CVE-2025-27037

CVE-2025-27037 affects Qualcomm chipsets due to a memory corruption issue in the camera subsystem. The root cause is described as memory corruption occurring while processing the config_dev IOCTL when the camera kernel driver drops its references to CPU buffers. Multiple sources consolidate this ...

PT-2025-39275

Name of the Vulnerable Software and Affected Versions versions prior to 2025 Description A memory corruption issue exists when processing a config dev IOCTL within the camera kernel driver. This occurs when the driver releases its reference to CPU buffers. The issue could potentially allow for...

SUSE CVE-2025-39870

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix double free in idxdsetupwqs The clean up in idxdsetupwqs has had a couple bugs because the error handling is a bit subtle. It's simpler to just re-write it in a cleaner way. The issues here are: 1 If...

TOTOLINK A3600R cstecgi.cgi file setTelnetCfg function command injection vulnerability

TOTOLINK A3600R is a 6-antenna 1200M wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3600R suffers from a command injection vulnerability that originates from improper handling of the telnetenabled parameter in the setTelnetCfg function of the /cgi-bin/cstecgi.cgi file. An...

JUNG Smart Visu Server 安全漏洞

JUNG Smart Visu Server is a Smart Visu Server from JUNG. A security vulnerability exists in JUNG Smart Visu Server versions 1.0.804, 1.0.830, 1.0.832, which stems from the fact that a KNX group address can be used with a user-defined password. An attacker exploiting this vulnerability could...

Out-of-bounds

The 1 fwcfgwrite and 2 fwcfgread functions in hw/nvram/fwcfg.c in QEMU before 2.4, when built with the Firmware Configuration device emulation support, allow guest OS users with the CAPSYSRAWIO privilege to cause a denial of service out-of-bounds read or write access and process crash or possibly...

Ubuntu 14.04 LTS : QEMU vulnerabilities (USN-2891-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2891-1 advisory. Qinghao Tang discovered that QEMU incorrectly handled PCI MSI-X support. An attacker inside the guest could use this issue to cause QEMU to crash,...