Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)

Summary DS8900F and DS8A00 updates have been released to remediate vulnerabilities in libexpat, libxml2, libsoup and krb5 libraries. Review the Vulnerability Details section below for additional information. Vulnerability Details CVEID:CVE-2024-8176 DESCRIPTION: A stack overflow vulnerability...

Buffer Over-read

Overview Affected versions of this package are vulnerable to Buffer Over-read in the pdfload process, if compiled with support for PDF input via Poppler. An attacker can cause the application to read beyond the bounds of allocated memory by submitting a specially crafted PDF document with media...

CVE-2025-59933

CVE-2025-59933 affects libvips prior to 8.17.2 when built with PDF support via poppler. A buffer read overflow occurs in pdfload during header parsing of crafted PDFs that define a width but not a height. Affected versions: 8.17.1 and earlier; unaffected when built without PDF support or with PDF...

CVE-2025-59933 libvips is vulnerable to Buffer Over-Read in poppler-based pdfload

libvips is a demand-driven, horizontally threaded image processing library. For versions 8.17.1 and below, when libvips is compiled with support for PDF input via poppler, the pdfload operation is affected by a buffer read overflow when parsing the header of a crafted PDF with a page that defines...

CVE-2025-59933 libvips is vulnerable to Buffer Over-Read in poppler-based pdfload

libvips is a demand-driven, horizontally threaded image processing library. For versions 8.17.1 and below, when libvips is compiled with support for PDF input via poppler, the pdfload operation is affected by a buffer read overflow when parsing the header of a crafted PDF with a page that defines...

The vulnerability in the net/can/bcm.c component of the Linux operating system allows a hacker to gain access to confidential data and also cause a service failure.

The vulnerability in the net/can/bcm.c component of the Linux operating system is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability can allow an attacker to access confidential data and also cause service failures...

The vulnerability of the riscv module in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the riscv module in the Linux operating system’s kernel is related to reading data beyond the acceptable buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the trace.c component of the Linux operating system’s kernel allows a hacker to compromise data integrity.

The vulnerability of the trace.c component in the Linux operating system’s kernel is related to reading data beyond the permissible buffer size. Exploiting this vulnerability can allow an attacker to compromise the integrity of data...

The vulnerability in the driver/net/ppp/ppp_synctty.c component of the Linux operating system allows a hacker to gain access to confidential data and also cause a service failure.

The vulnerability in the drivers/net/ppp/pppsynctty.c component of the Linux kernel relates to reading data from beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data and also cause service interruptions...

The vulnerability of the Linux operating system’s kernel Wi-Fi component, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s kernel Wi-Fi component is related to reading data from buffer files beyond the allowed limits. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the raptor_ntriples_parse_term_internal() function in the RAPtor library, which allows a hacker to cause a service failure.

The vulnerability of the raptorntriplesparseterminternal function in the RAPtor library is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the driver component drivers/ntb/hw/mscc/ntb_hw_switchtec.c of the Linux operating system allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the drivers/ntb/hw/mscc/ntbhwswitchtec.c component of the Linux operating system is related to reading data from beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failur...

CVE-2025-11010

A flaw was found in the libucl library. A heap-based buffer over-read can be triggered when a specially crafted configuration file is processed, causing a crash to the application linked to the library and resulting in a denial of service...

CVE-2025-4582

Buffer Over-read, Off-by-one Error vulnerability in RTI Connext Professional Core Libraries allows File Manipulation.This issue affects Connext Professional: from 7.4.0 before 7.6.0, from 7.0.0 before 7.3.0.8, from 6.1.0 before 6.1.2.26, from 6.0.0 before 6.0., from 5.3.0 before 5.3., from 4.4a...

CVE-2025-47328 Buffer Over-read in WLAN HAL

Transient DOS while processing power control requests with invalid antenna or stream values...

CVE-2025-47328 Buffer Over-read in WLAN HAL

Transient DOS while processing power control requests with invalid antenna or stream values...

CVE-2025-47328

CVE-2025-47328 describes a transient Denial of Service in Qualcomm WLAN HAL caused by processing power control requests with invalid antenna or stream values. The issue affects Qualcomm closed‑source WLAN components and is associated with a high 7.5 CVSSv3.1 base score (Network attack, low comple...

CVE-2025-47326 Buffer Over-read in WLAN HAL

Transient DOS while handling command data during power control processing...

CVE-2025-47326 Buffer Over-read in WLAN HAL

Transient DOS while handling command data during power control processing...

CVE-2025-47326

CVE-2025-47326 is described in the CVE ecosystem as a Transient DoS issue related to processing of command data during power control, with the CVE-List entry specifically noting a Buffer Over-read in the WLAN HAL. The connected entries indicate this affects Qualcomm components (including WLAN HAL...