The vulnerability of the rtw89 component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the rtw89 component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

CVE-2024-58293

Akaunting 3.1.8 contains a server-side template injection vulnerability that allows authenticated administrators to execute template expressions in multiple form input fields. Attackers can inject template payloads in items, taxes, transactions, and vendor name fields to perform arithmetic...

The vulnerability in the `drivers/virt/coco/tsm.c` module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the drivers/virt/coco/tsm.c module of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the automountfullpath() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the automountfullpath function fs/smb/client/namespace.c in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `ice_adapter_new()` function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the iceadapternew function in the Linux operating system is related to an error in pointer arithmetic. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the sctp_disposition function sctp_sf_do_5_1D_ce() in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the sctpdisposition function sctpsfdo51Dce in the Linux operating system is related to an error in pointer arithmetic. Exploiting this vulnerability could allow an attacker to cause a service failure...

libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup

A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software. The vulnerability arises when processing the expiration date of cookies, where a specially crafted value can trigger an integer overflow. This may result in undefined behavior,...

The vulnerability of the fim_alert() function in the Wazuh intrusion detection and prevention system allows a intruder to trigger a service failure.

The vulnerability of the fimalert function in the Wazuh intrusion detection and prevention system is related to a pointer arithmetic error. Exploiting this vulnerability could allow an attacker operating remotely to cause a service failure...

TencentOS Server 2: zlib (TSSA-2025:0468)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0468 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup

A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software. The vulnerability arises when processing the expiration date of cookies, where a specially crafted value can trigger an integer overflow. This may result in undefined behavior,...

libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup

A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software. The vulnerability arises when processing the expiration date of cookies, where a specially crafted value can trigger an integer overflow. This may result in undefined behavior,...

libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup

A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software. The vulnerability arises when processing the expiration date of cookies, where a specially crafted value can trigger an integer overflow. This may result in undefined behavior,...

The vulnerability of Linux operating system kernels, related to the swapping of the zero pointer, allows attackers to compromise the accessibility of protected information.

The vulnerability of Linux operating system kernels is related to a pointer arithmetic error. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...

CVE-2025-40169 bpf: Reject negative offsets for ALU ops

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject negative offsets for ALU ops When verifying BPF programs, the checkaluop function validates instructions with ALU operations. The 'offset' field in these instructions is a signed 16-bit integer. The existing check...

CVE-2025-40169 bpf: Reject negative offsets for ALU ops

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject negative offsets for ALU ops When verifying BPF programs, the checkaluop function validates instructions with ALU operations. The 'offset' field in these instructions is a signed 16-bit integer. The existing check...

CVE-2025-40169

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject negative offsets for ALU ops When verifying BPF programs, the checkaluop function validates instructions with ALU operations. The 'offset' field in these instructions is a signed 16-bit integer. The existing check...

libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup

A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software. The vulnerability arises when processing the expiration date of cookies, where a specially crafted value can trigger an integer overflow. This may result in undefined behavior,...

CLSA-2025-1762544268 rsync: Fix of CVE-2016-9840

CVE-2016-9840: fix improper pointer arithmetic in inftrees.c...

CLSA-2025-1762540366 rsync: Fix of CVE-2016-9840

CVE-2016-9840: fix improper pointer arithmetic in inftrees.c...

Security update for ImageMagick

This update for ImageMagick fixes the following issues: CVE-2025-62594: Fixed unsigned underflow and division-by-zero that can lead to OOB pointer arithmetic and process crash. bsc1252749 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...