PT-2025-43464

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description An issue exists in the validateAddingWindowLw function within DisplayPolicy.java that may allow an application to intercept drag-and-drop events because of a missing permission check. This...

NVIDIA GPU Display Driver 代码问题漏洞

NVIDIA GPU Display Driver is a display driver from NVIDIA Corporation. A code issue vulnerability exists in NVIDIA GPU Display Driver, which stems from the possibility of triggering a null pointer dereference that could lead to a denial of service...

EUVD-2023-60003

In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/cadence-ttc: Fix memory leak in ttctimerprobe Smatch reports: drivers/clocksource/timer-cadence-ttc.c:529 ttctimerprobe warn: 'timerbaseaddr' from ofiomap not released on lines: 498,508,516. timerbaseaddr may...

CVE-2023-53714

In the Linux kernel, the following vulnerability has been resolved: drm/stm: ltdc: fix late dereference check In ltdccrtcsetcrcsource, struct drmcrtc was dereferenced in a containerof before the pointer check. This could cause a kernel panic. Fix this smatch warning: drivers/gpu/drm/stm/ltdc.c:11...

Linux Distros Unpatched Vulnerability : CVE-2025-23330

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to trigger a null pointer dereference. A successful exploit of this...

Linux Distros Unpatched Vulnerability : CVE-2025-23345

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA Display Driver for Windows and Linux contains a vulnerability in a video decoder, where an attacker might cause an out-of-bounds read. A successful explo...

Linux Distros Unpatched Vulnerability : CVE-2025-23282

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to use a race condition to escalate privileges. A successful exploit of...

PT-2025-43115

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the DRM/STM subsystem, specifically in the ltdc driver. A late dereference check in the ltdc crtc set crc source function could lead to a kernel...

EUVD-2022-55037

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: clk-rcg2: Update logic to calculate D value for RCG The display pixel clock has a requirement on certain newer platforms to support M/N as 2/3 and the final D value calculated results in underflow errors. As the curren...

WordPress Dynamically Display Posts plugin SQL Injection Vulnerability

WordPress Dynamically Display Posts plugin is a WordPress plugin for creating a store locator page in your website that displays information about nearby stores via Google Maps. WordPress Dynamically Display Posts plugin suffers from a SQL injection vulnerability that stems from a lack of...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987520)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987520 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/imx: Fix memory leak in imxpdconnectorgetmodes Avoid leaking the display mode variable if...

PT-2025-51570

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the DRM/AMD display subsystem. Specifically, the dc-linksMAX LINKS array size was insufficient, leading to potential issues. Additionally, the hw...

NVIDIA Display Driver Code Issue Vulnerability

NVIDIA Display Driver is a graphics card driver from NVIDIA. A security vulnerability exists in NVIDIA Display Driver, which can be exploited by attackers to cause denial of service, elevation of privilege, code execution, and data manipulation...

SUSE CVE-2025-11679

Out-of-bounds Read in lwsupngemitnextline in warmcat libwebsockets allows, when the LWSWITHUPNG flag is enabled during compilation and the HTML display stack is used, to read past a heap allocated buffer possibly causing a crash, when the user visits an attacker controlled website that contains a...

EUVD-2025-35055

Out-of-bounds Write in unfilterscanline in warmcat libwebsockets allows, when the LWSWITHUPNG flag is enabled during compilation and the HTML display stack is used, to write past a heap allocated buffer possibly causing a crash, when the user visits an attacker controlled website that contains a...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the lwsupngdecode function when the WSWITHUPNG flag is enabled during compilation and the HTML display stack is used. An attacker can cause a crash or potentially execute arbitrary code by enticing a user to visi...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the lwsupngemitnextline function when the LWSWITHUPNG flag is enabled during compilation and the HTML display stack is used. An attacker can cause a crash or read past a heap-allocated buffer by enticing a user to...

CVE-2025-11679

Out-of-bounds Read in lwsupngemitnextline in warmcat libwebsockets allows, when the LWSWITHUPNG flag is enabled during compilation and the HTML display stack is used, to read past a heap allocated buffer possibly causing a crash, when the user visits an attacker controlled website that contains a...

CVE-2025-11680

Out-of-bounds Write in unfilterscanline in warmcat libwebsockets allows, when the LWSWITHUPNG flag is enabled during compilation and the HTML display stack is used, to write past a heap allocated buffer possibly causing a crash, when the user visits an attacker controlled website that contains a...

UBUNTU-CVE-2025-11679

Out-of-bounds Read in lwsupngemitnextline in warmcat libwebsockets allows, when the LWSWITHUPNG flag is enabled during compilation and the HTML display stack is used, to read past a heap allocated buffer possibly causing a crash, when the user visits an attacker controlled website that contains a...