IBM Concert 加密问题漏洞

IBM Concert is a new tool from International Business Machines IBM Inc. that uses generative AI to help manage complex cloud-native applications. IBM Concert suffers from an encryption issue vulnerability that stems from a failure to properly enable HTTP Strict Transport Security, which could be...

CVE-2024-45548

Memory corruption while processing FIPS encryption or decryption validation functionality IOCTL call...

CVE-2024-45546

Memory corruption while processing FIPS encryption or decryption IOCTL call invoked from user-space...

CVE-2024-45547

Memory corruption while processing IOCTL call invoked from user-space to verify non extension FIPS encryption and decryption functionality...

CVE-2024-45548 Buffer Over-read in WLAN Windows Host

Memory corruption while processing FIPS encryption or decryption validation functionality IOCTL call...

CVE-2024-45548 Buffer Over-read in WLAN Windows Host

Memory corruption while processing FIPS encryption or decryption validation functionality IOCTL call...

CVE-2024-45548

CVE-2024-45548 relates to memory corruption in Qualcomm chipsets during the processing of the FIPS encryption/decryption validation IOCTL. The issue affects the IOCTL handling path used for FIPS validation and is described as memory corruption with high impact (confidentiality, integrity, and ava...

CVE-2024-45547 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host

Memory corruption while processing IOCTL call invoked from user-space to verify non extension FIPS encryption and decryption functionality...

CVE-2024-45547 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host

Memory corruption while processing IOCTL call invoked from user-space to verify non extension FIPS encryption and decryption functionality...

CVE-2024-45546

CVE-2024-45546 — Qualcomm chipset memory corruption occurs when processing FIPS encryption/decryption IOCTLs from user-space. Affected component is not explicitly enumerated beyond ‘Qualcomm chipsets’; root cause cited as memory corruption. Exploitation status is not provided in the supplied docu...

CVE-2024-45546 Buffer Over-read in WLAN Windows Host

Memory corruption while processing FIPS encryption or decryption IOCTL call invoked from user-space...

CVE-2024-45546 Buffer Over-read in WLAN Windows Host

Memory corruption while processing FIPS encryption or decryption IOCTL call invoked from user-space...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption when processing FIPS encryption or decryption verification function IOCTL calls...

PT-2025-2704 · Qualcomm · Snapdragon +9

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption during the processing of a specific IOCTL call related to FIPS encryption or decryption validation functionality...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption that occurs when processing IOCTL calls invoked from user space to validate non-extended FIPS encryption and decryption function...

libreswan: IKEv1 default AH/ESP responder can crash and restart

A flaw was found in Libreswan, where it was identified to contain an assertion failure issue in the computeprotokeymat function. The vulnerability can be exploited when an IKEv1 connection is loaded with an AH/ESP default setting when no esp= line is present in the connection. This flaw allows an...

PT-2025-30762

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The mod hdcp hdcp1 enable encryption function calls get first active display without checking its return value. If the display list is empty, get first active display returns a null...

PT-2026-4941

Name of the Vulnerable Software and Affected Versions OpenSSL version 3.0 OpenSSL version 3.3 OpenSSL version 3.4 OpenSSL version 3.5 OpenSSL version 3.6 Description Parsing CMS AuthEnvelopedData or EnvelopedData messages with maliciously crafted AEAD Authenticated Encryption with Associated Data...

PT-2026-2489

Name of the Vulnerable Software and Affected Versions Go affected versions not specified Description A flaw exists where downloading and building modules with malicious version strings can lead to local code execution. Systems utilizing Mercurial hg are susceptible to unexpected code execution wh...

PT-2026-2892

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the crypto subsystem, specifically related to the seqiv functionality. After the crypto aead encrypt function is called, the associated request...