OESA-2025-2369 erlang security update

Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson. Security Fixes: Allocation of Resources Without Limits or Throttling...

OESA-2025-2370 erlang security update

Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson. Security Fixes: Allocation of Resources Without Limits or Throttling...

SUSE SLED15 / SLES15 Security Update : cJSON (SUSE-SU-2025:03520-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03520-1 advisory. - CVE-2023-26819: Allocate memory for the temporary buffer when paring numbers bsc1241502 - CVE-2025-57052: F...

CVE-2025-47354

Memory corruption while allocating buffers in DSP service...

io_uring/tctx: work around xa_store() allocation error issue

...

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value via the maxDictSize parameter when processing large RAR files. An attacker can cause the application to crash or become unresponsive by supplying a specially crafted RAR archive that triggers...

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value via the maxDictSize parameter when processing large RAR files. An attacker can cause the application to crash or become unresponsive by supplying a specially crafted RAR archive that triggers...

Security update for cJSON

This update for cJSON fixes the following issues: CVE-2023-26819: Allocate memory for the temporary buffer when paring numbers bsc1241502 CVE-2025-57052: Fix the incorrect check in decodearrayindexfrompointer bsc1249112 Patch Instructions: To install this SUSE update use the SUSE recommended...

SUSE-SU-2025:03520-1 Security update for cJSON

This update for cJSON fixes the following issues: - CVE-2023-26819: Allocate memory for the temporary buffer when paring numbers bsc1241502 - CVE-2025-57052: Fix the incorrect check in decodearrayindexfrompointer bsc1249112...

CLSA-2025-1760023801 Fix CVE(s): CVE-2025-57803

SECURITY UPDATE: 32-bit integer overflow in BMP encoder allows attacker- controlled heap corruption - debian/patches/CVE-2025-57803.patch: Fix buffer overflow issue in BMP decoder caused by insufficient memory allocation - CVE-2025-57803...

CLSA-2025-1760019012 Fix CVE(s): CVE-2025-57803

SECURITY UPDATE: 32-bit Integer Overflow in BMP Encoder - debian/patches/CVE-2025-57803.patch: Fix buffer overflow issue in BMP decoder caused by insufficient memory allocation - CVE-2025-57803...

CVE-2025-47354

Memory corruption while allocating buffers in DSP service...

CVE-2025-47354 Use After Free in DSP Service

Memory corruption while allocating buffers in DSP service...

EUVD-2025-33235

Memory corruption while allocating buffers in DSP service...

CVE-2025-47354 Use After Free in DSP Service

Memory corruption while allocating buffers in DSP service...

CVE-2025-47354

CVE-2025-47354 is described across multiple sources as a memory corruption issue in the DSP service related to buffer allocation on Qualcomm chipsets ( Qualcomm kernel component ). Several enrichment entries label the flaw as a Use After Free in the DSP service; Red Hat/NVD entries repeat the mem...

PT-2025-41353

Name of the Vulnerable Software and Affected Versions Affected versions not specified Description A memory corruption issue exists when allocating buffers within the DSP service. This can lead to unexpected behavior or potential compromise of the system. Recommendations At the moment, there is no...

Qualcomm Chipsets 资源管理错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A resource management error vulnerability exists in Qualcomm Chipsets that stems from a memory corruption in the DSP service allocation buffer...

SUSE CVE-2022-50509

In the Linux kernel, the following vulnerability has been resolved: media: coda: Add check for kmalloc As the kmalloc may return NULL pointer, it should be better to check the return value in order to avoid NULL poineter dereference, same as the others...

SUSE CVE-2023-53667

In the Linux kernel, the following vulnerability has been resolved: net: cdcncm: Deal with too low values of dwNtbOutMaxSize Currently in cdcncmchecktxmax, if dwNtbOutMaxSize is lower than the calculated "min" value, but greater than zero, the logic sets txmax to dwNtbOutMaxSize. This is then use...