6750 matches found
Qualcomm Chipsets security vulnerabilities
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a potential information disclosure when decoding network invalid header extension RTP packets...
CVE-2024-53019: Buffer Over-read
Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources...
Medium: libtasn1
Issue Overview: When an input DER data contains a large number of SEQUENCE OF or SET OF elements, decoding the data and searching a specific element in it take quadratic time to complete. This could be utilized for a remote DoS attack by presenting a crafted certificate to the network peer...
decoding (>=0.1.0, <=0.1.0.post1), genomeocean (>=0.1.0, <=0.5.0) +1 more potentially affected by CVE-2025-48887 via vllm (0.6.1.post2)
vllm PYPI version 0.6.1.post2 is affected by a known vulnerability. The following packages have a transitive dependency on vllm and may be impacted: - decoding =0.1.0, =0.1.0, =0.6.1rc1, =0.6.2.1 Source cves: CVE-2025-48887 Source advisory: OSV:PYSEC-2025-50...
acai-swarm (0.1.0), collabllm (>=0.0.3, <=0.0.8) +4 more potentially affected by CVE-2025-48887 via vllm (0.1.3)
vllm PYPI version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on vllm and may be impacted: - acai-swarm 0.1.0 - collabllm =0.0.3, =0.1.2, =0.2.8, =1.0.0, =2.7.3, =2.7.7 Source cves: CVE-2025-48887 Source advisory: OSV:PYSEC-2025-50...
Safety Alignment Can Be Not Superficial with Explicit Safety Signals
Recent studies on the safety alignment of large language models LLMs have revealed that existing approaches often operate superficially, leaving models vulnerable to various adversarial attacks. Despite their significance, these studies generally fail to offer actionable solutions beyond data...
RHEL 9 : gnutls (RHSA-2025:7076)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:7076 advisory. The gnutls packages provide the GNU Transport Layer Security GnuTLS library, which implements cryptographic algorithms and protocols such as SSL, TLS...
RHEL 9 : libtasn1 (RHSA-2025:8021)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:8021 advisory. A library that provides Abstract Syntax Notation One ASN.1, as specified by the X.680 ITU-T recommendation parsing and structures management, and...
VBI libzvbi Library Heap Buffer Overflow DoS
The vulnerability of the VBI libzvbi library’s capture and decoding functions is related to a numerical overflow in the vbistrndupiconv function. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...
CVE-2024-32035
ImageSharp is a 2D graphics API. A vulnerability discovered in the ImageSharp library, where the processing of specially crafted files can lead to excessive memory usage in image decoders. The vulnerability is triggered when ImageSharp attempts to process image files that are designed to exploit...
CVE-2024-54111
Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability...
CVE-2024-54105
Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability...
CVE-2024-54109
Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability...
CVE-2024-54108
Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability...
CVE-2023-28555
Transient DOS in Audio while remapping channel buffer in media codec decoding...
CVE-2023-1142
In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could use URL decoding to retrieve system files, credentials, and bypass authentication resulting in privilege escalation...
CVE-2022-29937
USU Oracle Optimization before 5.17.5 allows authenticated DataCollection users to achieve agent root access because some common OS commands are blocked but for example an OS command for base64 decoding is not blocked. NOTE: this is not an Oracle Corporation product...
CVE-2022-48512
Use After Free UAF vulnerability in the Vdecoderservice service. Successful exploitation of this vulnerability may cause the image decoding feature to perform abnormally...