1583 matches found
MAL-2025-44089 Malicious code in echo-whiskey-cherry-cmnzr (npm)
The package echo-whiskey-cherry-cmnzr was found to contain malicious code...
AZL-66464 CVE-2025-38585 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: staging: media: atomisp: Fix stack buffer overflow in gmingetvarint When gmingetconfigvar calls efi.getvariable and the EFI variable is larger than the expected buffer size, two behaviors combine to create a stack buffer overflow...
CVE-2025-38585
In the Linux kernel, the following vulnerability has been resolved: staging: media: atomisp: Fix stack buffer overflow in gmingetvarint When gmingetconfigvar calls efi.getvariable and the EFI variable is larger than the expected buffer size, two behaviors combine to create a stack buffer overflow...
CVE-2025-38585
In the Linux kernel, the following vulnerability has been resolved: staging: media: atomisp: Fix stack buffer overflow in gmingetvarint When gmingetconfigvar calls efi.getvariable and the EFI variable is larger than the expected buffer size, two behaviors combine to create a stack buffer overflow...
CVE-2025-38585 staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int()
In the Linux kernel, the following vulnerability has been resolved: staging: media: atomisp: Fix stack buffer overflow in gmingetvarint When gmingetconfigvar calls efi.getvariable and the EFI variable is larger than the expected buffer size, two behaviors combine to create a stack buffer overflow...
CVE-2025-38585
CVE-2025-38585 concerns Linux kernel staging/atomisp: a stack buffer overflow in gmin_get_var_int() triggered when gmin_get_config_var() calls EFI get_variable() with a larger-than-expected EFI variable. The bug stems from two issues: (1) gmin_get_config_var() returning a stale error code on EFI ...
CVE-2025-38585 staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int()
In the Linux kernel, the following vulnerability has been resolved: staging: media: atomisp: Fix stack buffer overflow in gmingetvarint When gmingetconfigvar calls efi.getvariable and the EFI variable is larger than the expected buffer size, two behaviors combine to create a stack buffer overflow...
CVE-2025-38511
In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Clear all LMTT pages on alloc Our LMEM buffer objects are not cleared by default on alloc and during VF provisioning we only setup LMTT PTEs for the actually provisioned LMEM range. But beyond that valid range we might...
CVE-2025-54382
Cherry Studio is a desktop client that supports for multiple LLM providers. In version 1.5.1, a remote code execution RCE vulnerability exists in the Cherry Studio platform when connecting to streamableHttp MCP servers. The issue arises from the server’s implicit trust in the oauth auth redirecti...
CVE-2025-54074
Cherry Studio is a desktop client that supports for multiple LLM providers. From versions 1.2.5 to 1.5.1, Cherry Studio is vulnerable to OS Command Injection during a connection with a malicious MCP server in HTTP Streamable mode. Attackers can setup a malicious MCP server with compatible OAuth...
Malicious code in cat-cherry-ehk154-project (npm)
The package cat-cherry-ehk154-project was found to contain malicious code...
Malicious code in cherry-pxx-project (npm)
The package cherry-pxx-project was found to contain malicious code...
Malicious code in cherry-sierra-mfwc (npm)
The package cherry-sierra-mfwc was found to contain malicious code...
Malicious code in cherry-mango-uniform-okaej (npm)
The package cherry-mango-uniform-okaej was found to contain malicious code...
Malicious code in project-nv40w-cherry (npm)
The package project-nv40w-cherry was found to contain malicious code...
Malicious code in cherry-honeydew-yankee-rlbya (npm)
The package cherry-honeydew-yankee-rlbya was found to contain malicious code...
Malicious code in nectarine-cherry-fffq (npm)
The package nectarine-cherry-fffq was found to contain malicious code...
Malicious code in cherry-s2l-project (npm)
The package cherry-s2l-project was found to contain malicious code...