Lucene search
+L

143 matches found

UbuntuCve
UbuntuCve
•added 2025/12/24 11:16 a.m.•11 views

CVE-2025-68729

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix MSDU buffer types handling in RX error path Currently, packets received on the REO exception ring from unassociated peers are of MSDU buffer type, while the driver expects link descriptor type packets. These...

6AI score0.00184EPSS
SaveExploits0References10
Cvelist
Cvelist
•added 2025/12/24 10:33 a.m.•43 views

CVE-2025-68729 wifi: ath12k: Fix MSDU buffer types handling in RX error path

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix MSDU buffer types handling in RX error path Currently, packets received on the REO exception ring from unassociated peers are of MSDU buffer type, while the driver expects link descriptor type packets. These...

0.00184EPSS
SaveExploits0References3
CVE
CVE
•added 2025/12/24 10:33 a.m.•47 views

CVE-2025-68729

The CVE-2025-68729 entry documents a Linux kernel issue in ath12k where MSDU buffer type packets received on the REO exception ring from unassociated peers were mis-parsed as link descriptor packets. The underlying cause was not freeing the skb, risking kernel crashes and buffer leaks. The provid...

6AI score0.00184EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/12/06 6:44 p.m.•23 views

CVE-2025-66624

BACnet Protocol Stack library provides a BACnet application layer, network layer and media access MAC layer communications services. Prior to 1.5.0.rc2, The npduisexpectedreply function in src/bacnet/npdu.c indexes requestpduoffset+2/3/5 and replypduoffset+1/2/4 without verifying that those APDU...

7.5CVSS6.8AI score0.00414EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/12/05 6:36 p.m.•8 views

CVE-2025-66624 BACnet-stack MS/TP reply matcher OOB read

BACnet Protocol Stack library provides a BACnet application layer, network layer and media access MAC layer communications services. Prior to 1.5.0.rc2, The npduisexpectedreply function in src/bacnet/npdu.c indexes requestpduoffset+2/3/5 and replypduoffset+1/2/4 without verifying that those APDU...

7.5CVSS5.9AI score0.00414EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/12/05 6:36 p.m.•15 views

EUVD-2025-201496

BACnet Protocol Stack library provides a BACnet application layer, network layer and media access MAC layer communications services. Prior to 1.5.0.rc2, The npduisexpectedreply function in src/bacnet/npdu.c indexes requestpduoffset+2/3/5 and replypduoffset+1/2/4 without verifying that those APDU...

7.5CVSS6.3AI score0.00414EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/12/05 12:00 a.m.•19 views

BACnet Stack 缓冲区错误漏洞

BACnet Stack is a BACnet open source protocol stack C library for embedded systems, Linux, MacOS, BSD and Windows. A buffer error vulnerability exists in BACnet Stack versions prior to 1.5.0.rc2, which stems from the npduisexpectedreply function failing to validate the presence of an APDU byte,...

7.5CVSS6.5AI score0.00414EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/20 6:30 p.m.•17 views

EUVD-2025-35067

An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 9110, W920, W930, Modem 5123, and Modem 5300. Incorrect handling of RLC AM PDUs leads to a Denial of Service...

7.5CVSS5.8AI score0.00595EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/10/20 12:00 a.m.•29 views

CVE-2025-26782

An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 9110, W920, W930, Modem 5123, and Modem 5300. Incorrect handling of RLC AM PDUs leads to a Denial of Service...

0.00595EPSS
SaveExploits0References2
CVE
CVE
•added 2025/10/20 12:00 a.m.•55 views

CVE-2025-26782

A Denial of Service (DoS) vulnerability exists in the L2 layer of several Samsung products due to incorrect handling of RLC AM PDUs . The flaw is caused by uncontrolled resource consumption within the Radio Link Control (RLC) protocol implementation. Affected components include Samsung Mobile Pro...

7.5CVSS7.2AI score0.00595EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•37 views

EUVD-2017-2254

Malware in sbrugna...

7.5CVSS7.6AI score0.01034EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2025-24861

Malicious code in bioql PyPI...

9.8CVSS6.3AI score0.00444EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2024-44384

Malicious code in bioql PyPI...

8.7CVSS7.7AI score0.0127EPSS
SaveExploits0References5
Microsoft CVE
Microsoft CVE
•added 2025/09/04 8:20 a.m.•8 views

nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()

...

9.8CVSS6.9AI score0.00495EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/09/04 8:04 a.m.•9 views

Potential iSCSI R2T PDU Vulnerability

...

3.5CVSS7AI score0.0024EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/08/16 12:00 a.m.•14 views

PT-2025-33555

Name of the Vulnerable Software and Affected Versions: linux affected versions not specified Description: The Linux kernel contains a flaw within its Wi-Fi functionality that could allow for attacks in mesh networks. This issue relates to A-MSDU Aggregated MAC Service Data Unit frames and can be...

8.8CVSS5.9AI score0.00227EPSS
SaveExploits0
OSV
OSV
•added 2025/08/14 4:15 p.m.•9 views

CVE-2025-50518

A use-after-free vulnerability exists in the coapdeletepdulkd function within coappdu.c of the libcoap library. This issue occurs due to improper handling of memory after the freeing of a PDU object, leading to potential memory corruption or the possibility of executing arbitrary code. NOTE: this...

9.8CVSS5.9AI score0.00444EPSS
SaveExploits0References4
NVD
NVD
•added 2025/08/14 4:15 p.m.•17 views

CVE-2025-50518

A use-after-free vulnerability exists in the coapdeletepdulkd function within coappdu.c of the libcoap library. This issue occurs due to improper handling of memory after the freeing of a PDU object, leading to potential memory corruption or the possibility of executing arbitrary code. NOTE: this...

9.8CVSS0.00444EPSS
SaveExploits0References4
OSV
OSV
•added 2025/08/14 4:15 p.m.•13 views

UBUNTU-CVE-2025-50518

A use-after-free vulnerability exists in the coapdeletepdulkd function within coappdu.c of the libcoap library. This issue occurs due to improper handling of memory after the freeing of a PDU object, leading to potential memory corruption or the possibility of executing arbitrary code. NOTE: this...

9.8CVSS5.9AI score0.00444EPSS
SaveExploits0References4
CVE
CVE
•added 2025/08/14 12:00 a.m.•52 views

CVE-2025-50518

A use-after-free vulnerability exists in the coap_delete_pdu_lkd function within coap_pdu.c of the libcoap library. This flaw is caused by improper memory handling after a Packet Data Unit (PDU) object is freed, which can lead to memory corruption or the execution of arbitrary code . While the su...

9.8CVSS6.5AI score0.00444EPSS
SaveExploits0References4
Rows per page
Query Builder