CVE-2025-5648

A vulnerability was found in Radare2 5.9.9. It has been classified as problematic. Affected is the function rconspalinit in the library /libr/cons/pal.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. An attack has to be approached locally. The complexity...

PT-2025-30689 · Git +1 · Tarantool

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The software suffers from a heap-buffer-overflow write issue. The crash state involves the functions mmcall, lj meta tget, and lj vmeta tgetv. Recommendations...

PT-2025-23766 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns an unauthenticated remote code execution in the Apache HTTP Server. No further details are provided about the estimated number of potentially affected devices ...

PT-2025-23767 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns unvalidated user input. No further details are provided about the nature of the issue, affected devices, or real-world incidents. Recommendations: At the momen...

PT-2025-23832 · Amazon · Freertos

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A buffer overflow issue has been identified, allowing out-of-bounds write when processing LLMNR or mDNS queries with very long DNS names. This issue affects systems using Buffer Allocation...

PT-2025-23765 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns a Cross-Site Request Forgery in the Apache HTTP Server. No information is provided about the estimated number of potentially affected devices worldwide or...

PT-2025-23764 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns unvalidated user input. No further details are provided about the nature of the issue, affected devices, or real-world incidents. Recommendations: At the momen...

PT-2025-29030

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contained a flaw in the seg6 module where the validation of nexthop addresses was insufficient. The kernel validated that the length of the provided nexthop address di...

PT-2025-23768 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns unvalidated user input. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issu...

PT-2025-23754 · Samsung · Libsecimaging.Camera.Samsung.So

Name of the Vulnerable Software and Affected Versions: libsecimaging.camera.samsung.so versions prior to SMR Jun-2025 Release 1 Description: The issue is an out-of-bounds write that allows local attackers to write out-of-bounds memory. This can be exploited by local attackers. Recommendations: Fo...

Security Bulletin: IBM Rational Developer for i is affected by an unspecified Java runtime encryption vulnerability (CVE-2025-21587).

Summary IBM Rational Developer for i is affected by an unspecified Java runtime encryption vulnerability. IBM Rational Developer for i has addressed the vulnerability with a fix as described in the remediation/fixes section. Vulnerability Details CVEID:CVE-2025-21587 DESCRIPTION: An unspecified...

PT-2025-23575 · Qualcomm · Snapdragon +4

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to memory corruption that occurs while handling a test pattern generator IOCTL command. Recommendations: At the moment, there is no information about a newer version tha...

PT-2025-23662 · Samsung · Samsung Mobile Processor Exynos

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor Exynos versions 1280, 1380, 1480, 2200, 2400 Description: An issue was discovered in Samsung Mobile Processor Exynos, where the absence of a NULL check leads to a Denial of Service. Recommendations: For Samsung Mobile...

PT-2025-23582 · Fastrpc · Fastrpc

Name of the Vulnerable Software and Affected Versions: FastRPC affected versions not specified Description: The issue is related to memory corruption that occurs while processing INIT and multimode invoke IOCTL calls on FastRPC. Recommendations: At the moment, there is no information about a newe...

PT-2025-23667 · Samsung · Exynos 1380

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor Exynos 1380 affected versions not specified Description: An issue was discovered in the Samsung Mobile Processor Exynos 1380, where the lack of a length check leads to out-of-bounds writes. Recommendations: At the...

PT-2025-23578 · Qualcomm · Snapdragon

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Information disclosure may occur while decoding the RTP packet with invalid header extension from network. Recommendations: At the moment, there is no information about a newer version that...

PT-2025-23572 · Qualcomm · Snapdragon +58

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Memory corruption may occur while processing voice call registration with a user. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2025-23569 · Unknown · Log Service

Name of the Vulnerable Software and Affected Versions: cplog service affected versions not specified Description: The issue is related to a possible system crash due to a null pointer dereference in the cplog service. This could lead to a local denial of service without requiring additional...

PT-2025-23686 · Unknown · Sante Dicom Viewer Pro

Name of the Vulnerable Software and Affected Versions: Sante DICOM Viewer Pro affected versions not specified Description: The issue is related to out-of-bounds write remote code execution. There is no information provided about the estimated number of potentially affected devices worldwide or...

PT-2025-23610

Name of the Vulnerable Software and Affected Versions python3.12 versions prior to 3.12.7-1ubuntu2.2 python3.13 versions prior to 3.13.0-1ubuntu0.3 Description Python incorrectly handles tar archive extraction when using the filtering option. Specifically, when TarFile.errorlevel is set to 0 duri...