PT-2025-45026

Name of the Vulnerable Software and Affected Versions Samsung Mobile Processor Exynos 2400 Samsung Mobile Processor Exynos 1580 Samsung Mobile Processor Exynos 2500 Description A race condition exists in the HTS driver, which can lead to an out-of-bounds write. This condition results in a denial ...

PT-2025-44975

Name of the Vulnerable Software and Affected Versions Aruba WLAN AP Driver affected versions not specified Description An out-of-bounds write issue exists in the wlan AP driver due to an incorrect bounds check. Successful exploitation could allow a malicious actor with System privileges to escala...

PT-2025-44912

Name of the Vulnerable Software and Affected Versions Xcode versions prior to 26.1 Description An out-of-bounds write issue exists due to insufficient input validation. Processing a maliciously crafted file may result in heap corruption. Recommendations Update to Xcode version 26.1...

PT-2025-44977

Name of the Vulnerable Software and Affected Versions Aruba WLAN AP Driver affected versions not specified Description An out-of-bounds write issue exists in the wlan AP driver due to an incorrect bounds check. Successful exploitation could allow a malicious actor with System privileges to escala...

PT-2025-44964

Name of the Vulnerable Software and Affected Versions Huawei IMS affected versions not specified Description The IMS service contains a potential out-of-bounds write condition resulting from a missing bounds check. Successful exploitation could allow a remote attacker to escalate privileges. An...

PT-2025-44965

Name of the Vulnerable Software and Affected Versions Huawei Modem affected versions not specified Description The Huawei Modem contains a flaw where an incorrect bounds check can lead to an out-of-bounds write. This condition could allow for remote escalation of privilege if a User Equipment UE...

PT-2025-44988

Name of the Vulnerable Software and Affected Versions Huawei Charger affected versions not specified Description The charger contains a flaw where a missing bounds check can lead to an out-of-bounds write. Successful exploitation of this issue could allow a malicious actor to gain local system...

PT-2025-44931

Name of the Vulnerable Software and Affected Versions WinBlast Driver affected versions not specified Description A memory corruption issue exists when accessing a buffer during IOCTL processing. This can lead to an out-of-bounds write condition. Recommendations At the moment, there is no...

PT-2025-44973

Name of the Vulnerable Software and Affected Versions Aruba wlan AP Driver affected versions not specified Description An out-of-bounds write issue exists in the wlan AP driver due to an incorrect bounds check. Successful exploitation could allow a malicious actor with System privileges to escala...

About the security content of Xcode 26.1

About the security content of Xcode 26.1 This document describes the security content of Xcode 26.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

PT-2025-44829

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14.8.2 macOS versions prior to Sequoia 15.7.2 Description An out-of-bounds write issue exists due to insufficient input validation. Parsing a file may lead to unexpected application termination. Recommendations...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write due to missing bounds checks in the tampdecompressordecompresscb function of decompressor.c. An attacker can cause a crash or unintended behavior by providing specially crafted tamp files. Remediation Upgrade tamp to...

Astra Linux - уязвимость в glib2.0

GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in goptiongroupaddentries. NOTE: the vendor's position is "Realistically this is not a security issue. The standard pattern is for callers to provide a static list of option entries in a fixed number of...

Xen 安全漏洞

Xen is an open source virtual machine monitor product from Xen Open Source. The product enables different and incompatible operating systems to run on the same computer and supports migration at runtime to ensure uptime and avoid downtime. A security vulnerability exists in Xen that stems from a...

CVE-2025-64096

CryptoLib (NASA open source SDLS-EP implementation) before version 1.4.2 is affected by a stack-based buffer overflow in Crypto_Key_update() (crypto_key_mgmt.c). An attacker-controlled TLV length field (pdu_len) can drive the calculation of the number of keys beyond the static kblk[98] array, cau...

Exploit for CVE-2025-54957

Dolby Unified Decoder CVE-2025-54957 POC When a file is p...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

CVE-2025-10920 GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open...

CVE-2025-10920

CVE-2025-10920 is a GIMP vulnerability where ICNS file parsing can cause an out-of-bounds write, enabling remote code execution. The issue stems from insufficient validation while parsing ICNS data, allowing an attacker to write past a buffer in the target process. Several connected advisories no...

CVE-2025-10920

GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open...