CVE-2025-20789

In GPU pdma, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS10117741; Issue ID: MSV-4538...

CVE-2025-20788

In GPU pdma, there is a possible memory corruption due to a missing permission check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS10117735; Issue ID: MSV-4539...

CVE-2025-63872

DeepSeek V3.2 has a Cross Site Scripting XSS vulnerability, which allows JavaScript execution through model-generated SVG content...

CVE-2025-50361

Buffer Overflow was found in SmallBASIC community SmallBASIC with SDL Before v1228, and commit sha:298a1d495355959db36451e90a0ac74bcc5593fe in the function main.cpp, which can lead to potential information leakage and crash...

GPUHammer: Rowhammer Attacks on GPU Memories are Practical

Revisions Revision Date| Description ---|--- 2025-12-03| Initial publication...

RHEL 8 : firefox (RHSA-2025:22363)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:22363 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

Sulu XSS Vulnerability (GHSA-255w-87rh-rg44)

Sulu is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:sulu:sulu"; if...

RockyLinux 9 : firefox (RLSA-2025:21280)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:21280 advisory. firefox: Mitigation bypass in the DOM: Security component CVE-2025-13018 firefox: Use-after-free in the Audio/Video component CVE-2025-13014 firefox:...

RHEL 9 : firefox (RHSA-2025:22374)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:22374 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

PT-2026-38944

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/v3d component where the max seg size is not set when using V3D rendering with CONFIG DMA API DEBUG enabled. This causes the kernel to default to a 64K segment...

AMD Direct Rendering Infrastructure DoS

Vulnerability of the buildunoptimizedpolicySettings function in the drivers/gpu/drm/amd/display/dc/dml2/dml2policy.c module – Drivers that support Direct Rendering Infrastructure DRI for AMD graphics cards in Linux operating systems are vulnerable to permission handling errors. Exploiting this...

AMD Graphics DRI dcn35_set_drr Heap Buffer Overflow DoS

Vulnerability of the dcn35setdrr function in the drivers/gpu/drm/amd/display/dc/hwss/dcn35/dcn35hwseq.c module – Drivers that support Direct Rendering Infrastructure DRI for AMD graphics cards in Linux operating systems are vulnerable due to the reliance on pointer manipulation. Exploiting this...

dcn21 HWSeq Buffer Overflow DoS

Vulnerability of the dcn21setabmimmediatedisable function in the drivers/gpu/drm/amd/display/dc/dcn21/dcn21HWSeq.c module – Drivers that support Direct Rendering Infrastructure DRI for AMD graphics cards in Linux operating systems are vulnerable due to a pointer manipulation issue. Exploiting thi...

AMD DRI Driver Heap Buffer Overflow DoS

The vulnerability in determining the structure of debugdefaultsdrv in the drivers/gpu/drm/amd/display/dc/resource/dcn35/dcn35resource.c file affects Linux kernel-based AMD graphics cards. This vulnerability is related to synchronization errors when using a shared resource. Exploiting this...

AMD Graphics DRI dcn10_set_drr() DoS

Vulnerability of the dcn10setdrr function in the drivers/gpu/drm/amd/display/dc/hwss/dcn10/dcn10hwseq.c module – The drivers that support Direct Rendering Infrastructure DRI for AMD graphics cards in Linux operating systems are vulnerable due to a pointer manipulation issue. Exploiting this...

mtk_crtc. Heap Buffer Overflow DoS

Vulnerability of the mtkcrtcDestroy function in the drivers/gpu/drm/mediatek/mtkcrtc.c module – Drivers that support Direct Rendering Infrastructure DRI for Mediatek graphics cards in Linux operating systems are vulnerable due to a pointer manipulation issue. Exploiting this vulnerability could...

Linux DRI Panthor Device Mmap I/O Buffer Overflow DoS

Vulnerability of the panthordevicemmapio function in the drivers/gpu/drm/panthor/panthordevice.c module – The driver for Linux’s Direct Rendering Infrastructure DRI has vulnerabilities related to authentication procedures. Exploiting this vulnerability could allow an attacker to cause service...

RHEL 8 : firefox (RHSA-2025:22367)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:22367 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

CVE-2025-63872

DeepSeek V3.2 has a Cross Site Scripting XSS vulnerability, which allows JavaScript execution through model-generated SVG content...

RLSA-2025:22394 Moderate: qt6-qtsvg security update

Scalable Vector Graphics SVG is an XML-based language for describing two-dimensional vector graphics. Qt provides classes for rendering and displaying SVG drawings in widgets and on other paint devices. Security Fixes: qtsvg: Uncontrolled recursion in Qt SVG module CVE-2025-10728 For more details...