Lucene search
K

152 matches found

Positive Technologies
Positive Technologies
added 2025/09/04 12:0 a.m.4 views

PT-2025-35886

Name of the Vulnerable Software and Affected Versions: lwis affected versions not specified Description: The lwis io buffer write function contains a potential out-of-bounds OOB read/write issue resulting from insufficient input validation. Successful exploitation of this issue could lead to loca...

7.8CVSS6.2AI score0.00009EPSS
Exploits0References5
OSV
OSV
added 2025/09/01 12:0 a.m.4 views

PUB-A-418224726

In lwisiobufferwrite of TBD, there is a possible OOB read/write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.9AI score0.00009EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2018-12115

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding recognized by Node.js under the names 'ucs2', 'ucs-2', 'utf16le' and...

7.5CVSS8.1AI score0.00797EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-38429

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bus: mhi: ep: Update read pointer only after buffer is written Inside mhiepringaddelement, the read pointer rdoffset is updated before the buffer is written,...

5.5CVSS6.5AI score0.00065EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2025/07/29 11:23 p.m.1 views

SUSE CVE-2025-38429

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Update read pointer only after buffer is written Inside mhiepringaddelement, the read pointer rdoffset is updated before the buffer is written, potentially causing race conditions where the host sees an updated read...

5.8CVSS6.6AI score0.00065EPSS
Exploits0References22
OSV
OSV
added 2025/07/28 12:15 p.m.1 views

DEBIAN-CVE-2025-38484

In the Linux kernel, the following vulnerability has been resolved: iio: backend: fix out-of-bound write The buffer is set to 80 character. If a caller write more characters, count is truncated to the max available space in "simplewritetobuffer". But afterwards a string terminator is written to t...

7.8CVSS6.4AI score0.00052EPSS
Exploits0References1
NVD
NVD
added 2025/07/25 3:15 p.m.2 views

CVE-2025-38429

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Update read pointer only after buffer is written Inside mhiepringaddelement, the read pointer rdoffset is updated before the buffer is written, potentially causing race conditions where the host sees an updated read...

5.5CVSS0.00065EPSS
Exploits0References4
OSV
OSV
added 2025/07/25 3:15 p.m.1 views

DEBIAN-CVE-2025-38429

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Update read pointer only after buffer is written Inside mhiepringaddelement, the read pointer rdoffset is updated before the buffer is written, potentially causing race conditions where the host sees an updated read...

5.5CVSS5.6AI score0.00065EPSS
Exploits0References1
OSV
OSV
added 2025/07/25 3:15 p.m.0 views

UBUNTU-CVE-2025-38429

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Update read pointer only after buffer is written Inside mhiepringaddelement, the read pointer rdoffset is updated before the buffer is written, potentially causing race conditions where the host sees an updated read...

5.5CVSS6.1AI score0.00065EPSS
Exploits0References29
Debian CVE
Debian CVE
added 2025/07/25 2:16 p.m.3 views

CVE-2025-38429

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Update read pointer only after buffer is written Inside mhiepringaddelement, the read pointer rdoffset is updated before the buffer is written, potentially causing race conditions where the host sees an updated read...

5.5CVSS5.6AI score0.00065EPSS
Exploits0
Cvelist
Cvelist
added 2025/07/25 2:16 p.m.5 views

CVE-2025-38429 bus: mhi: ep: Update read pointer only after buffer is written

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Update read pointer only after buffer is written Inside mhiepringaddelement, the read pointer rdoffset is updated before the buffer is written, potentially causing race conditions where the host sees an updated read...

0.00065EPSS
Exploits0References4
CVE
CVE
added 2025/07/25 2:16 p.m.67 views

CVE-2025-38429

The CVE-2025-38429 issue affects the Linux kernel’s bus: mhi: ep path. Root cause: in mhi_ep_ring_add_element, the read pointer (rd_offset) was advanced before the corresponding buffer write, allowing a race where the host could observe an updated read pointer prior to the element being fully wri...

5.5CVSS6.6AI score0.00065EPSS
Exploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2025/07/25 2:16 p.m.0 views

CVE-2025-38429

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Update read pointer only after buffer is written Inside mhiepringaddelement, the read pointer rdoffset is updated before the buffer is written, potentially causing race conditions where the host sees an updated read...

5.5CVSS6.4AI score0.00065EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2025/07/25 2:16 p.m.2 views

CVE-2025-38429 bus: mhi: ep: Update read pointer only after buffer is written

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Update read pointer only after buffer is written Inside mhiepringaddelement, the read pointer rdoffset is updated before the buffer is written, potentially causing race conditions where the host sees an updated read...

5.5CVSS6.6AI score0.00065EPSS
Exploits0References7
OSV
OSV
added 2025/07/21 8:15 p.m.0 views

CVE-2025-7235

IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the...

7.8CVSS6.3AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/07/17 5:58 p.m.14 views

CVE-2025-53644 OpenCV contains a use after free buffer write due to an uninitialized pointer

OpenCV is an Open Source Computer Vision Library. Versions 4.10.0 and 4.11.0 have an uninitialized pointer variable on stack that may lead to arbitrary heap buffer write when reading crafted JPEG images. Version 4.12.0 fixes the vulnerability...

7.5CVSS6.5AI score0.0023EPSS
Exploits1References4
CVE
CVE
added 2025/07/17 5:58 p.m.32 views

CVE-2025-53644

CVE-2025-53644 affects OpenCV (Open Source Computer Vision Library). Versions 4.10.0 and 4.11.0 contain an uninitialized pointer on the stack that may cause arbitrary heap buffer writes when reading crafted JPEG images. Version 4.12.0 includes the fix. Practical impact is high, involving potentia...

9.8CVSS6.5AI score0.0023EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2025/07/17 5:58 p.m.8 views

CVE-2025-53644 OpenCV contains a use after free buffer write due to an uninitialized pointer

OpenCV is an Open Source Computer Vision Library. Versions 4.10.0 and 4.11.0 have an uninitialized pointer variable on stack that may lead to arbitrary heap buffer write when reading crafted JPEG images. Version 4.12.0 fixes the vulnerability...

7.5CVSS0.0023EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2025/07/17 12:0 a.m.2 views

PT-2025-29939 · Opencv · Opencv

Name of the Vulnerable Software and Affected Versions: OpenCV versions prior to 4.12.0 Description: OpenCV, an Open Source Computer Vision Library, contains an issue where an uninitialized pointer variable on the stack can lead to an arbitrary heap buffer write when processing crafted JPEG images...

7.5CVSS6.7AI score0.0023EPSS
Exploits1References14
CNNVD
CNNVD
added 2025/07/17 12:0 a.m.3 views

OpenCV 安全漏洞

OpenCV is an open source, cross-platform, lightweight computer vision library from OpenCV Open Source. A security vulnerability exists in OpenCV versions prior to 4.12.0, which stems from an uninitialized pointer variable that could result in an arbitrary heap buffer write...

9.8CVSS6.7AI score0.0023EPSS
Exploits1References4
Rows per page
Query Builder