CVE-2025-1861

In PHP from 8.1. before 8.1.32, from 8.2. before 8.2.28, from 8.3. before 8.3.19, from 8.4. before 8.4.5, when parsing HTTP redirect in the response to an HTTP request, there is currently limit on the location value size caused by limited size of the location buffer to 1024. However as per RFC911...

SUSE CVE-2025-1861

In PHP from 8.1. before 8.1.32, from 8.2. before 8.2.28, from 8.3. before 8.3.19, from 8.4. before 8.4.5, when parsing HTTP redirect in the response to an HTTP request, there is currently limit on the location value size caused by limited size of the location buffer to 1024. However as per RFC911...

CVE-2022-49564

CVE-2022-49564 affects the Linux kernel crypto/qat DH path. The vulnerability arises when copying a source scatterlist into a linear buffer, where a source buffer larger than the key size could trigger an integer underflow. The fix adds parameter checks for DH and rejects such requests, mitigatin...

CVE-2022-49292 ALSA: oss: Fix PCM OSS buffer allocation overflow

In the Linux kernel, the following vulnerability has been resolved: ALSA: oss: Fix PCM OSS buffer allocation overflow We've got syzbot reports hitting INTMAX overflow at vmalloc allocation that is called from sndpcmplugalloc. Although we apply the restrictions to input parameters, it's based only...

DEBIAN-CVE-2024-50288

In the Linux kernel, the following vulnerability has been resolved: media: vivid: fix buffer overwrite when using 32 buffers The maximum number of buffers that can be requested was increased to 64 for the video capture queue. But video capture used a mustblank array that was still sized for 32...

The vulnerability of the MMS multimedia library protocol in FFmpeg, related to reading data beyond the buffer’s allowed limits, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the MMS protocol in the FFmpeg multimedia library relates to reading data beyond the allowed buffer limits. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the LibGD graphics library, related to reading beyond the allowed buffer data limits, allows attackers to cause service interruptions.

The vulnerability of the LibGD graphics library is related to reading data beyond the acceptable buffer limit. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of Fortinet’s FGFMD software products allows a hacker to execute arbitrary code.

The vulnerability of Fortinet’s FGFMD software products is related to a violation of the buffer’s initial limit. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code by sending specially crafted packets...

golang: crypto/tls: lack of a limit on buffered post-handshake

A flaw was found in Golang. QUIC connections do not set an upper bound on the amount of data buffered when reading post-handshake messages, allowing a malicious QUIC connection to cause unbounded memory growth. With the fix, connections now consistently reject messages larger than 65KiB in size...

golang: crypto/tls: lack of a limit on buffered post-handshake

A flaw was found in Golang. QUIC connections do not set an upper bound on the amount of data buffered when reading post-handshake messages, allowing a malicious QUIC connection to cause unbounded memory growth. With the fix, connections now consistently reject messages larger than 65KiB in size...

Intel Media SDK 安全漏洞

Intel Media SDK is a multimedia SDK Software Development Kit from Intel Corporation USA. The product is primarily used for video encoding, decoding and processing in Windows and embedded Linux applications. A security vulnerability exists in Intel Media SDK that stems from the presence of an...

Intel Media SDK 安全漏洞

Intel Media SDK is a multimedia SDK Software Development Kit from Intel Corporation USA. The product is primarily used for video encoding, decoding and processing in Windows and embedded Linux applications. A security vulnerability exists in Intel Media SDK that stems from the presence of an...

UBUNTU-CVE-2024-26994

In the Linux kernel, the following vulnerability has been resolved: speakup: Avoid crash on very long word In case a console is set up really large and contains a really long word 256 characters, we have to stop before the length of the word buffer...

The vulnerability of the Intel Performance Counter Monitor software lies in its ability to violate the initial buffer limit, allowing attackers to trigger a service failure.

The vulnerability of the Intel Performance Counter Monitor software lies in the violation of the buffer’s initial limit. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Intel Thunderbolt DCH drivers security vulnerability

Intel Thunderbolt DCH drivers is a driver for Windows from Intel Corporation USA. A security vulnerability previously existed in Intel ThunderboltTM DCH drivers for Windows version 88, which arose from an improper buffer limit in the affected product. The vulnerability could allow an authenticate...

Intel Thunderbolt DCH drivers security vulnerability

Intel Thunderbolt DCH drivers is a driver for Windows from Intel Corporation USA. A security vulnerability previously existed in the Intel ThunderboltTM DCH drivers for Windows version 88, which stemmed from an improper buffer limit in the affected product. This could lead to privileged users...

Intel C++ Compiler Classic Security Vulnerability

Intel C++ Compiler Classic is a C++ compiler from Intel Corporation USA used to generate optimized code that runs on Intel processors. A security vulnerability previously existed in Intel C++ Compiler Classic version 2021.8, which stemmed from an improper buffer limit in the affected product. It...

golang: crypto/tls: lack of a limit on buffered post-handshake

A flaw was found in Golang. QUIC connections do not set an upper bound on the amount of data buffered when reading post-handshake messages, allowing a malicious QUIC connection to cause unbounded memory growth. With the fix, connections now consistently reject messages larger than 65KiB in size...

golang: crypto/tls: lack of a limit on buffered post-handshake

A flaw was found in Golang. QUIC connections do not set an upper bound on the amount of data buffered when reading post-handshake messages, allowing a malicious QUIC connection to cause unbounded memory growth. With the fix, connections now consistently reject messages larger than 65KiB in size...

golang: crypto/tls: lack of a limit on buffered post-handshake

A flaw was found in Golang. QUIC connections do not set an upper bound on the amount of data buffered when reading post-handshake messages, allowing a malicious QUIC connection to cause unbounded memory growth. With the fix, connections now consistently reject messages larger than 65KiB in size...