Lucene search
+L

22 matches found

PyPA
PyPA
•added 2026/07/02 2:13 p.m.•28 views

Memory leak in Nanopb

ImpactDecoding specifically formed message can leak memory if dynamic allocation is enabled and an oneof field contains a static submessage that contains a dynamic field, and the message being decoded contains the submessage multiple times. This is rare in normal messages, but it is a concern whe...

7.5CVSS6.6AI score0.02664EPSS
SaveExploits1References7Affected Software1
osv_pysec
osv_pysec
•added 2026/07/02 2:13 p.m.•30 views

PYSEC-2026-684 Memory leak in Nanopb

Impact Decoding specifically formed message can leak memory if dynamic allocation is enabled and an oneof field contains a static submessage that contains a dynamic field, and the message being decoded contains the submessage multiple times. This is rare in normal messages, but it is a concern wh...

7.5CVSS6.6AI score0.02664EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE
•added 2025/11/13 6:00 p.m.•16 views

CVE-2025-40111

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix Use-after-free in validation Nodes stored in the validation duplicates hashtable come from an arena allocator that is cleared at the end of vmwexecbufprocess. All nodes are expected to be cleared in...

5.8CVSS6.5AI score0.00149EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/11/13 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2025-40111

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/vmwgfx: Fix Use-after-free in validation Nodes stored in the validation duplicates hashtable come from an arena allocator that is cleared at the end of...

7.8CVSS7AI score0.00149EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/11/12 3:30 a.m.•19 views

EUVD-2025-106789

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix Use-after-free in validation Nodes stored in the validation duplicates hashtable come from an arena allocator that is cleared at the end of vmwexecbufprocess. All nodes are expected to be cleared in...

6.3AI score0.00149EPSS
SaveExploits0References9
osv_azl
osv_azl
•added 2025/11/12 2:15 a.m.•20 views

AZL-69956 CVE-2025-40111 affecting package kernel for versions less than 6.6.117.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix Use-after-free in validation Nodes stored in the validation duplicates hashtable come from an arena allocator that is cleared at the end of vmwexecbufprocess. All nodes are expected to be cleared in...

7.8CVSS6.2AI score0.00149EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2025/11/12 2:15 a.m.•12 views

DEBIAN-CVE-2025-40111

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix Use-after-free in validation Nodes stored in the validation duplicates hashtable come from an arena allocator that is cleared at the end of vmwexecbufprocess. All nodes are expected to be cleared in...

7.8CVSS6.4AI score0.00149EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/12 2:15 a.m.•11 views

CVE-2025-40111

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix Use-after-free in validation Nodes stored in the validation duplicates hashtable come from an arena allocator that is cleared at the end of vmwexecbufprocess. All nodes are expected to be cleared in...

7.8CVSS0.00149EPSS
SaveExploits0References8
osv_ubuntu
osv_ubuntu
•added 2025/11/12 2:15 a.m.•36 views

UBUNTU-CVE-2025-40111

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix Use-after-free in validation Nodes stored in the validation duplicates hashtable come from an arena allocator that is cleared at the end of vmwexecbufprocess. All nodes are expected to be cleared in...

7.8CVSS6.4AI score0.00149EPSS
SaveExploits0References40
Debian CVE
Debian CVE
•added 2025/11/12 1:07 a.m.•12 views

CVE-2025-40111

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix Use-after-free in validation Nodes stored in the validation duplicates hashtable come from an arena allocator that is cleared at the end of vmwexecbufprocess. All nodes are expected to be cleared in...

7.8CVSS6.4AI score0.00149EPSS
SaveExploits0
Cvelist
Cvelist
•added 2025/11/12 1:07 a.m.•31 views

CVE-2025-40111 drm/vmwgfx: Fix Use-after-free in validation

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix Use-after-free in validation Nodes stored in the validation duplicates hashtable come from an arena allocator that is cleared at the end of vmwexecbufprocess. All nodes are expected to be cleared in...

