CVE-2025-20728

The CVE-2025-20728 entry concerns a local escalation of privilege via an out-of-bounds write in the wlan STA driver. Connected sources indicate the vulnerability affects Qualcomm wlan STA driver with an incorrect bounds check, enabling local privilege escalation with low privileges required and n...

CVE-2025-20725

In ims service, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-20725

In ims service, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-20725

CVE-2025-20725 affects MediaTek IMS service with an out-of-bounds write due to a missing bounds check. The issue enables remote escalation of privilege when a user equipment connects to a rogue base station; exploitation does not require user interaction. Patch MOLY01671924 (MSV-4620) is referenc...

CVE-2025-20726

CVE-2025-20726 affects MediaTek’s Modem, where an incorrect bounds check enables an out-of-bounds write. This could permit remote escalation of privilege if a user equipment (UE) connects to a rogue base station; exploitation requires no user interaction. A patch is available as MOLY01672598 (MSV...

CVE-2025-20726

In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-20727

CVE-2025-20727 affects MediaTek MoLY modem software, describing a heap-buffer overflow that enables out-of-bounds writes and remote escalation of privilege when a UE connects to a rogue base station. The vulnerability arises from an out-of-bounds write in the Modem component, with no user interac...

CVE-2025-20727

In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-47367 Out-of-bounds Write in WinBlast Driver

Memory corruption while accessing a buffer during IOCTL processing...

CVE-2025-47367

CVE-2025-47367 : Memory corruption in the WinBlast Driver when processing an IOCTL, caused by an out-of-bounds write while accessing a buffer. Affected software component: WinBlast Driver (Qualcomm chipsets). Impact described as memory corruption with high severity in CVSS metrics (LOCAL attack, ...

CVE-2025-27070

CVE-2025-27070 is listed under Qualcomm closed-source components as a High-severity issue involving memory corruption during encryption and decryption commands. The available documents identify the vulnerability and its association with Qualcomm closed-source components, but do not provide a spec...

CVE-2025-27070 Out-of-bounds Write in Windows Compute

Memory corruption while performing encryption and decryption commands...

CVE-2025-43505

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Xcode 26.1. Processing a maliciously crafted file may lead to heap corruption...

CVE-2025-43505

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Xcode 26.1. Processing a maliciously crafted file may lead to heap corruption...

CVE-2025-43380

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. Parsing a file may lead to an unexpected app termination...

CVE-2025-43380

CVE-2025-43380 describes an out-of-bounds write issue in macOS components caused by insufficient input validation. The vulnerability affects macOS Sonoma 14.8.2 (and earlier) and macOS Sequoia 15.7.2, macOS Tahoe 26.1, with parsing a file potentially leading to unexpected application termination....

CVE-2025-43505

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Xcode 26.1. Processing a maliciously crafted file may lead to heap corruption...

CVE-2025-43505

Apple Xcode 26.1 fixes CVE-2025-43505, an out-of-bounds write caused by insufficient input validation that could allow heap corruption when processing a maliciously crafted file. Affected product: Xcode (and LLDB noted in Apple advisory). Remediation: update to Xcode 26.1. Notes from connected so...

CVE-2025-43505

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Xcode 26.1. Processing a maliciously crafted file may lead to heap corruption...

PT-2025-45026

Name of the Vulnerable Software and Affected Versions Samsung Mobile Processor Exynos 2400 Samsung Mobile Processor Exynos 1580 Samsung Mobile Processor Exynos 2500 Description A race condition exists in the HTS driver, which can lead to an out-of-bounds write. This condition results in a denial ...