PDF-XChange Editor Buffer Overflow

The vulnerability of PDF document viewing and editing software PDF-XChange Editor lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created XPS file...

DEBIAN-CVE-2025-21738

In the Linux kernel, the following vulnerability has been resolved: ata: libata-sff: Ensure that we cannot write outside the allocated buffer reveliofuzzing reported that a SCSIIOCTLSENDCOMMAND ioctl with outlen set to 0xd42, SCSI command set to ATA16 PASS-THROUGH, ATA command set to ATANOP, and...

Tenda AX3 Buffer Overflow Privilege Escalation

The vulnerability of the Tenda AX3 Wi-Fi router’s microprogramming software is related to the operation of the function that outputs data beyond the buffer in memory when processing the firewallEn parameter. Exploiting this vulnerability can allow a remote attacker to increase their privileges an...

Tenda AC8 Router DoS

The vulnerability of the getparentControllistInfo function in the Tenda AC8 router’s microprogramming software is related to the operation of writing data outside the buffer in memory when processing the urls parameter. Exploiting this vulnerability could allow a remote attacker to cause a servic...

Cisco IOS SNMP DoS

The vulnerability of the Simple Network Management Protocol SNMP implementation in Cisco IOS and Cisco IOS XE operating systems is related to the escape of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to trigger a service failure remotely...

s390/sclp Kernel DoS

The vulnerability of the s390/sclp components of the Linux operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

musl libc iconv Code Execution

The vulnerability of the iconv function in the musl libc library is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code when calling the function for converting text from EUC-KR to UTF-8...

SUSE CVE-2025-0685

A flaw was found in grub2. When reading data from a jfs filesystem, grub's jfs filesystem module uses user-controlled parameters from the filesystem geometry to determine the internal buffer size, however, it improperly checks for integer overflows. A maliciouly crafted filesystem may lead some o...

DSR Router Buffer Overflow

The vulnerability of D-Link DSR series router microprogramming software lies in the fact that the operation data is written outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Cisco IOS SNMP DoS

The vulnerability of SNMP protocol implementations in Cisco IOS and IOS XE operating systems stems from operations that go beyond buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted requests...

SceneKit Disclosure

The vulnerability of the SceneKit component in macOS, iOS, iPadOS, watchOS, tvOS, and visionOS relates to operations where data is written beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by security...

Google Chrome Microsoft Edge Script Execution DoS

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to operations that go beyond buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and cause service interruptions...

WLAN STA Driver Code Execution

The vulnerability of the WLAN STA Driver microprogramming software chip from MediaTek relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Linksys E8450 Sub_422eb8 Code Execution

The vulnerability of the sub422eb8 function in Linksys E8450 Wi-Fi routers’ microprogramming software is related to the copying of buffers without checking the size of the input data during the processing of the strncpy parameter. Exploiting this vulnerability allows an attacker to execute...

CVE-2024-28759

A crafted network packet may cause a buffer overrun in Wind River VxWorks 7 through 23.09...

CLSA-2025-1739352814 kernel: Fix of 13 CVEs

media: uvcvideo: Skip parsing frames of type UVCVSUNDEFINED in uvcparseformat CVE-2024-53104 - btrfs: fix information leak in btrfsioctllogicaltoino CVE-2024-35849 - net: afcan: do not leave a dangling sk pointer in cancreate CVE-2024-56603 - netfilter: xtables: fix LED ID check in ledtgcheck...

Linux IB/core Component DoS

The vulnerability of Linux operating system’s IB/core components is related to the execution of operations beyond the boundaries of memory buffers. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux SCSI Privilege Escalation

The vulnerability of the SCSI component in the Linux operating system is related to the operation of the process beyond the memory buffer boundaries. Exploiting this vulnerability can allow an attacker to gain elevated privileges...

macOS iPadOS Kernel Heap Buffer Overflow DoS

The vulnerability of the kauthcredprocupdate function in the macOS and iPadOS operating systems is related to synchronization errors when using a shared resource a “race condition”. This occurs when an operation goes beyond the buffer in memory. Exploiting this vulnerability can allow a remote...

AirPlay Code Execution

The vulnerability of the AirPlay implementation in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS stems from the operation of data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...