1945 matches found
PT-2025-44145
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the f2fs filesystem within the Linux kernel that could lead to an overflow during a left shift operation. The issue is addressed by casting the type of folio-index from...
chromium -- multiple security fixes
Chrome Releases reports: This update includes 12 security fixes: 414760982 Medium CVE-2025-8576: Use after free in Extensions. Reported by asnine on 2025-04-30 384050903 Medium CVE-2025-8577: Inappropriate implementation in Picture In Picture. Reported by Umar Farooq on 2024-12-14 423387026 Mediu...
CVE-2025-7891
A vulnerability was found in InstantBits Web Video Cast App up to 5.12.4 on Android. It has been rated as problematic. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.instantbits.cast.webvideo. The manipulation leads to improper export of...
CVE-2025-7891
A vulnerability was found in InstantBits Web Video Cast App up to 5.12.4 on Android. It has been rated as problematic. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.instantbits.cast.webvideo. The manipulation leads to improper export of...
CVE-2025-7891
A vulnerability was found in InstantBits Web Video Cast App up to 5.12.4 on Android. It has been rated as problematic. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.instantbits.cast.webvideo. The manipulation leads to improper export of...
CVE-2025-7891 InstantBits Web Video Cast App com.instantbits.cast.webvideo AndroidManifest.xml improper export of android application components
A vulnerability was found in InstantBits Web Video Cast App up to 5.12.4 on Android. It has been rated as problematic. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.instantbits.cast.webvideo. The manipulation leads to improper export of...
CVE-2025-7891
InstantBits Web Video Cast App for Android (versions up to 5.12.4) contains a vulnerability in the AndroidManifest.xml file of the com.instantbits.cast.webvideo component that improperly exports application components. The issue is locally exploitable and has a publicly disclosed exploit. Multipl...
CVE-2025-7891 InstantBits Web Video Cast App com.instantbits.cast.webvideo AndroidManifest.xml improper export of android application components
A vulnerability was found in InstantBits Web Video Cast App up to 5.12.4 on Android. It has been rated as problematic. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.instantbits.cast.webvideo. The manipulation leads to improper export of...
PT-2025-30194 · Instantbits · Instantbits Web Video Cast App
Name of the Vulnerable Software and Affected Versions: InstantBits Web Video Cast App versions up to 5.12.4 Description: A vulnerability exists in the InstantBits Web Video Cast App for Android, related to the improper export of android application components through manipulation of the...
InstantBits Web Video Cast App 安全漏洞
InstantBits Web Video Cast App is a cross-platform casting app from US-based InstantBits. A security vulnerability exists in InstantBits Web Video Cast App version 5.12.4 and earlier, which stems from improper export of the AndroidManifest.xml file component com.instantbits.cast.webvideo...
CVE-2025-7891: Improper Export of Android Application Components
A vulnerability was found in InstantBits Web Video Cast App up to 5.12.4 on Android. It has been rated as problematic. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.instantbits.cast.webvideo. The manipulation leads to improper export of...
PT-2025-28948 · Ruckus +1 · Smartzone +2
Name of the Vulnerable Software and Affected Versions: Ruckus SmartZone versions prior to 6.1.2p3 Refresh Build Description: The software allows authentication bypass via a valid API key and crafted HTTP headers. This issue affects enterprise wireless networks. Recommendations: Update to version...
SUSE CVE-2019-15296
An issue was discovered in Freeware Advanced Audio Decoder 2 FAAD2 2.8.8. The faadresetbits function in libfaad/bits.c is affected by a buffer overflow vulnerability. The number of bits to be read is determined by ld-buffersize - words4, cast to uint32. If ld-buffersize - words4 is negative, a...
kernel: dlm: fix plock invalid read
In the Linux kernel, the following vulnerability has been resolved: dlm: fix plock invalid read This patch fixes an invalid read showed by KASAN. A unlock will allocate a "struct plockop" and a followed sendop will append it to a global sendlist data structure. In some cases a followed devread...
OSV-2025-486 Bad-cast to cv::PngDecoder from invalid vptr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=426783958 Crash type: Bad-cast Crash state: Bad-cast to cv::PngDecoder from invalid vptr cv::PngDecoder::readData cv::imdecode...
PT-2025-37380
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=426783958 Crash type: Bad-cast Crash state: Bad-cast to cv::PngDecoder from invalid vptr cv::PngDecoder::readData cv::imdecode...
opencv:imdecode_fuzzer: Bad-cast to cv::PngDecoder from invalid vptr in cv::PngDecoder::readData
Project: https://github.com/opencv/opencv.git Detailed Report: https://oss-fuzz.com/testcase?key=6008590106427392 Project: opencv Fuzzing Engine: libFuzzer Fuzz Target: imdecodefuzzer Job Type: libfuzzerubsanopencv Platform Id: linux Crash Type: Bad-cast Crash Address: 0x5b0893119561 Crash State:...
OESA-2025-1596 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-pci: Fix possible memory leak caused by missing pcidevput pcigetdevice will increase the reference count for the returned pcidev. We need to use...
arrow:parquet-arrow-fuzz: Bad-cast to typename shared_ptr<TypedStatistics<PhysicalType<parquet::Type::DOUBLE>>>::element_type' (aka 'parquet::TypedStatistics<parquet::PhysicalType<parquet::Type::DOUBLE>>') from parquet::(anonymous namespace)::TypedStatisticsImpl<parquet::PhysicalType<(parquet::Type::type)2>> in std::__1::shared_ptr<parquet::TypedStatistics<parquet::PhysicalType<
Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5638988460785664 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: parquet-arrow-fuzz Job Type: libfuzzerubsanarrow Platform Id: linux Crash Type: Bad-cast Crash Address: 0x56c0f7c9db98 Crash State...
CVE-2024-29206
An Improper Access Control could allow a malicious actor authenticated in the API to enable Android Debug Bridge ADB and make unsupported changes to the system. Affected Products: UniFi Connect EV Station Version 1.1.18 and earlier UniFi Connect EV Station Pro Version 1.1.18 and earlier UniFi...