microcode_ctl: From CVEorg collector

New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHINO, by leveraging...

The vulnerability of the lzma_stream_decoder_mt() function in the liblzma library, a data compression package for XZ Utils, allows a hacker to cause a service failure.

The vulnerability of the lzmastreamdecodermt function in the liblzma library, a component of the XZ Utils data compression package, involves premature resource release due to pointer aliasing. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the iommufdHWPT_nested_alloc() function in the Linux operating system’s IOMMU kernel driver allows a hacker to cause a service failure.

The vulnerability of the iommufdHWPTnestedalloc function in the Linux operating system’s IOMMU support driver is related to pointer aliasing. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2021-28032

An issue was discovered in the nanoarena crate before 0.5.2 for Rust. There is an aliasing violation in splitat because two mutable references can exist for the same element, if Borrow behaves in certain ways. This can have a resultant out-of-bounds write or use-after-free...

CVE-2002-2344

Ensim WEBppliance 3.0 and 3.1 allows remote attackers to read mail intended for other users by defining an alias that is the target's email address...

The vulnerability of the ExecutionContext Drivers in Windows operating systems, which allows attackers to enhance their privileges

The vulnerability of the ExecutionContext Drivers in Windows operating systems is related to pointer aliasing. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the ovpn-dco driver for Windows operating systems in the OpenVPN virtual private network creation software allows a hacker to induce a service failure.

The vulnerability of the ovpn-dco driver for Windows operating systems in the OpenVPN virtual private network creation software is related to pointer aliasing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Message Routing component of the access control and remote authentication solution BIG-IP allows a perpetrator to cause a service failure.

The vulnerability of the Message Routing component in the BIG-IP access control and remote authentication solution is related to pointer aliasing errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2025-46333 z2d OOB composition could lead to invalid memory access and corruption

z2d is a pure Zig 2D graphics library. Versions of z2d after 0.5.1 and up to and including 0.6.0, when writing from one surface to another using z2d.compositor.StrideCompositor.run, and higher-level operations when the anti-aliasing mode is set to .default such as Context.fill, Context.stroke,...

The vulnerability of the Linux operating system’s driver/usb/typec/ucsi/ucsi.c code allows a hacker to cause a service failure.

The vulnerability of the Linux operating system’s driver/usb/typec/ucsi/ucsi.c code relates to pointer aliasing. Exploiting this vulnerability can allow an attacker to cause a service failure...

DEBIAN-CVE-2025-21997

In the Linux kernel, the following vulnerability has been resolved: xsk: fix an integer overflow in xpcreateandassignumem Since the i and pool-chunksize variables are of type 'u32', their product can wrap around and then be cast to 'u64'. This can lead to two different XDP buffers pointing to the...

Vulnerability of the vhost_scsi_get_req() function (driver/vhost/scsi.c) in the Linux kernel, allowing a hacker to cause a service failure

The vulnerability of the vhostscsigetreq function driver/vhost/scsi.c in the Linux kernel is related to pointer aliasing. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the nf_tproxy_laddr4() function in the module net/ipv4/netfilter/nf_tproxy_ipv4.c, which is part of the IPv4 protocol implementation in Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the nftproxyladdr4 function in the net/ipv4/netfilter/nftproxyipv4.c module of the Linux operating system’s IPv4 protocol implementation is related to pointer aliasing. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool, related to pointer swapping, allows a hacker to trigger a service failure.

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to pointer aliasing. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the Intel Memory Latency Checker’s measurement tool, related to pointer swapping, allows a hacker to trigger a service failure.

The vulnerability of the Intel Memory Latency Checker’s measurement tool relates to pointer aliasing. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Core Messaging component in Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Core Messaging component in Windows operating systems is related to unreliable pointer aliasing. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of components such as DRM, AMDGPU, and CPU cores in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of DRM/amdgpu/PM components in the Linux operating system is related to pointer aliasing. Exploiting this vulnerability can allow a hacker to trigger a service failure...

HPESBHF04774 rev.1 - Certain HPE ProLiant Servers using AMD 3rd Generation and 4th Generation EPYC Processors, AMD-SB-3015, Undermining Integrity Features of SEV-SNP with Memory Aliasing (BadRAM)

Potential Security Impact: Local: Compromise of System Integrity SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL145 Gen11 - Prior to v1.40 HPE ProLiant DL325 Gen11 Server - Prior to v2.30 HPE ProLiant DL345 Gen11 Server - Prior to v2.30 HPE ProLiant DL365 Gen11...

The vulnerability of the Adobe Bridge file manager, related to pointer aliasing errors, allows a hacker to trigger a service failure.

The vulnerability of the Adobe Bridge file manager is related to pointer naming errors. Exploiting this vulnerability can allow an attacker to trigger a service failure using a specially created file...

The vulnerability of the Intel Raid Web Console web console, related to pointer swapping errors, allows a hacker to trigger a service failure.

The vulnerability of the Intel Raid Web Console web console is related to pointer aliasing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...