12044 matches found
PostgreSQL 安全漏洞
PostgreSQL is a free object-relational database management system from the PostgreSQL organization. The system supports most of the SQL standards and provides many other features such as foreign keys, triggers, views, and more. A security vulnerability exists in PostgreSQL, which stems from a...
CLSA-2025-1746653770 libtasn1: Fix of CVE-2021-46848
CVE-2021-46848: fix ETYPEOK off-by-one array size check in asn1encodesimpleder...
CLSA-2025-1746653404 libtasn1: Fix of CVE-2021-46848
CVE-2021-46848: fix ETYPEOK off-by-one array size check in asn1encodesimpleder...
RLSA-2024:4720 Important: httpd:2.4 security update
The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: Encoding problem in modproxy CVE-2024-38473 httpd: Substitution encoding issue in modrewrite CVE-2024-38474 httpd: Improper escaping of output in modrewrite CVE-2024-38475...
postgresql:16 security update
An update is available for postgresql, postgres-decoderbufs, module.pgrepack, module.pgaudit, module.postgresql, pgaudit, pgrepack, module.postgres-decoderbufs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
RLSA-2025:1739 Important: postgresql:15 security update
PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation CVE-2025-1094 For more details about the security issues, including the impact, a CVSS score,...
RLSA-2025:1740 Important: postgresql:16 security update
PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation CVE-2025-1094 For more details about the security issues, including the impact, a CVSS score,...
CVE-2025-21470
Memory corruption while processing image encoding, when configuration is NULL in IOCTL parameter...
CVE-2025-21470
Memory corruption while processing image encoding, when configuration is NULL in IOCTL parameter...
CVE-2025-21469
Memory corruption while processing image encoding, when input buffer length is 0 in IOCTL call...
CVE-2025-21469
Memory corruption while processing image encoding, when input buffer length is 0 in IOCTL call...
CVE-2024-45567
Memory corruption while encoding JPEG format...
CVE-2024-45567
Memory corruption while encoding JPEG format...
CVE-2025-21470 Improper Access Control in Camera Driver
Memory corruption while processing image encoding, when configuration is NULL in IOCTL parameter...
CVE-2025-21470 Improper Access Control in Camera Driver
Memory corruption while processing image encoding, when configuration is NULL in IOCTL parameter...
CVE-2025-21470
CVE-2025-21470 concerns memory corruption in Qualcomm chipsets during image encoding when the IOCTL configuration is NULL, attributed to a camera driver issue. The vulnerability affects the image-encoding path (memory corruption via NULL config in IOCTL) and is rated high severity (CVSS: Local ac...
CVE-2025-21469 Improper Access Control in Camera Driver
Memory corruption while processing image encoding, when input buffer length is 0 in IOCTL call...
CVE-2025-21469
CVE-2025-21469 concerns memory corruption in Qualcomm chipsets’ camera driver during image encoding when the IOCTL input buffer length is 0. The issue is reported as a local, low-privilege condition with high impact to confidentiality, integrity and availability. Public details consistently cite ...
CVE-2024-45567 Use After Free in Camera Driver
Memory corruption while encoding JPEG format...
CVE-2024-45567
CVE-2024-45567 describes a memory corruption issue in Qualcomm camera driver related to JPEG encoding. The CVE is tied to Qualcomm chipsets and affects the JPEG encoding path, with root cause identified as memory corruption during the encoding process. Documented impact is high (CVSS 3.1: AV=L, A...