Lucene search
+L

465 matches found

SUSE CVE
SUSE CVE
•added 2025/09/11 11:23 p.m.•14 views

SUSE CVE-2025-39777

In the Linux kernel, the following vulnerability has been resolved: crypto: acomp - Fix CFI failure due to type punning To avoid a crash when control flow integrity is enabled, make the workspace "stream" free function use a consistent type, and call it through a function pointer that has that sa...

5.5CVSS6.5AI score0.0013EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2025/09/11 5:15 p.m.•10 views

DEBIAN-CVE-2025-39777

In the Linux kernel, the following vulnerability has been resolved: crypto: acomp - Fix CFI failure due to type punning To avoid a crash when control flow integrity is enabled, make the workspace "stream" free function use a consistent type, and call it through a function pointer that has that sa...

5.5CVSS5.4AI score0.0013EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/11 5:15 p.m.•19 views

CVE-2025-39777

In the Linux kernel, the following vulnerability has been resolved: crypto: acomp - Fix CFI failure due to type punning To avoid a crash when control flow integrity is enabled, make the workspace "stream" free function use a consistent type, and call it through a function pointer that has that sa...

5.5CVSS0.0013EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2025/09/11 5:15 p.m.•22 views

UBUNTU-CVE-2025-39777

In the Linux kernel, the following vulnerability has been resolved: crypto: acomp - Fix CFI failure due to type punning To avoid a crash when control flow integrity is enabled, make the workspace "stream" free function use a consistent type, and call it through a function pointer that has that sa...

5.5CVSS5.7AI score0.0013EPSS
SaveExploits0References5
CVE
CVE
•added 2025/09/11 4:56 p.m.•42 views

CVE-2025-39777

The CVE-2025-39777 entry concerns the Linux kernel crypto: acomp component, where a control flow integrity (CFI) failure was caused by type punning. The issue could lead to a crash when CFG is enabled. The documented fix uses a consistent type for the workspace free function and ensures it is inv...

5.5CVSS6.1AI score0.0013EPSS
SaveExploits0References2Affected Software1
osv_cve
osv_cve
•added 2025/09/11 4:56 p.m.•21 views

CVE-2025-39777 crypto: acomp - Fix CFI failure due to type punning

In the Linux kernel, the following vulnerability has been resolved: crypto: acomp - Fix CFI failure due to type punning To avoid a crash when control flow integrity is enabled, make the workspace "stream" free function use a consistent type, and call it through a function pointer that has that sa...

6.2AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2025/09/11 4:56 p.m.•29 views

CVE-2025-39777 crypto: acomp - Fix CFI failure due to type punning

In the Linux kernel, the following vulnerability has been resolved: crypto: acomp - Fix CFI failure due to type punning To avoid a crash when control flow integrity is enabled, make the workspace "stream" free function use a consistent type, and call it through a function pointer that has that sa...

0.0013EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
•added 2025/09/04 2:40 a.m.•11 views

drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func

...

5.5CVSS7AI score0.00238EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/09/04 2:37 a.m.•15 views

drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func

...

5.5CVSS7AI score0.00238EPSS
SaveExploits0
GithubExploit
GithubExploit
•added 2025/09/03 3:27 p.m.•359 views

Exploit for Integer Overflow or Wraparound in Tesla Model_3_Firmware

CVE-2025-2082 – Function Pointer Overwrite PoV VCSEC-style...

7.5CVSS7.9AI score0.00383EPSS
SaveExploits2
GithubExploit
GithubExploit
•added 2025/08/31 6:17 p.m.•211 views

Exploit for CVE-2025-52413

CVE-2025-52413 — Particle Device OS BLE Buffer Overflow Dis...

8.3AI score
SaveExploits1
Cvelist
Cvelist
•added 2025/08/13 8:33 p.m.•33 views

CVE-2012-10055 ComSndFTP v1.3.7 Beta USER Format String RCE

ComSndFTP FTP Server version 1.3.7 Beta contains a format string vulnerability in its handling of the USER command. By sending a specially crafted username containing format specifiers, a remote attacker can overwrite a hardcoded function pointer in memory specifically WSACleanup from Ws232.dll...

9.3CVSS0.02371EPSS
SaveExploits1References5
CVE
CVE
•added 2025/08/13 8:33 p.m.•51 views

CVE-2012-10055

CVE-2012-10055 affects ComSndFTP FTP Server v1.3.7 Beta. The vulnerability is a format-string flaw in the handling of the USER command that can overwrite a hardcoded function pointer (WSACleanup from Ws2_32.dll) in memory, enabling an attacker to redirect control flow and bypass DEP via a ROP cha...

9.3CVSS8.3AI score0.02371EPSS
SaveExploits1References5
osv_debian
osv_debian
•added 2025/07/03 9:15 a.m.•15 views

DEBIAN-CVE-2025-38112

In the Linux kernel, the following vulnerability has been resolved: net: Fix TOCTOU issue in skisreadable sk-skprot-sockisreadable is a valid function pointer when sk resides in a sockmap. After the last skpsockput which usually happens when socket is removed from sockmap, sk-skprot gets restored...

4.7CVSS5.3AI score0.00145EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/18 10:15 a.m.•22 views

CVE-2025-38025

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad7606: check for NULL before calling swmodeconfig Check that the swmodeconfig function pointer is not NULL before calling it. Not all buses define this callback, which resulted in a NULL pointer dereference...

5.5CVSS0.00159EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/05/27 12:00 a.m.•17 views

PT-2025-27716

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved. The issue occurs when the sound/soc/codecs/hdmi-codec.c calls the plugged cb with NULL as the callback function and codec dev...

7.8CVSS6.2AI score0.01341EPSS
SaveExploits9References568
RedhatCVE
RedhatCVE
•added 2025/05/23 4:23 a.m.•54 views

CVE-2023-43338

Cesanta mjs v2.20.0 was discovered to contain a function pointer hijacking vulnerability via the function mjsgetptr. This vulnerability allows attackers to execute arbitrary code via a crafted input...

9.8CVSS8.2AI score0.00987EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/05/22 9:27 p.m.•19 views

CVE-2021-30353

Improper validation of function pointer type with actual function signature can lead to assertion in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables...

7.5CVSS7.1AI score0.00568EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 12:07 p.m.•22 views

CVE-2012-4355

TCPIPSStory.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote attackers to execute arbitrary code via a port-46824 TCP packet with a crafted negative integer after the opcode, triggering incorrect function-pointer processing that can lead to ...

9.3CVSS8.2AI score0.08186EPSS
SaveExploits3References1
RedhatCVE
RedhatCVE
•added 2025/05/22 2:13 a.m.•32 views

CVE-2012-4354

TCPIPSStory.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a port-46824 TCP packet with a crafted positive integer after the opcode, triggering incorrect function-pointer processing that can lead to ...

9.3CVSS8AI score0.08186EPSS
SaveExploits2References1
Rows per page
Query Builder