16160 matches found
PT-2025-48516
An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an invalid ClientHello message to a DTLS server that causes a heap-based buffer over-read of up to 255 bytes. This can cause a server crash or possibly information...
PT-2025-48518
An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. There is a potential heap-based buffer overflow and heap-based buffer over-read in DTLS if MBEDTLS SSL DTLS CONNECTION ID is enabled and MBEDTLS SSL CID IN LEN MAX 2 MBEDTLS SSL CID OUT LEN MAX...
PT-2025-48507
An issue was discovered in Arm Mbed TLS before 2.24.0. mbedtls x509 crl parse der has a buffer over-read of one byte...
TencentOS Server 4: libpq (TSSA-2025:0367)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0367 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
CVE-2025-63602: Buffer Over-read
A vulnerability was discovered in Awesome Miner thru 11.2.4 that allows arbitrary read and write to kernel memory and MSRs such as LSTAR as an unprivileged user. This is due to the implementation of an insecure version of WinRing0 1.2.0.5, renamed to IntelliBreeze.Maintenance.Service.sys that lac...
kimageformats:kimgio_heif_fuzzer: Heap-buffer-overflow in Op_YCbCr420_to_RRGGBBaa::convert_colorspace
Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=5427590325403648 Project: kimageformats Fuzzing Engine: afl Fuzz Target: kimgioheiffuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...
CVE-2025-60720
Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally...
CVE-2025-40198: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: ext4: avoid potential buffer over-read in parseapplysbmountoptions Unlike other strings in the ext4 superblock, we rely on tune2fs to make sure smountopts is NUL terminated. Harden parseapplysbmountoptions by treating smountopts ...
CVE-2025-60720
Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally...
EUVD-2025-93411
Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally...
PT-2025-48908
Уязвимость графического редактора Adobe Illustrator связана с записью за границами буфера. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код...
PT-2025-46481
Name of the Vulnerable Software and Affected Versions Windows TDX.sys affected versions not specified Description A buffer over-read issue exists in Windows TDX.sys. A local attacker with authorization can exploit this to gain elevated privileges. Recommendations At the moment, there is no...
CVE-2025-60720: Buffer Over-read
Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally...
DEBIAN-CVE-2025-12745
A weakness has been identified in QuickJS up to eb2c89087def1829ed99630cb14b549d7a98408c. This affects the function jsarraybufferslice of the file quickjs.c. This manipulation causes buffer over-read. The attack is restricted to local execution. The exploit has been made available to the public a...
EUVD-2025-37919
A weakness has been identified in QuickJS up to eb2c89087def1829ed99630cb14b549d7a98408c. This affects the function jsarraybufferslice of the file quickjs.c. This manipulation causes buffer over-read. The attack is restricted to local execution. The exploit has been made available to the public a...
QuickJS 安全漏洞
QuickJS is a small and embeddable Javascript engine open-sourced by QuickJS. A security vulnerability exists in QuickJS, which stems from a buffer over-read in the function jsarraybufferslice in the file quickjs.c, which could lead to a local execution attack...
CVE-2025-12745: Buffer Over-read
A weakness has been identified in QuickJS up to eb2c89087def1829ed99630cb14b549d7a98408c. This affects the function jsarraybufferslice of the file quickjs.c. This manipulation causes buffer over-read. The attack is restricted to local execution. The exploit has been made available to the public a...
CVE-2025-47368 Buffer Over-read in DSP Service
Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing...
