Lucene search
K

8 matches found

Cvelist
Cvelist
added 2025/12/09 1:29 a.m.27 views

CVE-2023-53840 usb: early: xhci-dbc: Fix a potential out-of-bound memory access

In the Linux kernel, the following vulnerability has been resolved: usb: early: xhci-dbc: Fix a potential out-of-bound memory access If xdbcbulkwrite fails, the values in 'buf' can be anything. So the string is not guaranteed to be NULL terminated when xdbctrace is called. Reserve an extra byte,...

0.00018EPSS
Exploits0References4
CVE
CVE
added 2025/12/09 1:29 a.m.13 views

CVE-2023-53840

The CVE-2023-53840 issue in the Linux kernel is fixed in the usb: early: xhci-dbc path. If xdbc_bulk_write() fails, the contents of buf could be non-deterministic and not NULL-terminated when xdbc_trace() runs, risking a potential out-of-bounds read. The patch reserves an extra byte in the static...

6AI score0.00018EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/11/18 8:21 p.m.1 views

CVE-2025-12119 Bulk write with options may read invalid memory

A mongocbulkoperationt may read invalid memory if large options are passed...

6.9CVSS6.5AI score0.00007EPSS
Exploits0References3
MongoDB
MongoDB
added 2025/11/18 8:21 p.m.9 views

Bulk write with options may read invalid memory

A mongocbulkoperationt may read invalid memory if large options are passed...

6.9CVSS6.9AI score0.00007EPSS
Exploits0References3Affected Software2
Cvelist
Cvelist
added 2025/11/18 8:21 p.m.8 views

CVE-2025-12119 Bulk write with options may read invalid memory

A mongocbulkoperationt may read invalid memory if large options are passed...

6.9CVSS0.00007EPSS
Exploits0References3
CVE
CVE
added 2025/11/18 8:21 p.m.11 views

CVE-2025-12119

CVE-2025-12119 affects the MongoDB C driver: when using a bulk operation, mongoc_bulk_operation_t may read invalid memory if large options are passed. Connected advisories confirm the issue in the mongo-c-driver and reference Debian’s fix in version 1.17.6-1+deb11u2 for bullseye. Other listings (...

6.9CVSS6.5AI score0.00007EPSS
Exploits0References4Affected Software2
Positive Technologies
Positive Technologies
added 2025/07/04 12:0 a.m.1 views

PT-2025-28004

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the media component, specifically the cxusb module. The issue occurred when the write operation of usb bulk msg in dvb...

7.7CVSS6.7AI score0.00092EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2023/01/01 12:0 a.m.1 views

PT-2025-49731

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to out-of-bound memory access within the xhci-dbc driver. Specifically, if the xdbc bulk write function fails, the buffer used by the xdbc trace...

7.8CVSS6.8AI score0.00249EPSS
Exploits2References896
Rows per page
Query Builder