739 matches found
Amazon Web Services Research and Engineering Studio 安全漏洞
Amazon Web Services Research and Engineering Studio is a cloud-based research and engineering environment of Amazon, Inc. There is a security vulnerability in the version of Amazon Web Services Research and Engineering Studio from March 2025 to December 1, 2025. This vulnerability stems from the...
PT-2026-44353
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read issue exists in the drm/amdgpu/vcn3 component when parsing decoding messages. This occurs because the system fails to properly check bounds against the end of the...
CVE-2026-0117
In mfcdecdqbuf of mfcdecv4l2.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
vlc:vlc-demux-dec-libfuzzer-ps: Heap-buffer-overflow in ParsePacket
Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=4917201114300416 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-dec-libfuzzer-ps Job Type: aflasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7556ea8e10b8...
The vulnerability of the `tx_macro_put_dec_enum()` function in the `sound/soc/codecs/lpass-tx-macro.c` module exposes the confidentiality, integrity, and accessibility of protected information within the Linux SoC kernel’s audio support mechanism. This vulnerability can be exploited by attackers to compromise these security aspects.
The vulnerability of the txmacroputdecenum function in the sound/soc/codecs/lpass-tx-macro.c module related to the Linux operating system’s SoC audio support is associated with out-of-buffer writing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...
EUVD-2026-10845
In mfcdecdqbuf of mfcdecv4l2.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-0117
In mfcdecdqbuf of mfcdecv4l2.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-0117
In mfcdecdqbuf of mfcdecv4l2.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
vlc:vlc-demux-dec-libfuzzer-mp4: Heap-buffer-overflow in dav1d_prepare_intra_edges_8bpc
Detailed Report: https://oss-fuzz.com/testcase?key=4508621294862336 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-dec-libfuzzer-mp4 Job Type: aflasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x7daa01f24780 Crash State: dav1dprepareintraedges8bpc...
The vulnerability of the dst_count_dec() function in the net/core/dst.c module, a support for network functions in the Linux kernel, allows a hacker to cause a service failure.
The vulnerability of the dstcountdec function in the net/core/dst.c module, part of the Linux kernel’s networking functions support, involves disclosing confidential information. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the mtk_vdec_worker() function in the drivers/media/platform/mediatek/vcodec/mtk_vcodec_dec_stateless.c driver for multimedia devices in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the mtkvdecworker function in the drivers/media/platform/mediatek/vcodec/mtkvcodecdecstateless.c driver for multimedia devices in the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a...
CVE-2026-23193
In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix use-after-free in iscsitdecsessionusagecount In iscsitdecsessionusagecount, the function calls complete while holding the sess-sessionusagelock. Similar to the connection usage count logic, the waiter...
The vulnerability of the function vb2ops_vdec_queue_setup(), located in the driver/media/platform/mediatek/vcodec/mtk_vcodec_dec.c file of the Linux kernel-based multimedia device drivers, allows a hacker to cause a service failure.
The vulnerability of the function vb2opsvdecqueuesetup in the driver/media/platform/mediatek/vcodec/mtkvcodecdec.c file of the Linux kernel-based multimedia device drivers is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service...
vlc:vlc-demux-dec-libfuzzer: Heap-buffer-overflow in libebml::ReadCodedSizeValue
Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=5849924137975808 Project: vlc Fuzzing Engine: libFuzzer Fuzz Target: vlc-demux-dec-libfuzzer Job Type: libfuzzerasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...
MiracleLinux 7 : jasper-1.900.1-33.0.2.el7.AXS7 (AXSA:2025-10995:02)
The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2025-10995:02 advisory. CVE-2025-8837: fix use-after-free vulnerability in jpcdecdump CVEs: CVE-2025-8837 A vulnerability was identified in JasPer up to 4.2.5. This affects the...
CVE-2025-58478
Out-of-bounds write in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory...
CVE-2025-58479: Out-of-bounds Read
Out-of-bounds read in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory...
CLSA-2025-1760026282 jasper: Fix of CVE-2025-8837
CVE-2025-8837: fix use-after-free vulnerability in jpcdecdump...