CVE-2025-24992

CVE-2025-24992 is a local, information-disclosure vulnerability in Windows NTFS caused by a buffer over-read. The CVE is tied to Windows NTFS and is described as allowing an unauthorized local disclosure of information. CVSS 3.1 base metrics indicate a Local attack vector, Low attack complexity, ...

Windows NTFS Information Disclosure Vulnerability

Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information locally...

CVE-2025-24992: Buffer Over-read

Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information locally...

PT-2025-10835 · Microsoft · Windows Ntfs +1

Name of the Vulnerable Software and Affected Versions: Windows NTFS affected versions not specified Description: A buffer over-read issue in Windows NTFS allows an unauthorized attacker to disclose information locally. Recommendations: At the moment, there is no information about a newer version...

Linux Distros Unpatched Vulnerability : CVE-2023-45919

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString. NOTE: this is disputed because there are no common situations in which users...

CVE-2024-12975: Buffer Over-read

A buffer overread can occur in the CPC application when operating in full duplex SPI upon receiving an invalid packet over the SPI interface...

Linux Distros Unpatched Vulnerability : CVE-2018-8102

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The JBIG2MMRDecoder::getBlackCode function in JBIG2Stream.cc in xpdf 4.00 allows attackers to launch denial of service buffer over-read and application crash vi...

Linux Distros Unpatched Vulnerability : CVE-2024-5642

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CPython 3.9 and earlier doesn't disallow configuring an empty list for SSLContext.setnpnprotocols which is an invalid value for the underlying OpenSSL API. This...

Linux Distros Unpatched Vulnerability : CVE-2009-3720

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The updatePosition function in lib/xmltokimpl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent...

Linux Distros Unpatched Vulnerability : CVE-2024-57822

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Raptor RDF Syntax Library through 2.0.16, there is a heap-based buffer over-read when parsing triples with the nquads parser in...

Linux Distros Unpatched Vulnerability : CVE-2024-32605

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HDF5 Library through 1.14.3 has a heap-based buffer over-read in H5VMmemcpyvv in H5VM.c called from H5Dcompactreadvv in H5Dcompact.c. CVE-2024-32605 Note that...

Linux Distros Unpatched Vulnerability : CVE-2022-43995

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sudo 1.8.0 through 1.9.12, with the crypt password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a heap-based...

Linux Distros Unpatched Vulnerability : CVE-2022-1769

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Over-read in GitHub repository vim/vim prior to 8.2.4974. CVE-2022-1769 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2022-1629

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Over-read in function findnextquote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory,...

Linux Distros Unpatched Vulnerability : CVE-2022-1927

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Over-read in GitHub repository vim/vim prior to 8.2. CVE-2022-1927 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2022-37434

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications th...

Linux Distros Unpatched Vulnerability : CVE-2022-27941

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in getl2lenprotocol in common/get.c. CVE-2022-27941 Note that Nessus relies on the presence of t...

Linux Distros Unpatched Vulnerability : CVE-2024-31081

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIPassiveGrabDevice function. This issue occurs when byte-swapped length values...

Linux Distros Unpatched Vulnerability : CVE-2024-32616

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5Odtypeencodehelper in H5Odtype.c. CVE-2024-32616 Note that Nessus relies on the presence...

Linux Distros Unpatched Vulnerability : CVE-2023-6936

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In wolfSSL prior to 5.6.6, if callback functions are enabled via the WOLFSSLCALLBACKS flag, then a malicious TLS client or network attacker can trigger a buffer...