7.8CVSS0.00149EPSS
SaveExploits0References8
CVE
CVE
•added 2025/11/12 1:07 a.m.•68 views

CVE-2025-40111

CVE-2025-40111 affects the Linux kernel drm/vmwgfx component. The root cause is a use-after-free in the validation path: nodes stored in the validation duplicates hashtable originate from an arena allocator cleared at vmw_execbuf_process end, but one node escaped due to premature resource destruc...

7.8CVSS6.2AI score0.00149EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/12 12:00 a.m.•4 views

CVE-2025-40111: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix Use-after-free in validation Nodes stored in the validation duplicates hashtable come from an arena allocator that is cleared at the end of vmwexecbufprocess. All nodes are expected to be cleared in...

7.8CVSS6.3AI score0.00149EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2023/02/15 3:53 a.m.•12 views

SUSE CVE-2020-26243

Nanopb is a small code-size Protocol Buffers implementation. In Nanopb before versions 0.4.4 and 0.3.9.7, decoding specifically formed message can leak memory if dynamic allocation is enabled and an oneof field contains a static submessage that contains a dynamic field, and the message being...

7.5CVSS7.2AI score0.02664EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2020/11/25 5:15 p.m.•24 views

CVE-2020-26243

Nanopb is a small code-size Protocol Buffers implementation. In Nanopb before versions 0.4.4 and 0.3.9.7, decoding specifically formed message can leak memory if dynamic allocation is enabled and an oneof field contains a static submessage that contains a dynamic field, and the message being...

7.5CVSS7.5AI score
SaveExploits0References4
osv_debian
osv_debian
•added 2020/11/25 5:15 p.m.•14 views

DEBIAN-CVE-2020-26243

Nanopb is a small code-size Protocol Buffers implementation. In Nanopb before versions 0.4.4 and 0.3.9.7, decoding specifically formed message can leak memory if dynamic allocation is enabled and an oneof field contains a static submessage that contains a dynamic field, and the message being...

7.5CVSS7AI score0.02664EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2020/11/25 5:15 p.m.•16 views

UBUNTU-CVE-2020-26243

Nanopb is a small code-size Protocol Buffers implementation. In Nanopb before versions 0.4.4 and 0.3.9.7, decoding specifically formed message can leak memory if dynamic allocation is enabled and an oneof field contains a static submessage that contains a dynamic field, and the message being...

7.5CVSS6.9AI score0.02664EPSS
SaveExploits1References8
Prion
Prion
•added 2020/11/25 5:15 p.m.•21 views

Design/Logic Flaw

Nanopb is a small code-size Protocol Buffers implementation. In Nanopb before versions 0.4.4 and 0.3.9.7, decoding specifically formed message can leak memory if dynamic allocation is enabled and an oneof field contains a static submessage that contains a dynamic field, and the message being...

4.3CVSS7.4AI score0.02664EPSS
SaveExploits1References4Affected Software1
osv_ghsa
osv_ghsa
•added 2020/11/25 4:53 p.m.•37 views

GHSA-85RR-4RH9-HHWH Memory leak in Nanopb

Impact Decoding specifically formed message can leak memory if dynamic allocation is enabled and an oneof field contains a static submessage that contains a dynamic field, and the message being decoded contains the submessage multiple times. This is rare in normal messages, but it is a concern wh...

7.5CVSS7.5AI score0.02664EPSS
SaveExploits1References5
Debian CVE
Debian CVE
•added 2020/11/25 4:50 p.m.•73 views

CVE-2020-26243

Nanopb is a small code-size Protocol Buffers implementation. In Nanopb before versions 0.4.4 and 0.3.9.7, decoding specifically formed message can leak memory if dynamic allocation is enabled and an oneof field contains a static submessage that contains a dynamic field, and the message being...

7.5CVSS7.4AI score0.02664EPSS
SaveExploits1
Rows per page
Query Builder