2645 matches found
EUVD-2012-2782
Malware in sbrugna...
EUVD-2006-0488
Malware in sbrugna...
EUVD-2020-18280
Malware in sbrugna...
EUVD-2019-5583
Malware in sbrugna...
EUVD-2019-2286
Malware in sbrugna...
EUVD-2007-4388
Malware in sbrugna...
EUVD-2020-26178
Malware in sbrugna...
SpyChain: Multi-Vector Supply Chain Attacks on Small Satellite Systems
Small satellites are integral to scientific, commercial, and defense missions, but reliance on commercial off-the-shelf COTS hardware broadens their attack surface. Although supply chain threats are well studied in other cyber-physical domains, their feasibility and stealth in space systems remai...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986960)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986960 advisory. In the Linux kernel, the following vulnerability has been resolved: sfc: fix TX channel offset when using legacy interrupts In legacy interrupt mode the...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986706)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986706 advisory. In the Linux kernel, the following vulnerability has been resolved: can: sja1000: fix use after free in emspcmciaaddcard If the last channel is not available then de...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986594)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986594 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: emu10k1: Fix out of bounds access in sndemu10k1pcmchannelalloc The voice allocator sometime...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414671)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414671 advisory. An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by-one error with a resultant integer underflow affecting out-of-bounds...
Unity Linux 20.1070a Security Update: gstreamer1-plugins-base (UTSA-2025-984682)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984682 advisory. GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been detected in the formatchannelmask function in...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-381692)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-381692 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Stop parsing channels bits when all channels are found. If a usb audio device se...
SUSE CVE-2025-59733
When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that all image channels have the same pixel type and size, and that if there are four channels, the first four are "B", "G", "R" and "A". The channel parsing code can be found in decodeheader. The...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the dwauncompress function when decoding OpenEXR files with DWAA or DWAB compression. An attacker can cause arbitrary memory writes by crafting files with mismatched channel types and counts, leading to pointer...
CVE-2025-59733
When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that all image channels have the same pixel type and size, and that if there are four channels, the first four are "B", "G", "R" and "A". The channel parsing code can be found in decodeheader. The...
UBUNTU-CVE-2025-59733
When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that all image channels have the same pixel type and size, and that if there are four channels, the first four are "B", "G", "R" and "A". The channel parsing code can be found in decodeheader. The...
CVE-2025-59733
FFmpeg/OpenEXR dwa_uncompress vulnerability (CVE-2025-59733): OpenEXR DWAA/DWAB decoding incorrectly assumes all channels share the same pixel type/size and that four channels map to B, G, R, A. If the main color channels are 4-byte and there are duplicate/unknown channels with 2-byte EXR_HALF, c...
CVE-2025-59733 Heap-buffer-overflow write in FFmpeg EXR dwa_uncompress
When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that all image channels have the same pixel type and size, and that if there are four channels, the first four are "B", "G", "R" and "A". The channel parsing code can be found in decodeheader. The...