CVE-2024-12576 GPU DDK - Untrusted app can crash firmware by forcing MCU access to non-aligned address

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger a crash of the FW running on the GPU freezing graphics output...

CVE-2025-27796

ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation, resulting in out-of-bounds access to heap memory in ReadBlob...

SUSE CVE-2024-58073

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: check dpuplaneatomicprintstate for valid sspp Similar to the rpipe sspp protect, add a check to protect the pipe state prints to avoid NULL ptr dereference for cases when the state is dumped without a corresponding...

SUSE CVE-2024-58074

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Grab inteldisplay from the encoder to avoid potential oopsies Grab the inteldisplay from 'encoder' rather than 'state' in the encoder hooks to avoid the massive footgun that is intelsanitizeencoder, which passes NULL as...

SUSE CVE-2024-58086

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Stop active perfmon if it is being destroyed If the active performance monitor v3d-activeperfmon is being destroyed, stop it first. Currently, the active perfmon is not stopped during destruction, leaving the...

Imagination GPU Driver 资源管理错误漏洞

Imagination GPU Driver is a graphics driver from Imagination. A security vulnerability exists in Imagination GPU Driver version 24.3 and earlier, which originates from an unprivileged user making improper GPU system calls that could result in kernel heap memory corruption...

Imagination GPU Driver 安全漏洞

Imagination GPU Driver is a graphics driver from Imagination. A security vulnerability exists in Imagination GPU Driver version 24.3 and earlier, which originates from an improper GPU system call made by an unprivileged user that could cause FW on the GPU to crash and freeze the graphics output...

UBUNTU-CVE-2024-58073

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: check dpuplaneatomicprintstate for valid sspp Similar to the rpipe sspp protect, add a check to protect the pipe state prints to avoid NULL ptr dereference for cases when the state is dumped without a corresponding...

Linux Distros Unpatched Vulnerability : CVE-2024-56551

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix usage slab after free +0.000021 BUG: KASAN: slab-use-after-free in...

The vulnerability of graphic drivers in microprogramming software for Intel processors lies in insufficient validation of input data, allowing attackers to trigger malfunctions in the system’s functionality.

The vulnerability of graphics drivers in microprogrammed software for Intel processors is related to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to cause malfunctions in the system’s functionality...

ImageSharp 缓冲区错误漏洞

ImageSharp is a new, full-featured, fully managed, cross-platform 2D graphics API open-sourced by Six Labors. A buffer error vulnerability exists in ImageSharp versions prior to v3.1.7 and v2.1.10, which stems from an out-of-bounds write vulnerability in the gif decoder that could result in a cra...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: tls: fix race between tx work scheduling and socket close Similarly to previous commit, the submitting thread recvmsg/sendmsg may exit as soon as the async crypto handler calls complete. Reorder scheduling the wor...

The vulnerability of graphic drivers in microprogramming software for Intel processors is related to deficiencies in access control, allowing attackers to enhance their privileges.

The vulnerability of graphics drivers in microprogrammed software for Intel processors is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Intel Graphics Performance Analyzer (Intel GPA) tool, related to deficiencies in access control, allows a malicious actor to trigger a service failure.

The vulnerability of the Intel Graphics Performance Analyzer Intel GPA lies in its lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to trigger a service failure...

PublicCMS 代码问题漏洞

PublicCMS is an open source content management system CMS written in Java language by PublicCMS China. A security vulnerability exists in PublicCMS version v4.0.202406, which originates from the /cms/CmsWebFileAdminController.java component that allows the upload of specially crafted svg or xml...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Bad drive in topology results kernel crash CVE-2023-53037 In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix issues in mpi3mrgetalltgtinfo CVE-2023-53320 In the Lin...

Linux Distros Unpatched Vulnerability : CVE-2024-50090

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix overflow in oa batch buffer By default xebbcreatejob appends a MIBATCHBUFFERE...

kernel: drm/vmwgfx: Unmap the surface before resetting it on a plane state

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Unmap the surface before resetting it on a plane state Switch to a new plane state requires unreferencing of all held surfaces. In the work required for mob cursors the mapped surfaces started being cached but the...

Linux Distros Unpatched Vulnerability : CVE-2024-28168

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Restriction of XML External Entity Reference 'XXE' vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: 2.9. Users are...

The vulnerability of the nvdisasm file in the NVIDIA CUDA Toolkit software for parallel computing on Graphics Processing Units allows a hacker to induce a service failure.

The vulnerability of the nvdisasm function in the NVIDIA CUDA Toolkit for parallel computing on Graphics Processing Units is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...