulting in an out of bounds read...

CVE-2025-60019

glib-networking's OpenSSL backend fails to properly check the return value of memory allocation routines. An out of memory condition could potentially result in writing to an invalid memory location...

CVE-2025-60018

glib-networking's OpenSSL backend fails to properly check the return value of a call to BIOwrite, resulting in an out of bounds read...

CVE-2025-60018

glib-networking's OpenSSL backend fails to properly check the return value of a call to BIOwrite, resulting in an out of bounds read...

imagemagick:encoder_ptif_fuzzer: Use-of-uninitialized-value in IdentifyImageGray

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5593893812109312 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderptiffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

CVE-2025-57638

Buffer overflow vulnerability in Tenda AC9 1.0 via the user supplied sys.vendor configuration value...

PyTorch 安全漏洞

PyTorch is a Python package open-sourced by PyTorch. PyTorch suffers from a security vulnerability that stems from the bitwiserightshift function mishandling the boundary value of the OTHER parameter, which can be exploited by an attacker to cause an output error...