11204 matches found
CVE-2025-56301
An issue was discovered in the Chipsalliance Rocket-Chip generator (commit f517abbf41abb65cea37421d3559f9739efd00a9 ) involving a flawed interaction between exception handling and MRET (Machine Return) mechanisms within the CSR (Control and Status Register) logic. When the MRET instruction is exe...
bnxt Component DoS
The vulnerability of the bnxt component in the Linux operating system’s kernel is related to improper cleaning during exception handling. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the btrfsdecref function in the Linux operating system’s kernel is related to improper handling of exception states. Exploiting this vulnerability can allow an attacker to cause a service failure...
javaparser:parseFuzzer: Security exception in com.github.javaparser.ast.expr.FieldAccessExpr.accept
Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=6366900683866112 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...
ENTEK DoS
The vulnerability of the SCADA system “ENTEK” is related to insufficient handling of exceptions. Exploiting this vulnerability allows a malicious actor to trigger a failure in the REST API service...
javaparser:parseFuzzer: Security exception in java.base/java.util.Optional.ifPresent
Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=6265313360674816 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...
CVE-2025-46711
Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger NULL pointer dereference kernel exceptions...
Uncaught Exception
Overview Affected versions of this package are vulnerable to Uncaught Exception. An attacker can cause an unexpected process crash by tricking a user into processing or loading malicious web content. Note: This is only exploitable if the affected system has specific packages installed and is bein...
Uncaught Exception
Overview Affected versions of this package are vulnerable to Uncaught Exception. An attacker can cause an unexpected process crash by tricking a user into processing or loading malicious web content. Note: This is only exploitable if the affected system has specific packages installed and is bein...
CVE-2025-46711: NULL Pointer Dereference
Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger NULL pointer dereference kernel exceptions...
Imagination Graphics DDK 安全漏洞
Imagination Graphics DDK is a suite of GPU driver tools from Imagination UK. A security vulnerability exists in Imagination Graphics DDK, which originates from the possibility that an unprivileged user may execute an improper GPU system call, triggering a reuse-after-release kernel exception...
CVE-2025-25177: Use After Free
Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions...
WPE WebKit XSS
The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...
OSV-2025-765 Security exception in com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=446027675 Crash type: Security exception Crash state: com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer java.base/java.lang.StringUTF16.newBytesFor java.base/java.lang.StringUTF16.toBytes...
PT-2025-39927
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=446027675 Crash type: Security exception Crash state: com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer java.base/java.lang.StringUTF16.newBytesFor java.base/java.lang.StringUTF16.toBytes...
docker-client:RegistryAuthFuzzer: Security exception in com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer
Project: https://github.com/spotify/docker-client.git Detailed Report: https://oss-fuzz.com/testcase?key=6338046170824704 Project: docker-client Fuzzing Engine: libFuzzer Fuzz Target: RegistryAuthFuzzer Job Type: libfuzzerasandocker-client Platform Id: linux Crash Type: Security exception Crash...
Linux arch/arm64/boot/dts/qcom/x1e80100.dtsi Service
The vulnerability in the arch/arm64/boot/dts/qcom/x1e80100.dtsi file of the Linux operating system’s kernel is related to insufficient checking of exception states. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2023-53438
CVE-2023-53438 : In the Linux kernel, the AMD Zen IF poison error path could misclassify context due to non-synchronous delivery of poison by the IF unit. The issue is mitigated by adding a quirk to always save the Code Segment (CS) register when poison is consumed from the IF unit banks, ensurin...
CVE-2025-10156
An Improper Handling of Exceptional Conditions vulnerability in the ZIP archive scanning component of mmaitre314 picklescan allows a remote attacker to bypass security scans. This is achieved by crafting a ZIP archive containing a file with a bad Cyclic Redundancy Check CRC, which causes the...