PT-2026-5018

Name of the Vulnerable Software and Affected Versions Xen affected versions not specified Description The issue relates to the context switch logic within Xen. Specifically, Xen attempts to skip an IBPB Instruction Barrier Page Base when a virtual CPU vCPU returns to a CPU it previously ran on...

CVE-2025-11964 OOBW in utf_16le_to_utf_8_truncated() in libpcap

On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf16letoutf8truncated can write data beyond the end of the provided buffer...

The vulnerability of the `sess_get_uid()` function in D-Link DIR-600 router software allows a hacker to execute arbitrary code.

The vulnerability of the sessgetuid function in D-Link DIR-600 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted HTTP request...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992922)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992922 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: bcm - Fix pointer arithmetic In spu2dumpomd value of ptr is increased by ciphkeylen inste...

The vulnerability of Tenda WH450 router microprogramming software, related to the execution of operations outside the buffer in memory, allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of Tenda WH450 router microprogramming software is related to the execution of an operation beyond the buffer in memory when processing the parameter ssidindex for the destination point /goform/onSSIDChange. Exploiting this vulnerability allows a remote attacker to execute...

The vulnerability of the strcpy function in the microprogramming software for Tenda AC18 routers allows a hacker to execute arbitrary code or cause a service failure due to incorrect HTTP requests.

The vulnerability of the strcpy function in the microprogramming software for Tenda AC18 routers is related to the operation that goes beyond the buffer boundaries in memory when processing the mac argument. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause...

The vulnerability of the Mozilla Firefox browser and the Thunderbird email client, related to writing beyond the buffer limit, allows attackers to execute arbitrary code.

The vulnerability of Mozilla Firefox browser and Thunderbird email client lies in the issue of buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

SUSE CVE-2023-54054

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CLSA-2025-1766601879 gnutls: Fix of CVE-2025-32989

CVE-2025-32989: fix read buffer overrun in x509 SCT timestamps...

EUVD-2023-60272

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix buffer overrun Klocwork warning: Buffer Overflow - Array Index Out of Bounds Driver uses fcelsflogi to calculate size of buffer. The actual buffer is nested inside of fcelsflogi which is smaller. Replace...

CVE-2023-54054

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2023-54054

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2023-54054

...

CVE-2023-54054

CVE-2023-54054 pertains to the Linux kernel SCSI qla2xxx driver, where a buffer overrun occurred in the handling of fc_els_flogi, leading to an incorrect buffer size calculation. Multiple connected sources (OSV entries for Debian, Ubuntu, and general OSV) report that the vulnerability has been re...

CVE-2023-54054 scsi: qla2xxx: Fix buffer overrun

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix buffer overrun Klocwork warning: Buffer Overflow - Array Index Out of Bounds Driver uses fcelsflogi to calculate size of buffer. The actual buffer is nested inside of fcelsflogi which is smaller. Replace...

PT-2025-53052

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the qla2xxx SCSI driver that can lead to a buffer overrun. The issue stems from an incorrect buffer size calculation during the use of the fc els...

The vulnerability of the IBM InfoSphere Data Replication software configuration lies in the execution of operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the IBM InfoSphere Data Replication software configuration relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

CVE-2025-14409

Soda PDF Desktop PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability in that the target must visit a...

The vulnerability of the TEE SOC microprogramming software driver for AMD processors allows a hacker to trigger a service failure.

The vulnerability of the TEE SOC microprogramming software driver for AMD processors is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of AMD’s microprogramming software related to writing beyond buffer boundaries in memory allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of AMD’s microprogramming software lies in writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...