280 matches found
PT-2026-114392
In the Linux kernel, the following vulnerability has been resolved: selinux: always fill AVC decision in avc has perm noaudit avc has perm noaudit is documented to return a copy of the access decision in @avd, but its early return for an empty requested permission set leaves the buffer untouched...
Astra Linux – Vulnerability in Linux, Linux 5.10
The FireWire subsystem in the Linux kernel up to version 5.14.13 has a buffer overflow issue related to the drivers/media/FireWire/firedtv-avc.c and drivers/media/FireWire/firedtv-ci.c files. This issue arises due to improper handling of bounds checking by the avccapmt function...
PT-2026-87436
Name of the Vulnerable Software and Affected Versions Audio Video Control Transport Protocol affected versions not specified Description A use-after-free issue exists in the Audio Video Control Transport Protocol, which allows an authorized attacker to elevate privileges locally. Use-after-free i...
graphicsmagick:coder_HEIF_fuzzer: Use-of-uninitialized-value in parse_sps_for_avcC_configuration
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6268196932616192 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderHEIFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...
frr security, bug fix, and enhancement update
8.5.3-15.1 - Resolves: RHEL-193234 - input validation fixes for EVPN NLRI and ENCAP/VNC packet parsing 8.5.3-15 - Resolves: RHEL-176258 - AVC when reading user's site-packages 8.5.3-14 - Resolves: RHEL-152300 - ignored route in the kernel after flapping interface...
Moderate: Red Hat Security Advisory: container-selinux and crun security, bug fix, and enhancement update
An update for multiple packages is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
DEBIAN-CVE-2025-15667
A vulnerability was determined in GPAC up to 2.5-DEV. This vulnerability affects the function gfisomnalusamplerewrite of the file src/isomedia/avcext.c of the component MP4Box. This manipulation of the argument naluoutbs causes double free. It is possible to launch the attack on the local host. T...
UBUNTU-CVE-2025-15667
A vulnerability was determined in GPAC up to 2.5-DEV. This vulnerability affects the function gfisomnalusamplerewrite of the file src/isomedia/avcext.c of the component MP4Box. This manipulation of the argument naluoutbs causes double free. It is possible to launch the attack on the local host. T...
CVE-2025-15667
A vulnerability was determined in GPAC up to 2.5-DEV. This vulnerability affects the function gfisomnalusamplerewrite of the file src/isomedia/avcext.c of the component MP4Box. This manipulation of the argument naluoutbs causes double free. It is possible to launch the attack on the local host. T...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: SELinux: Use sk blob accessor in socket permission helpers. The SELinux socket state is stored in the composite LSM socket blob. The functions sockhasperm and nlmsgsockhasextendedperms currently dereference sk-sksecurity directly...
EUVD-2025-210150
A heap buffer overflow in the gfisomvpconfignew function isomedia/avcext.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
CVE-2025-55652
A heap buffer overflow in the gfisomvpconfignew function isomedia/avcext.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
Linux kernel Audio DoS
The vulnerability of the fcpavcTransaction function in the sound/firewire/fcp.c module of the Linux kernel’s audio subsystem is related to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...
MiracleLinux 4 : setroubleshoot-3.0.47-6.1.0.1.AXS4 (AXSA:2015-107:01)
The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2015-107:01 advisory. Description: setroubleshoot GUI. Application that allows you to view setroubleshoot-server messages. Provides tools to help diagnose SELinux problems. When AV...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001449)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001449 advisory. The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and...
Malicious code in modiov-kian-avc (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 796cd89360bdc0f721879daa60d63c05e1216b80a0ba098e36ee739dc784fc9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2009-1354
Malware in sbrugna...
EUVD-2009-0447
Malware in sbrugna...
EUVD-2019-2299
Malware in sbrugna...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414526)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414526 advisory. The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and...