11605 matches found
PT-2025-36284
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A potential leak of uninitialized stack data to userspace exists due to the channels array not being zeroed before use. This issue affects the sca3300 driver within the industrial I/O...
SUSE CVE-2025-57052
cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decodearrayindexfrompointer function in cJSONUtils.c, allowing remote attackers to bypass array bounds checking and access restricted data via malformed JSON pointer strings containing alphanumeric characters...
New Malware Uses Windows Character Map for Cryptomining
Darktrace reports new malware hijacking Windows Character Map for cryptomining, exposing risks of hidden attacks in everyday software…...
Dynamics 365 FastTrack Implementation Assets Information Disclosure Vulnerability
...
jfs: fix array-index-out-of-bounds in dbAdjTree
...
An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm parameters entry looks identical to an array of REAL (size zero) and thus the certificate is considered valid. However, if the parameters do not match in any way, then the certificate should be considered invalid.
...
usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
...
jfs: fix array-index-out-of-bounds read in add_missing_indices
...
drm/amd/display: fix incorrect mpc_combine array size
...
drm/amd/display: Fix array-index-out-of-bounds in dcn35_clkmgr
...
Medium: ruby
Issue Overview: An exploitable heap overflow vulnerability exists in the Psych::Emitter startdocument function of Ruby. In Psych::Emitter startdocument function heap buffer "head" allocation is made based on tags array length. Specially constructed object passed as element of tags array can...
Linux Distros Unpatched Vulnerability : CVE-2014-0085
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JBoss Fuse did not enable encrypted passwords by default in its usage of Apache Zookeeper. This permitted sensitive information disclosure via logging to local...
md: Don't ignore suspended array in md_check_recovery()
...
drm/amd/display: Adding array index check to prevent memory corruption
...
md: Don't ignore read-only array in md_check_recovery()
...
drm/amd/display: Ensure array index tg_inst won't be -1
...
drm/amd/display: Increase array size of dummy_boolean
...
ALPINE-CVE-2025-57052
cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decodearrayindexfrompointer function in cJSONUtils.c, allowing remote attackers to bypass array bounds checking and access restricted data via malformed JSON pointer strings containing alphanumeric characters...
CVE-2025-57052
cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decodearrayindexfrompointer function in cJSONUtils.c, allowing remote attackers to bypass array bounds checking and access restricted data via malformed JSON pointer strings containing alphanumeric characters...
DEBIAN-CVE-2025-57052
cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decodearrayindexfrompointer function in cJSONUtils.c, allowing remote attackers to bypass array bounds checking and access restricted data via malformed JSON pointer strings containing alphanumeric characters...