CVE-2025-21587

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE:8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK:17.0.14, 21.0.6, 24; Oracle...

Mitsubishi Electric Europe B.V. smartRTU

RISK EVALUATION Successful exploitation of these vulnerabilities could allow a remote unauthenticated attacker to disclose, tamper with, destroy or delete information in the product, or cause a denial-of service condition on the product. 2. RECOMMENDED PRACTICES CISA recommends users take...

PT-2025-16447 · Oracle · Peoplesoft Enterprise Hcm Talent Acquisition Manager

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise HCM Talent Acquisition Manager version 9.2 Description: The issue allows a low-privileged attacker with network access via HTTP to compromise the system. Successful attacks require human interaction from a person other...

Linux net/ipv4/inet_connection_sock.c Buffer Overflow DoS

The vulnerability in the net/ipv4/inetconnectionsock.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Linux kernel PCI Slot Release Buffer Overflow DoS

The vulnerability of the pcislotrelease function in the drivers/pci/slot.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

AMD Display driver Kernel Module Heap Buffer Overflow DoS

The vulnerability of the cm3helpertranslatecurvetohwformat function in the AMD Display driver’s kernel module /drivers/gpu/drm/amd/display/dc/dcn30/dcn30cmcommon.c in the Linux kernel is related to the copying of buffers without checking their size a classic buffer overflow attack. Exploiting thi...

Linux cifs_strndup_from_utf16 Heap Buffer Overflow

The vulnerability of the cifsstrndupfromutf16 function in the /fs/smb/client/reparse.c module of the Linux kernel involves copying buffers without checking their size—a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

OCI Container Runtime Pathname Restriction

The vulnerability of the OCI Container Runtime crun environment is related to incorrect restrictions on the path name to the restricted-access directory. Exploiting this vulnerability can allow an attacker to influence the confidentiality and integrity of the protected information...

Linux kernel nft_unregister_flowtable_type Heap Buffer Overflow

The vulnerability of the nftunregisterflowtabletype function in the include/net/netfilter/nftables.h module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

btmtksdio_recv_event() Bluetooth Buffer Overflow

Vulnerability of the btmtksdiorecvevent function in the drivers/bluetooth/btmtksdio.c module – The Linux kernel’s Bluetooth device support driver is vulnerable due to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

Open vSwitch datapath.c function OVS vport cmd fill info

The vulnerability of the ovsvportcmdfillinfo function in the net/openvswitch/datapath.c module, which is part of the Open vSwitch router support in the Linux operating system, relates to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to...

rtw89_ops CancelHWScan() function Heap Buffer Overflow

Vulnerability of the rtw89ops CancelHWScan function in the drivers/net/wireless/realtek/rtw89/mac80211.c file – The drivers for Realtek wireless adapter support in Linux operating systems are vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability could allow ...

pps_gpio_probe() Function Heap Buffer Overflow DoS

Vulnerability of the pps gpioprobe function in the drivers/pps/clients/pps-gpio.c module – The Linux kernel’s PPS client driver has a vulnerability related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Linux SoC audio kernel Heap Buffer Overflow DoS

The vulnerability of the rt5645i2cremove function in the sound module/soc/codecs/rt5645.c file, which is part of the Linux operating system’s sound support for SoC cores, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise t...

TCM Driver Heap Buffer Overflow DoS

Vulnerability of the tcmutrygetblockpage function in the drivers/target/targetcoreuser.c module – The TCM driver for the Linux operating system is vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

Safari Extension Data Compromise

The vulnerability of Safari browser extensions on macOS, iOS, iPadOS, and VisionOS operating systems is related to improper storage of permissions. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

Linux kernel cgroup find_css_set Heap Buffer Overflow

The vulnerability of the findcssset function in the kernel/cgroup/cgroup.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Linux KVM TDP MMU Put Root Heap Buffer Overflow DoS

The vulnerability of the kvmtdpmmuputroot function in the arch/x86/kvm/mmu/tdpmmu.c module of the virtualization subsystem on the x86 kernel of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromis...

fsl-mc bus driver Heap Buffer Overflow DoS

Vulnerability of the fslmcbusremove function in the drivers/bus/fsl-mc/fsl-mc-bus.c module – The fsl-mc bus driver in Linux kernel is vulnerable due to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

lpfc_initial_flogi() Function Heap Buffer Overflow DoS

Vulnerability of the lpfcinitialflogi function in the drivers/scsi/lpfc/lpfcels.c module – The Linux SCSI device driver relies on the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...