The vulnerability of the console-based graphic editor ImageMagick, related to insufficient memory allocation for operations, allows a hacker to trigger a service failure.

The vulnerability of the console-based graphic editor ImageMagick is related to insufficient memory allocation for operations. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

CVE-2021-26377

Insufficient parameter validation while allocating process space in the Trusted OS TOS may allow for a malicious userspace process to trigger an integer overflow, leading to a potential denial of service...

CVE-2021-26377

Insufficient parameter validation while allocating process space in the Trusted OS TOS may allow for a malicious userspace process to trigger an integer overflow, leading to a potential denial of service...

CVE-2021-26377

CVE-2021-26377 affects AMD Trusted OS (TOS) where insufficient parameter validation during process-space allocation can trigger an integer overflow, enabling a malicious userspace process to cause a denial of service. Affected products are tied to AMD Embedded Processors and related components; e...

CVE-2021-26377

Insufficient parameter validation while allocating process space in the Trusted OS TOS may allow for a malicious userspace process to trigger an integer overflow, leading to a potential denial of service...

scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated

...

PT-2025-36374

Name of the Vulnerable Software and Affected Versions: Trusted OS affected versions not specified Description: Insufficient parameter validation during process space allocation in the Trusted OS TOS can allow a malicious userspace process to trigger an integer overflow, potentially leading to a...

Linux Distros Unpatched Vulnerability : CVE-2025-38688

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommufd: Prevent ALIGN overflow When allocating IOVA the candidate range gets aligned to the target alignment. If the range is close to ULONGMAX then the ALIGN...

AMD多款产品 安全漏洞

AMD Graphics Driver and others are products of UltraMed Semiconductor AMD.AMD Graphics Driver is an integrated graphics driver.AMD Embedded Processors are a series of embedded high-performance GPUs.AMD Client Processors are processors designed for client devices such as AMD Client Processors are...

Linux Distros Unpatched Vulnerability : CVE-2025-38700

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: libiscsi: Initialize iscsiconn-dddata only if memory is allocated In case of an ibfastregmr allocation failure during iSER setup, the machine hits a panic...

Linux Distros Unpatched Vulnerability : CVE-2025-38727

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netlink: avoid infinite retry looping in netlinkunicast netlinkattachskb checks for the...

SUSE CVE-2025-38737

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due to uninitialised variable Fix smb3inittransformrq to initialise buffer to NULL before calling netfsallocfolioqbuffer as netfs assumes it can append to the buffer it is given. Setting it to NULL means it should...

SUSE CVE-2025-39674

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: ufs-qcom: Fix ESI null pointer dereference ESI/MSI is a performance optimization feature that provides dedicated interrupts per MCQ hardware queue. This is optional feature and UFS MCQ should work with and without ESI...

CVE-2025-57807 ImageMagick BlobStream Forward-Seek Under-Allocation

ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 include insecure functions: SeekBlob, which permits advancing the stream offset beyond the current end without increasing capacity, and WriteBlob, which then expan...

AZL-66983 CVE-2025-39705 affecting package kernel 6.6.126.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix a Null pointer dereference vulnerability Why A null pointer dereference vulnerability exists in the AMD display driver's DC module cleanup function dcdestruct. When display control context dc-ctx construction...

CVE-2025-39705

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix a Null pointer dereference vulnerability Why A null pointer dereference vulnerability exists in the AMD display driver's DC module cleanup function dcdestruct. When display control context dc-ctx construction...

DEBIAN-CVE-2025-39674

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: ufs-qcom: Fix ESI null pointer dereference ESI/MSI is a performance optimization feature that provides dedicated interrupts per MCQ hardware queue. This is optional feature and UFS MCQ should work with and without ESI...

UBUNTU-CVE-2025-38737

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due to uninitialised variable Fix smb3inittransformrq to initialise buffer to NULL before calling netfsallocfolioqbuffer as netfs assumes it can append to the buffer it is given. Setting it to NULL means it should...

CVE-2025-39705

The CVE-2025-39705 entry concerns a NULL pointer dereference in the AMD display driver (DC module) for the Linux kernel. Root cause: during cleanup in dc_destruct(), if dc->ctx construction failed, dc->ctx is NULL but code dereferenced dc->ctx->perf_trace. The fix added a NULL check f...

CVE-2025-39678 platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/hsmp: Ensure sock-metrictbladdr is non-NULL If metric table address is not allocated, accessing metricsbin will result in a NULL pointer dereference, so add a check...