The vulnerability of the nilfs_clear_dirty_pages() function in the fs/nilfs2/page.c module of the NILFS2 file system support module for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nilfscleardirtypages function in the fs/nilfs2/page.c module of the NILFS2 file system support module in the Linux operating system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

CVE-2025-30017

Due to a missing authorization check, an authenticated attacker could upload a file as a template for solution documentation in SAP Solution Manager 7.1. After successful exploitation, an attacker can cause limited impact on the integrity and availability of the application...

CVE-2025-31332

Due to insecure file permissions in SAP BusinessObjects Business Intelligence Platform, an attacker who has local access to the system could modify files potentially disrupting operations or cause service downtime hence leading to a high impact on integrity and availability. However, this...

CVE-2025-31332

Due to insecure file permissions in SAP BusinessObjects Business Intelligence Platform, an attacker who has local access to the system could modify files potentially disrupting operations or cause service downtime hence leading to a high impact on integrity and availability. However, this...

CVE-2024-38797

EDK2 contains a vulnerability in the HashPeImageByType. A user may cause a read out of bounds when a corrupted data pointer and length are sent via an adjecent network. A successful exploit of this vulnerability may lead to a loss of Integrity and/or Availability...

DEBIAN-CVE-2024-38797

EDK2 contains a vulnerability in the HashPeImageByType. A user may cause a read out of bounds when a corrupted data pointer and length are sent via an adjecent network. A successful exploit of this vulnerability may lead to a loss of Integrity and/or Availability...

CVE-2024-38797

CVE-2024-38797 is a HashPeImageByType() read-bounds vulnerability in EDK2. Multiple advisories (EulerOS, Oracle Linux, Ubuntu, TencentOS) report that a corrupted data pointer/length sent over adjacent network can cause read out of bounds, with potential impact to integrity and availability. Explo...

CVE-2024-58107

CVE-2024-58107 describes a buffer overflow in Huawei HarmonyOS? codec module with impact to availability. Connected sources confirm HarmonyOS, codec module as the vulnerable component, and indicate network attack vector with low complexity, no user interaction, and high severity (CVSS v3.1). No c...

PT-2025-15161 · Arkui · Arkui

Name of the Vulnerable Software and Affected Versions: ArkUI framework affected versions not specified Description: The issue is related to a buffer overflow vulnerability in the SVG parsing module of the framework. Successful exploitation of this vulnerability may affect availability...

EDK2 安全漏洞

EDK2 is a set of cross-platform firmware development environments from the Tianocore community based on the UEFI and PI specifications. A security vulnerability exists in EDK2 that stems from an out-of-bounds read in the HashPeImageByType function, which could lead to a loss of integrity and...

PT-2025-15273

Name of the Vulnerable Software and Affected Versions EDK2 affected versions not specified Description The issue is related to a vulnerability in the HashPeImageByType function, where a user can cause a read out of bounds by sending corrupted data via the network. This could lead to a loss of...

CVE-2024-36337

Integer overflow within AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to loss of confidentiality, integrity or availability...

CVE-2024-36336

Integer overflow within the AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to a loss of confidentiality, integrity, or availability...

CVE-2024-36328

Integer overflow within AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to loss of integrity or availability...

CVE-2024-36337

Integer overflow within AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to loss of confidentiality, integrity or availability...

CVE-2024-36337

CVE-2024-36337 describes an integer overflow in the AMD NPU Driver that could enable a local attacker to write out of bounds, potentially compromising confidentiality, integrity, or availability. The attack vector is local with low privileges and no user interaction required, and the impact is sc...

The vulnerability of the inet6_create() function in the net/ipv6/af_inet6.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the inet6create function in the net/ipv6/afinet6.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the dtReadFirst() function in the fs/jfs/jfs_dtree.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dtReadFirst function in the fs/jfs/jfsdtree.c module of the Linux operating system is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the inet_create() function in the net/ipv4/af_inet.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the inetcreate function in the net/ipv4/afinet.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerabilities of the functions psnet_open_pf_bar() and snet_open_vf_bar() in the driver drivers/vdpa/solidrun/snet_main.c of the Linux kernel’s vDPA driver allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the functions psnetopenpfbar and snetopenvfbar in the drivers/vdpa/solidrun/snetmain.c file of the Linux kernel’s vDPA driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...