26 matches found
CVE-2026-64546
A flaw was found in the Linux kernel. A specially crafted Extended Display Identification Data EDID, which describes display capabilities, can cause a heap out-of-bounds read in the drmparsetiledblock function within the drm/edid component. This vulnerability could lead to system instability or t...
EUVD-2026-49597
In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix OOB read in drmparsetiledblock drmparsetiledblock casts the DisplayID block to a struct displayidtiledblock and reads the full fixed layout up to tile-topologyid7 without checking block-numbytes. The DisplayID...
CVE-2026-64285
In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Pin source page for write when adding CPUID data for SNP guest When populating a guestmemfd instance with the initial CPUID data for an SNP guest, acquire a writable pin on the source page as KVM will write back the...
EUVD-2026-48997
In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Pin source page for write when adding CPUID data for SNP guest When populating a guestmemfd instance with the initial CPUID data for an SNP guest, acquire a writable pin on the source page as KVM will write back the...
PT-2026-64506
In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Pin source page for write when adding CPUID data for SNP guest When populating a guest memfd instance with the initial CPUID data for an SNP guest, acquire a writable pin on the source page as KVM will write back the...
EUVD-2026-39884
In the Linux kernel, the following vulnerability has been resolved: drm/gma500/oaktraillvds: fix hang on init failure The LVDS init code looks up an I2C adapter using i2cgetadapter and tries to read the EDID before falling back to allocating and registering its own adapter. The error handling doe...
CVE-2026-50205
System log files output unencrypted SMTP server authentication passwords alongside sensitive employee corporate identification data...
CVE-2026-50205
System log files output unencrypted SMTP server authentication passwords alongside sensitive employee corporate identification data...
CVE-2026-50205
System log files output unencrypted SMTP server authentication passwords alongside sensitive employee corporate identification data...
EUVD-2026-34217
System log files output unencrypted SMTP server authentication passwords alongside sensitive employee corporate identification data...
CVE-2026-50205
CVE-2026-50205 describes a vulnerability where system log files output unencrypted SMTP server authentication passwords along with sensitive employee identifiers. The brief does not specify affected products, vendors, or versions. Impact is stated as high confidentiality exposure (log leakage of ...
PT-2026-46156
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description System log files output unencrypted SMTP server authentication passwords and sensitive employee corporate identification data. Recommendations At the moment, the...
PT-2026-34366
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the amdgpu dm component when a sink is connected. The drm edid variable in aconnector is overwritten without freeing the previous allocation, which leads to a...
CVE-2023-54277
The CVE-2023-54277 entry concerns the Linux kernel udlfb fbdev driver. The root cause described in the provided sources is an endpoint type check failure for a USB bulk-OUT endpoint, leading to issues when the endpoint is not of the expected type (e.g., EDID reads failing and “BOGUS urb xfer” mes...
jshERP 安全漏洞
jshERP Huaxia ERP is a homegrown ERP system by the individual developer of Ji Sheng Hua in China. A security vulnerability exists in jshERP v3.5, which stems from improper access control in the ResourceController.java component and could lead to access to ID data...
The vulnerability of the application software of the Central Medical Information System of the State Health Information System (GIS SZ), related to the unencrypted storage of critical information, allows a perpetrator to disclose identification data.
The vulnerability of the application software of the Central Medical Information System of the State Health Information System GIS SZ is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow a malicious actor to disclose identification data...
CVE-2025-38254 drm/amd/display: Add sanity checks for drm_edid_raw()
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add sanity checks for drmedidraw When EDID is retrieved via drmedidraw, it doesn't guarantee to return proper EDID bytes the caller wants: it may be either NULL that leads to an Oops or with too long bytes over t...
PT-2025-28882 · Amd +1 · Amd +1
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel’s DRM/AMD/display component where the drm edid raw function does not guarantee a proper Extended Display Identification Data EDID return. This can...
CVE-2023-53085
In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix info leak when failing to get panel id Make sure to clear the transfer buffer before fetching the EDID to avoid leaking slab data to the logs on errors that leave the buffer unchanged...
UBUNTU-CVE-2023-53085
In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix info leak when failing to get panel id Make sure to clear the transfer buffer before fetching the EDID to avoid leaking slab data to the logs on errors that leave the buffer unchanged...