172 matches found
ALPINE-CVE-2026-3644
The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update, |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.jsoutput lacked the output validation applie...
CVE-2026-3644
The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update, |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.jsoutput lacked the output validation applie...
CVE-2026-22983 net: do not write to msg_get_inq in callee
In the Linux kernel, the following vulnerability has been resolved: net: do not write to msggetinq in callee NULL pointer dereference fix. msggetinq is an input field from caller to callee. Don't set it in the callee, as the caller may not clear it on struct reuse. This is a kernel-internal varia...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001942)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001942 advisory. The stack randomization feature in the Linux kernel before 3.19.1 on 64-bit platforms uses incorrect data types for the results of bitwise left-shift operations, whi...
CVE-2025-66030: Integer Overflow or Wraparound
Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be...
PyTorch bitwise_right_shift Information Disclosure
The vulnerability of the torch.bitwiserightshift interface in the PyTorch machine learning framework is related to the execution of the operation outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the getdefaultfont function in the Linux operating system’s kernel is related to an incorrect bitwise shift of a integer. Exploiting this vulnerability could allow an attacker to cause a service failure...
EUVD-2021-26812
Malware in sbrugna...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414592)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414592 advisory. The eBPF ALU32 bounds tracking for bitwise ops AND, OR and XOR in the Linux kernel did not properly update 32-bit bounds, which could be turned into out of bounds...
BIT-PYTORCH-2025-46152
In PyTorch before 2.7.0, bitwiserightshift produces incorrect output for certain out-of-bounds values of the "other" argument...
In PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of-bounds values of the "other" argument.
...
Linux Distros Unpatched Vulnerability : CVE-2025-46152
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PyTorch before 2.7.0, bitwiserightshift produces incorrect output for certain out-of-bounds values of the other argument. CVE-2025-46152 Note that Nessus...
Unspecified Vulnerability in PyTorch (CNVD-2025-23280)
PyTorch is a Python package open-sourced by PyTorch. PyTorch suffers from a security vulnerability that stems from the bitwiserightshift function mishandling the boundary value of the OTHER parameter, which can be exploited by an attacker to cause an output error...
CVE-2025-46152
In PyTorch before 2.7.0, bitwiserightshift produces incorrect output for certain out-of-bounds values of the "other" argument...
DEBIAN-CVE-2025-46152
In PyTorch before 2.7.0, bitwiserightshift produces incorrect output for certain out-of-bounds values of the "other" argument...
PYSEC-2025-201
In PyTorch before 2.7.0, bitwiserightshift produces incorrect output for certain out-of-bounds values of the "other" argument...
AZL-67884 CVE-2025-46152 affecting package pytorch for versions less than 2.2.2-9
In PyTorch before 2.7.0, bitwiserightshift produces incorrect output for certain out-of-bounds values of the "other" argument...
UBUNTU-CVE-2025-46152
In PyTorch before 2.7.0, bitwiserightshift produces incorrect output for certain out-of-bounds values of the "other" argument...
CVE-2025-46152
The PyTorch machine learning framework contains a security vulnerability in the torch.bitwise_right_shift interface. The flaw occurs because the function mishandles out-of-bounds values for the **
