The vulnerability of the GEGL image processing library, related to the occurrence of operations outside the buffer boundaries in memory, allows an intruder to gain unauthorized access to protected information and cause a service failure.

The vulnerability of the GEGL image processing library relates to the occurrence of operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information and cause service failures...

The vulnerability of the _bfd_x86_elf_late_size_sections function in the bfd/elfxx-x86.c component of the GNU Binutils development environment allows a attacker to cause a service failure.

The vulnerability of the bfdx86elflatesizesections function in the bfd/elfxx-x86.c component of the GNU Binutils development environment is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failu...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows a perpetrator to gain unauthorized access to protected information and cause service failures.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type conversion errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and cause service failures through a specially created HTML page...

CVE-2025-8872

On affected platforms running Arista EOS with OSPFv3 configured, a specially crafted packet can cause the OSFPv3 process to have high CPU utilization which may result in the OSFPv3 process being restarted. This may cause disruption in the OSFPv3 routes on the switch. This issue was discovered...

EUVD-2025-203841

On affected platforms running Arista EOS with OSPFv3 configured, a specially crafted packet can cause the OSFPv3 process to have high CPU utilization which may result in the OSFPv3 process being restarted. This may cause disruption in the OSFPv3 routes on the switch. This issue was discovered...

CVE-2025-8872

On affected platforms running Arista EOS with OSPFv3 configured, a specially crafted packet can cause the OSFPv3 process to have high CPU utilization which may result in the OSFPv3 process being restarted. This may cause disruption in the OSFPv3 routes on the switch. This issue was discovered...

CVE-2025-8872 A specially crafted packet can cause the OSFPv3 process to have high CPU utilization which may result in the OSFPv3 process being restarted

On affected platforms running Arista EOS with OSPFv3 configured, a specially crafted packet can cause the OSFPv3 process to have high CPU utilization which may result in the OSFPv3 process being restarted. This may cause disruption in the OSFPv3 routes on the switch. This issue was discovered...

CVE-2025-8872

This CVE affects Arista EOS with OSPFv3 configured. A specially crafted IPv6 OSPFv3 packet can cause the ospfv3 process to have high CPU utilization, potentially restarting the process and disrupting OSPFv3 routes. The Arista advisory lists affected EOS trains: 4.34.x (4.34.1F and below), 4.33.x ...

EUVD-2025-203680

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Disable trampoline for kernel module function trace The current LoongArch BPF trampoline implementation is incompatible with tracing functions in kernel modules. This causes several severe and user-visible problem...

CVE-2025-68216 LoongArch: BPF: Disable trampoline for kernel module function trace

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Disable trampoline for kernel module function trace The current LoongArch BPF trampoline implementation is incompatible with tracing functions in kernel modules. This causes several severe and user-visible problem...

PT-2025-51781

On affected platforms running Arista EOS with OSPFv3 configured, a specially crafted packet can cause the OSFPv3 process to have high CPU utilization which may result in the OSFPv3 process being restarted. This may cause disruption in the OSFPv3 routes on the switch. This issue was discovered...

The vulnerability of the sb_min_blocksize() function in the fs/fat/inode.c module of the Linux kernel file system allows a attacker to increase privileges or cause service failures.

The vulnerability of the sbminblocksize function in the fs/fat/inode.c module of the Linux kernel file system is related to the lack of checking of the returned value. Exploiting this vulnerability can allow a remote attacker to increase privileges or cause service failures...

The vulnerabilities of the infostat.cgi and cstecgi.cgi scripts in the TOTOLINK A720R, LR1200GB, and NR1800X networking device software allow a malicious individual to cause service interruptions or execute arbitrary code.

The vulnerability of the infostat.cgi and cstecgi.cgi microprogramming devices of the TOTOLINK A720R, LR1200GB, and NR1800X networks devices is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

Security Advisory 0128

Security Advisory 0128 PDF Date: December 16, 2025 Revision | Date | Changes ---|---|--- 1.0 | December 16, 2025 | Initial release The CVE-ID tracking this issue: CVE-2025-8872 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 6.5 / 10 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N 7....

CVE-2025-8872: Uncontrolled Resource Consumption

On affected platforms running Arista EOS with OSPFv3 configured, a specially crafted packet can cause the OSFPv3 process to have high CPU utilization which may result in the OSFPv3 process being restarted. This may cause disruption in the OSFPv3 routes on the switch. This issue was discovered...

The vulnerability of the MySQL Server, the database management system optimizer, allows a hacker to cause a service failure.

The vulnerability of the MySQL Server database management system optimizer is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Performance Monitor component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a hacker to trigger a service failure.

The vulnerability of the Performance Monitor component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the erofs_fc_fill_super() function in the fs/erofs/super.c module of the EROFS Enhanced Read-Only File System library in the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the erofsfcfillsuper function in the fs/erofs/super.c module of the EROFS file system support for the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the cstecgi.cgi microprogramming software for TOTOLINK NR1800X and LR1200GB routers allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the cstecgi.cgi microprogramming software for TOTOLINK NR1800X and LR1200GB routers is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...

The vulnerability of the stm32 kernel component of the Linux operating system allows a hacker to gain access to confidential data and also cause a service failure.

The vulnerability of the stm32 kernel component of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to access confidential data and also cause service failures...