CVE-2025-38585 staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int()

In the Linux kernel, the following vulnerability has been resolved: staging: media: atomisp: Fix stack buffer overflow in gmingetvarint When gmingetconfigvar calls efi.getvariable and the EFI variable is larger than the expected buffer size, two behaviors combine to create a stack buffer overflow...

CVE-2025-38585 staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int()

In the Linux kernel, the following vulnerability has been resolved: staging: media: atomisp: Fix stack buffer overflow in gmingetvarint When gmingetconfigvar calls efi.getvariable and the EFI variable is larger than the expected buffer size, two behaviors combine to create a stack buffer overflow...

CVE-2025-38511

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Clear all LMTT pages on alloc Our LMEM buffer objects are not cleared by default on alloc and during VF provisioning we only setup LMTT PTEs for the actually provisioned LMEM range. But beyond that valid range we might...

CVE-2025-54074

Cherry Studio is a desktop client that supports for multiple LLM providers. From versions 1.2.5 to 1.5.1, Cherry Studio is vulnerable to OS Command Injection during a connection with a malicious MCP server in HTTP Streamable mode. Attackers can setup a malicious MCP server with compatible OAuth...

CVE-2025-54382

Cherry Studio is a desktop client that supports for multiple LLM providers. In version 1.5.1, a remote code execution RCE vulnerability exists in the Cherry Studio platform when connecting to streamableHttp MCP servers. The issue arises from the server’s implicit trust in the oauth auth redirecti...

Malicious code in tango-elderberry-cherry-seoxo (npm)

The package tango-elderberry-cherry-seoxo was found to contain malicious code...

Malicious code in cherry-strawberry-kozu (npm)

The package cherry-strawberry-kozu was found to contain malicious code...

Malicious code in bark-cherry-7id2 (npm)

The package bark-cherry-7id2 was found to contain malicious code...

Malicious code in wave-cherry-hxt428-project (npm)

The package wave-cherry-hxt428-project was found to contain malicious code...

Malicious code in whiskey-cherry-india-mdlfo (npm)

The package whiskey-cherry-india-mdlfo was found to contain malicious code...

Malicious code in cherry-3o3-project (npm)

The package cherry-3o3-project was found to contain malicious code...

Malicious code in project-7br4s-cherry (npm)

The package project-7br4s-cherry was found to contain malicious code...

Malicious code in papa-cherry-lima-dvfhe (npm)

The package papa-cherry-lima-dvfhe was found to contain malicious code...

Malicious code in oscar-cherry-zhvk (npm)

The package oscar-cherry-zhvk was found to contain malicious code...

Malicious code in xerus-cherry-ujt576-project (npm)

The package xerus-cherry-ujt576-project was found to contain malicious code...

Malicious code in glacier-cherry-ket500-project (npm)

The package glacier-cherry-ket500-project was found to contain malicious code...

Malicious code in project-7tg3v-cherry (npm)

The package project-7tg3v-cherry was found to contain malicious code...

Malicious code in project-ud5vw-cherry (npm)

The package project-ud5vw-cherry was found to contain malicious code...

Malicious code in uniform-cherry-ukvf (npm)

The package uniform-cherry-ukvf was found to contain malicious code...

Malicious code in cherry-yellow-zvf108-project (npm)

The package cherry-yellow-zvf108-project was found to contain malicious code...