CVE-2025-40085

Affected software: Linux kernel (ALSA: usb-audio).Issue: NULL pointer dereference in try_to_register_card when usb_ifnum_to_if() returns NULL and is passed to usb_interface_claimed() without a NULL check.Impact: NULL pointer dereference during creation of an invalid USB audio device (potential cr...

kernel: Linux kernel ALSA hda/ca0132 buffer overflow

This CVE has been marked as Rejected by the assigning CNA...

Linux Distros Unpatched Vulnerability : CVE-2025-40085

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usb-audio: Fix NULL pointer deference in trytoregistercard In trytoregistercard, the return value of usbifnumtoif is passed directly to usbinterfaceclaime...

AVReg Software Unauthenticated Access Disclosure

The vulnerability of the AVReg software for creating audio/video recorders is related to insufficient testing of server-side requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

AVReg Software Compromise

The vulnerability of the AVReg software for creating audio/video recorders is related to the use of default login credentials. Exploiting this vulnerability allows a malicious actor to completely compromise the system remotely...

Poly Clariti Manager XSS

The vulnerability of the Poly Clariti Manager platform for managing, planning, and maintaining audio-visual systems is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions remotely...

Poly Clariti Manager Deserialization

The vulnerability of the Poly Clariti Manager platform for managing, planning, and maintaining audio-visual systems is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions from a remote location...

CVE-2025-40085: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix NULL pointer deference in trytoregistercard In trytoregistercard, the return value of usbifnumtoif is passed directly to usbinterfaceclaimed without a NULL check, which will lead to a NULL pointer dereference...

CVE-2025-61043

A flaw was found in Monkey Audio. An improper handling of the length of UTF-8 strings in the CAPECharacterHelper::GetUTF16FromUTF8 function can cause an out-of-bounds read. This vulnerability can be exploited to expose sensitive information or potentially cause a crash, resulting in a denial of...

EUVD-2025-36509

An out-of-bounds read vulnerability has been discovered in Monkey's Audio 11.31, specifically in the CAPECharacterHelper::GetUTF16FromUTF8 function. The issue arises from improper handling of the length of the input UTF-8 string, causing the function to read past the memory boundary. This...

CVE-2025-61043

An out-of-bounds read vulnerability has been discovered in Monkey's Audio 11.31, specifically in the CAPECharacterHelper::GetUTF16FromUTF8 function. The issue arises from improper handling of the length of the input UTF-8 string, causing the function to read past the memory boundary. This...

CVE-2025-40045

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd937x: set the comp soundwire port correctly For some reason we endup with setting soundwire port for HPHLCOMP and HPHRCOMP as zero, this can potentially result in a memory corruption due to accessing and setting ...

CVE-2025-40045 ASoC: codecs: wcd937x: set the comp soundwire port correctly

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd937x: set the comp soundwire port correctly For some reason we endup with setting soundwire port for HPHLCOMP and HPHRCOMP as zero, this can potentially result in a memory corruption due to accessing and setting ...

CVE-2025-40045

The CVE-2025-40045 entry concerns the Linux kernel ASoC wcd937x codecs. The issue arises from incorrect handling of the SoundWire port for HPHL_COMP/HPHR_COMP, which could lead to memory corruption by accessing port_map with a -1 index. The advisory states this has been resolved by correctly sett...

PT-2025-44178

Name of the Vulnerable Software and Affected Versions Monkey's Audio version 11.31 Description An out-of-bounds read issue exists in Monkey's Audio version 11.31, specifically within the CAPECharacterHelper::GetUTF16FromUTF8 function. This occurs due to improper handling of the length of input...

CVE-2025-61043

An out-of-bounds read vulnerability has been discovered in Monkey's Audio 11.31, specifically in the CAPECharacterHelper::GetUTF16FromUTF8 function. The issue arises from improper handling of the length of the input UTF-8 string, causing the function to read past the memory boundary. This...

CVE-2025-61043

An out-of-bounds read vulnerability has been discovered in Monkey's Audio 11.31, specifically in the CAPECharacterHelper::GetUTF16FromUTF8 function. The issue arises from improper handling of the length of the input UTF-8 string, causing the function to read past the memory boundary. This...

Monkeys Audio security vulnerabilities

Monkeys Audio is an open source lossless audio compression codec from Monkeys Audio. A security vulnerability exists in Monkeys Audio version 11.31, which stems from the CAPECharacterHelper::GetUTF16FromUTF8 function mishandling the length of UTF-8 strings, which could lead to out-of-bounds reads...

CVE-2025-61043

A flaw in Monkey's Audio version 11.31 allows for an out-of-bounds read due to improper handling of the length of input UTF-8 strings in the CAPECharacterHelper::GetUTF16FromUTF8 function. This vulnerability could allow an attacker to expose sensitive information or cause a crash , leading to a d...

CVE-2025-61043: Out-of-bounds Read

An out-of-bounds read vulnerability has been discovered in Monkey's Audio 11.31, specifically in the CAPECharacterHelper::GetUTF16FromUTF8 function. The issue arises from improper handling of the length of the input UTF-8 string, causing the function to read past the memory boundary. This...