4662 matches found
CVE-2025-47806
The GStreamer multimedia framework is vulnerable to a stack buffer overflow in the subparse plugin 's parse_subrip_time function. This flaw exists in versions through 1.26.1 and can result in a denial of service (DoS) via a system crash. Some sources indicate that a remote attacker could potentia...
The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside the buffer in memory, allowing an attacker to cause a service failure.
The vulnerability in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
CVE-2025-7844
Exporting a TPM based RSA key larger than 2048 bits from the TPM could overrun a stack buffer if the default MAXRSAKEYBITS=2048 is used. If your TPM 2.0 module supports RSA key sizes larger than 2048 bit and your applications supports creating or importing an RSA private or public key larger than...
kernel: xhci: handle isoc Babble and Buffer Overrun events properly
A flaw was found in the Linux kernel related to the Extensible Host Controller Interface xHCI subsystem, specifically how it handles certain events. The issue arises when the xHCI driver improperly handles isochronous isoc Babble and Buffer Overrun events. The vulnerability occurs because the xHC...
PT-2025-40877
Name of the Vulnerable Software and Affected Versions OpenEXR versions prior to 8.0 Description The software is susceptible to an issue when decoding OpenEXR files that utilize DWAA or DWAB compression. Specifically, the length of run-length-encoded data is not validated during the decoding...
CVE-2025-7844
Exporting a TPM based RSA key larger than 2048 bits from the TPM could overrun a stack buffer if the default MAXRSAKEYBITS=2048 is used. If your TPM 2.0 module supports RSA key sizes larger than 2048 bit and your applications supports creating or importing an RSA private or public key larger than...
The vulnerability of the software for programming operator panels of the VT series, such as VT-Designer, arises from writing beyond buffer boundaries, allowing a hacker to execute arbitrary code.
The vulnerability of the software for programming operator panels of the VT series, such as VT-Designer, lies in the writing beyond buffer boundaries when processing PM3 files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the formSetWAN_Wizard51() function (/goform/formSetWAN_Wizard51) in the D-Link DIR-619L router microprogramming software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the formSetWANWizard51 function /goform/formSetWANWizard51 in the D-Link DIR-619L router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the...
OESA-2025-1935 firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global mozdebugprefix /lib/debug %global mozdebugdir /lib/debug/ %global unamem %uname -m %global symbolsfilename -.en-US.-%uname.crashreporter-symbols.zip %global symbolsfilepath...
The vulnerability of P-Net’s input/output devices, related to writing beyond buffer boundaries, allows a intruder to cause a service failure.
The vulnerability of P-Net’s input/output devices is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to the execution of operations beyond buffer boundaries in memory, allowing attackers to execute arbitrary code or cause system failures.
The vulnerability of the software for modeling, designing, and drawing in AutoCAD is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure using a specially created XT...
Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to the execution of operations beyond buffer boundaries in memory, allowing attackers to execute arbitrary code or cause system failures.
The vulnerability of software for modeling, designing, and drawing in AutoCAD is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure using a specially created 3DM fi...
Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to the execution of operations beyond buffer boundaries in memory, allowing attackers to execute arbitrary code or cause system failures.
The vulnerability of the software for modeling, designing, and drawing in AutoCAD is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure using a specially created PR...
The vulnerability of the dma_unmap_len_set() function in the bnxt_en component of the Linux operating system allows a hacker to increase their privileges.
The vulnerability of the dmaunmaplenset function in the bnxten component of the Linux operating system’s kernel is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain increased privileges...
The vulnerability of the i2c_dw_xfer_init() function in the drivers/i2c/busses/i2c-designware-master.c module of Linux kernel allows a hacker to trigger a service failure.
The vulnerability of the i2cdwxferinit function in the drivers/i2c/busses/i2c-designware-master.c file of the Linux kernel is related to the occurrence of operations outside the buffer boundaries due to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to...
The vulnerability of the built-in boa server (/boafrm/formFilter) of the TOTOLINK X15 router’s microprogramming software allows a hacker to induce a service failure.
The vulnerability of the built-in server boa /boafrm/formFilter of the TOTOLINK X15 router microprogramming system is related to the issue where an operation is executed outside the buffer in memory when processing the ip6addr parameter. Exploiting this vulnerability allows a malicious actor to...
The vulnerability of the idr_for_each() function in the Linux operating system’s kernel allows a attacker to cause a service failure.
The vulnerability of the idrforeach function in the Linux operating system arises from the operation exceeding the memory buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...
NewStart CGSL MAIN 7.02 : opensc Multiple Vulnerabilities (NS-SA-2025-0119)
The remote NewStart CGSL host, running version MAIN 7.02, has opensc packages installed that are affected by multiple vulnerabilities: - A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operation...
The vulnerability of the formSetWanNonLogin() function in the embedded web server software of D-Link DIR-513 routers allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the formSetWanNonLogin function in the embedded web server software of D-Link DIR-513 routers is related to the issue of data being written outside the buffer in memory when processing the curTime parameter. Exploiting this vulnerability could allow a remote attacker to execu...
The vulnerability of the libsavsvc.so library in Android operating systems allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the libsavsvc.so library in Android operating systems is related to writing beyond the buffer boundaries when processing MPEG4 files. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...