PT-2025-32182 · Unknown +1 · Go/Filesystems +1

Name of the Vulnerable Software and Affected Versions: go/filesystems affected versions not specified Description: The filepath.Walk and filepath.WalkDir functions are documented as not following symbolic links. However, both functions are susceptible to a time-of-check to time-of-use TOCTOU race...

PT-2025-32125 · Qualcomm · Snapdragon

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: An information disclosure issue exists while reading data from an image using specified offset and size parameters. Recommendations: At the moment, there is no information about a newer version tha...

PT-2025-32131 · Realtek · Realtek Wi-Fi

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: A transient Denial-of-Service DoS condition may occur when processing a frame containing a malformed shared-key descriptor. Recommendations: At the moment, there is no information about a newer...

PT-2025-32142 · Shopware · Shopware 6.6.10.4

Name of the Vulnerable Software and Affected Versions: Shopware version 6.6.10.4 Description: A race condition vulnerability exists in Shopware’s voucher system. This allows attackers to bypass intended voucher restrictions and exceed usage limitations. Recommendations: At the moment, there is no...

PT-2025-32021 · Huawei · Harmonyos

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: An input verification issue exists in the home screen module. Successful exploitation may affect availability. Recommendations: At the moment, there is no information about a newer version that...

PT-2025-32123 · Ioctl · Ioctl

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: A memory corruption issue exists when the IOCTL interface is called to map and unmap buffers at the same time. Recommendations: At the moment, there is no information about a newer version that...

PT-2025-32124 · Cdm · Cdm

Name of the Vulnerable Software and Affected Versions: Affected versions not specified Description: A memory corruption issue exists when programming registers through a virtual CDM. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2025-32030 · Unknown · Devicemanager Module

Name of the Vulnerable Software and Affected Versions: devicemanager module affected versions not specified Description: The devicemanager module contains an out-of-bounds read issue. Successful exploitation of this issue may affect availability. Recommendations: At the moment, there is no...

PT-2025-32066 · Unknown · Multimodalinput

Name of the Vulnerable Software and Affected Versions: multimodalinput module affected versions not specified Description: An unexpected injection event vulnerability exists within the multimodalinput module. Successful exploitation of this issue may affect system availability. Recommendations: A...

PT-2025-32143 · Elgato · Elgato Key Lights

Name of the Vulnerable Software and Affected Versions: Elgato Key Lights and related light products affected versions not specified Description: A Cross-Site Request Forgery CSRF in Elgato's Key Lights and related light products allows an attacker to host a malicious webpage that remotely control...

PT-2025-32175 · Csv File · Csv File

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: The software lacks TLS validation when downloading a CSV file containing IP-to-country mappings. This file is used solely for displaying country flags in logs. Recommendations: At the moment, there...

PT-2025-32011 · Unknown · Virtualization File Module

Name of the Vulnerable Software and Affected Versions: virtualization file module affected versions not specified Description: A path traversal vulnerability exists in the virtualization file module. Successful exploitation of this issue may affect the confidentiality of the module...

PT-2025-32133 · Microsoft · Directdraw

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: A memory corruption issue exists while processing a DirectDraw Interface DDI call with an invalid buffer. Recommendations: At the moment, there is no information about a newer version that contains...

PT-2025-32126 · Mbn File · Mbn File

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: An information disclosure issue exists while processing the hash segment in an MBN file. Recommendations: At the moment, there is no information about a newer...

PT-2025-32083 · Parcel · Parcel

Name of the Vulnerable Software and Affected Versions: Parcel affected versions not specified Description: A ParcelMismatch vulnerability exists in attribute deserialization. Successful exploitation of this issue may cause exceptions in the display of the playback control screen. Recommendations:...

PT-2025-32023 · Huawei · Arkui

Name of the Vulnerable Software and Affected Versions: ArkUI framework affected versions not specified Description: The ArkUI framework contains an out-of-bounds array access issue. Successful exploitation of this issue may affect availability. Recommendations: At the moment, there is no...

PT-2025-32127 · Ese · Ese

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: An information disclosure issue exists due to the logging of eSE debug messages during log capture. Recommendations: At the moment, there is no information about a newer version that contains a fix...

PT-2025-32129 · A2Dp · A2Dp

Name of the Vulnerable Software and Affected Versions: versions prior to 2025-21474 Description: A memory corruption issue exists while processing commands from the A2dp sink command queue. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2025-32058 · Kenwood · Kenwood Dmx958Xr

Name of the Vulnerable Software and Affected Versions: Kenwood DMX958XR affected versions not specified Description: This issue allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices without authentication. The flaw resides within the...

PT-2025-32042 · Kenwood · Kenwood Dmx958Xr

Name of the Vulnerable Software and Affected Versions: Kenwood DMX958XR affected versions not specified Description: This issue allows physically present attackers to execute arbitrary code on affected Kenwood DMX958XR devices without authentication. The flaw resides in the firmware update proces...