23633 matches found
kasan: avoid sleepable page allocation from atomic context
...
netfilter: nft_set_pipapo: prevent overflow in lookup table allocation
...
CVE-2025-57611
An issue was discovered in rust-ffmpeg 0.3.0 after comit 5ac0527 Null pointer dereference vulnerability in the dump method allows an attacker to cause a denial of service. The vulnerability exists because the method fails to check the return value of avfiltergraphdump for NULL, leading to a crash...
f2fs: fix to avoid panic once fallocation fails for pinfile
...
In SQLite 3.44.0 through 3.49.0 before 3.49.1, the concat_ws() SQL function can cause memory to be written beyond the end of a malloc-allocated buffer. If the separator argument is attacker-controlled and has a large string (e.g., 2MB or more), an integer overflow occurs in calculating the size of the result buffer, and thus malloc may not allocate enough memory.
...
Linux Distros Unpatched Vulnerability : CVE-2019-7582
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The readBytes function in util/read.c in libming through 0.4.8 allows remote attackers to have unspecified impact via a crafted swf file that triggers a memory...
Linux Distros Unpatched Vulnerability : CVE-2019-7581
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The parseSWFACTIONRECORD function in util/parser.c in libming through 0.4.8 allows remote attackers to have unspecified impact via a crafted swf file that...
Linux Distros Unpatched Vulnerability : CVE-2017-9989
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - util/outputtxt.c in libming 0.4.8 mishandles memory allocation. A crafted input will lead to a remote denial of service NULL pointer dereference attack...
PT-2025-44128
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The TRBE driver in the Linux kernel does not properly handle allocation failures. When buffer allocation fails, the driver returns an error code, but the calling function only checks for...
drm/amd/display: Handle dml allocation failure to avoid crash
...
Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message, potentially leading to authentication bypasses such as replays.
...
The png_set_text_2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted text chunk in a PNG image file, which triggers a memory allocation failure that is not properly handled, leading to a heap-based buffer overflow.
...
drm/amd/display: Deallocate DML memory if allocation fails
...
wifi: ath12k: Fix memory leak due to multiple rx_stats allocation
...
CVE-2025-58057
CVE-2025-58057 is a Netty vulnerability where, in affected releases of netty-codec-compression (≤ 4.1.124.Final) and netty-codec (≤ 4.2.4.Final), specially crafted input can cause BrotliDecoder and related decoders to allocate a large number of reachable byte buffers, leading to denial of service...
CVE-2025-58057 Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In netty-codec-compression versions 4.1.124.Final and below, and netty-codec versions 4.2.4.Final and below, when supplied with specially crafted...
CVE-2025-58057 Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In netty-codec-compression versions 4.1.124.Final and below, and netty-codec versions 4.2.4.Final and below, when supplied with specially crafted...
Allocation Of Resources Without Limits
Bouncy Castle is vulnerable to Allocation Of Resources Without Limits. The vulnerability is due to excessive resource allocation due to lack of proper limits in the handling of ASN1ObjectIdentifier in API modules...
Linux Distros Unpatched Vulnerability : CVE-2025-58058
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte...
PT-2025-38554
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the pad compress skb function within the PPP Point-to-Point Protocol component of the Linux kernel. If the alloc skb function fails during the compression process...