SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Jan-2025 Release 1, which originates from an out-of-bounds write issue contained in the...

SUSE-SU-2025:20011-1 Security update for qemu

This update for qemu fixes the following issues: - Update to version 8.2.5: target/loongarch: fix a wrong print in cpu dump ui/sdl2: Allow host to power down screen target/i386: fix SSE and SSE2 feature check target/i386: fix xsave.flat from kvm-unit-tests disas/riscv: Decode all of the pmpcfg an...

USN-7157-3 php7.0 vulnerabilities

USN-7157-1 fixed vulnerabilities in PHP versions 7.4, 8.1, and 8.3. This update provides the corresponding updates for PHP version 7.0. Original advisory details: It was discovered that PHP incorrectly handled certain inputs when processed with convert.quoted-printable decode filters. An attacker...

Security Bulletin: IBM DataPower Operator vulnerable to DoS due to use of Go (CVE-2024-34155, CVE-2024-34156)

Summary The affected calls are used by DataPower Operator for processing messages exchanged with Kubernetes and IBM DataPower Gateway. Vulnerability Details CVEID:CVE-2024-34156 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by a stack exhaustion in Decoder.Decode. By sending...

graphicsmagick:coder_TIFF_fuzzer: Use-of-uninitialized-value in jbg_newlen

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5904879758934016 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderTIFFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

PT-2025-2368 · Linux Foundation · Magma

Name of the Vulnerable Software and Affected Versions: Linux Foundation Magma versions = 1.8.0 Description: A buffer overflow was discovered in the decode protocol configuration options function at /3gpp/3gpp 24.008 sm ies.c. This issue allows attackers to cause a Denial of Service DoS via a...

PT-2025-2374 · Linux Foundation · Magma

Name of the Vulnerable Software and Affected Versions: Linux Foundation Magma versions = 1.8.0 Description: A buffer overflow was discovered in the decode esm message container function at /nas/ies/EsmMessageContainer.cpp. This issue allows attackers to cause a Denial of Service DoS via a crafted...

PT-2025-2375

Name of the Vulnerable Software and Affected Versions: Magma versions 1.8.0 and earlier Description: A reachable assertion in the decode access point name ie function allows attackers to cause a Denial of Service DoS via a crafted NAS packet. Recommendations: For Magma versions 1.8.0 and earlier,...

PT-2025-2371

Name of the Vulnerable Software and Affected Versions: Magma versions 1.8.0 and earlier Description: A reachable assertion in the decode linked ti ie function allows attackers to cause a Denial of Service DoS via a crafted NAS packet. Recommendations: For Magma versions 1.8.0 and earlier, update ...

PT-2025-2373

Name of the Vulnerable Software and Affected Versions: Linux Foundation Magma versions = 1.8.0 Description: A stack overflow was discovered in the decode protocol configuration options function at /3gpp/3gpp 24.008 sm ies.c. This issue allows attackers to cause a Denial of Service DoS via a craft...

PT-2025-2372

Name of the Vulnerable Software and Affected Versions: Magma versions 1.8.0 and earlier Description: A type confusion in the nas message decode function allows attackers to execute arbitrary code or cause a Denial of Service DoS via a crafted NAS packet. This issue can lead to persistent denial o...

PT-2025-2367

Name of the Vulnerable Software and Affected Versions: Linux Foundation Magma versions = 1.8.0 Description: A buffer overflow was discovered in the decode access point name ie function at /3gpp/3gpp 24.008 sm ies.c. This issue allows attackers to cause a Denial of Service DoS via a crafted NAS...

Open5GS 安全漏洞

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A security vulnerability exists in the Open5GS oainas5gmmdecode function, which can be exploited by an attacker to trigger a denial of service DoS via a crafted NGAP packe...

PT-2025-2370

Name of the Vulnerable Software and Affected Versions: Linux Foundation Magma versions = 1.8.0 Description: A buffer overflow was discovered in the decode traffic flow template packet filter function at /3gpp/3gpp 24.008 sm ies.c. This issue allows attackers to cause a Denial of Service DoS via a...

PT-2025-2369

Name of the Vulnerable Software and Affected Versions: Linux Foundation Magma versions = 1.8.0 Description: A buffer overflow was discovered in the decode pdn address function at /nas/ies/PdnAddress.cpp, allowing attackers to cause a Denial of Service DoS via a crafted NAS packet. Recommendations...

CVE-2025-23039 Cross Site Scripting on URL decode Tooltip in Caido

Caido is a web security auditing toolkit. A Cross-Site Scripting XSS vulnerability was identified in Caido v0.45.0 due to improper sanitization in the URL decoding tooltip of HTTP request and response editors. This issue could allow an attacker to execute arbitrary scripts, potentially leading to...

OESA-2025-1054 podman security update

Podman manages the entire container ecosystem which includes pods, containers, container images, and container volumes using the libpod library. Security Fixes: Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of...

OESA-2025-1052 podman security update

Podman manages the entire container ecosystem which includes pods, containers, container images, and container volumes using the libpod library. Security Fixes: Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of...

PT-2025-5655 · Opencv · Opencv

Name of the Vulnerable Software and Affected Versions: OpenCV affected versions not specified Description: The issue is related to a heap buffer overflow read in the PngDecoder of OpenCV. The crash occurs in the cv::PngDecoder::readHeader function, which is called by cv::imdecode and cv::imdecode...

open62541:fuzz_json_decode: Negative-size-param in removeFieldFromEncoding

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=6046017237090304 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzjsondecode Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash...