CVE-2025-27068 Buffer Over-read in Camera

Memory corruption while processing an IOCTL command with an arbitrary address...

CVE-2025-27068

CVE-2025-27068 describes memory corruption while processing an IOCTL command with an arbitrary address, affecting Qualcomm chipsets per multiple feeds. The core issue is a problematic handling path during IOCTL processing that can lead to corruption of memory (severity High, CVSSv3.1: 7.8; Local ...

CVE-2025-27065 Buffer Over-read in WLAN Firmware

Transient DOS while processing a frame with malformed shared-key descriptor...

CVE-2025-27065 Buffer Over-read in WLAN Firmware

Transient DOS while processing a frame with malformed shared-key descriptor...

CVE-2025-27065

CVE-2025-27065 is described across multiple feeds as a transient DoS in WLAN firmware caused by a buffer over-read when processing a frame with a malformed shared-key descriptor. Affected component: Qualcomm closed‑source WLAN firmware. The CVE is listed with high severity and indicates a DoS out...

CVE-2025-21457 Buffer Over-read in Automotive OS Platform Android

Information disclosure while opening a fastrpc session when domain is not sanitized...

CVE-2025-21457 Buffer Over-read in Automotive OS Platform Android

Information disclosure while opening a fastrpc session when domain is not sanitized...

CVE-2025-21457

CVE-2025-21457 relates to an information disclosure in Qualcomm-chipset environments involving opening a fastrpc session when the domain is not sanitized. The vulnerability is described as a local impact with a CVSSv3.1 base score of 6.1 (Medium), with Confidentiality Impact: High, Integrity/Avai...

Linux Distros Unpatched Vulnerability : CVE-2020-10769

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A buffer over-read flaw was found in RH kernel versions before 5.0 in cryptoauthencextractkeys in crypto/authenc.c in the IPsec Cryptographic algorithm's module...

Linux Distros Unpatched Vulnerability : CVE-2019-25013

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The iconv feature in the GNU C Library aka glibc or libc6 through 2.32, when processing invalid multi- byte input sequences in the EUC-KR encoding, may have a...

Linux Distros Unpatched Vulnerability : CVE-2025-2784

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skipinsightwhitespace function. Libsoup clients...

Amazon Linux 2023 : bsdcat, bsdcpio, bsdtar (ALAS2023-2025-1091)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1091 advisory. A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over- read due to the size of a filter block potentially exceeding the...

RockyLinux 9 : php:8.2 (RLSA-2025:7432)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:7432 advisory. php: Leak partial content of the heap through heap buffer over-read in mysqlnd CVE-2024-8929 php: Single byte overread with convert.quoted-printable-deco...

php:8.2 security update

An update is available for php-pecl-zip, module.php-pecl-apcu, php-pecl-xdebug3, module.php, module.php-pecl-xdebug3, php-pecl-rrd, php, module.php-pecl-zip, php-pecl-apcu, module.php-pecl-rrd. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a...

RLSA-2025:7432 Moderate: php:8.2 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: Leak partial content of the heap through heap buffer over-read in mysqlnd CVE-2024-8929 php: Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 php: Configuring ...

RLSA-2025:4263 Moderate: php:8.1 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: Leak partial content of the heap through heap buffer over-read in mysqlnd CVE-2024-8929 php: Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 php: Configuring ...

libjpeg-turbo security update

An update is available for libjpeg-turbo. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libjpeg-turbo packages contain a library of functions for...

RLSA-2025:7540 Moderate: libjpeg-turbo security update

The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance. Security Fixes: libjpeg-turbo:...

libsoup security update

An update is available for libsoup. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libsoup packages provide an HTTP client and server library for GNOME...

RLSA-2025:8132 Important: libsoup security update

The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: libsoup: Heap buffer over-read in skipinsignificantspace when sniffing content CVE-2025-2784 libsoup: Denial of Service attack to websocket server CVE-2025-32049 libsoup: OOB Read on libsoup through function...