1709 matches found
Qualcomm Chipsets 资源管理错误漏洞
Qualcomm Chipsets are a series of chipset developed by Qualcomm Incorporation. Qualcomm Chipsets have a resource management vulnerability that arises from processing multiple IOCTL calls from the user space simultaneously, which may lead to memory corruption...
PT-2026-22645
Name of the Vulnerable Software and Affected Versions affected versions not specified Description A memory corruption issue exists when processing IOCTL calls with concurrent access to a shared buffer. This can lead to system instability or potential code execution. Approximately 1000 devices...
PT-2026-22649
Name of the Vulnerable Software and Affected Versions affected versions not specified Description A memory corruption issue exists when invoking IOCTL calls with concurrent access to a shared buffer. This can lead to unpredictable system behavior. Approximately 1000 devices worldwide are estimate...
PT-2026-22641
Name of the Vulnerable Software and Affected Versions affected versions not specified Description A memory corruption issue arises when concurrent access to a shared buffer occurs during IOCTL calls. This can lead to unpredictable system behavior. Recommendations At the moment, there is no...
PT-2026-22640
Name of the Vulnerable Software and Affected Versions affected versions not specified Description A memory corruption issue exists when handling various IOCTL calls originating from user-space concurrently. This can lead to unpredictable system behavior. Recommendations At the moment, there is no...
PT-2026-22642
Name of the Vulnerable Software and Affected Versions affected versions not specified Description A memory corruption issue exists when processing IOCTL calls. This occurs due to accessing a buffer after it has been freed. The issue involves a memory corruption vulnerability that could potentiall...
CVE-2023-31364
Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest virtual machine VM to flood a host with writes, potentially causing a fatal machine check error resulting in denial of service...
kernel: Linux kernel: Memory corruption in Squashfs due to incorrect block size calculation
A flaw was found in the Linux kernel's Squashfs filesystem. A local attacker can exploit this vulnerability by simultaneously mounting a Squashfs filesystem and issuing a specific input/output control ioctl command. This can lead to an incorrect block size calculation, causing a shift-out-of-boun...
kernel: Linux kernel: Memory corruption in Squashfs due to incorrect block size calculation
A flaw was found in the Linux kernel's Squashfs filesystem. A local attacker can exploit this vulnerability by simultaneously mounting a Squashfs filesystem and issuing a specific input/output control ioctl command. This can lead to an incorrect block size calculation, causing a shift-out-of-boun...
kernel: Linux kernel: Memory corruption in Squashfs due to incorrect block size calculation
A flaw was found in the Linux kernel's Squashfs filesystem. A local attacker can exploit this vulnerability by simultaneously mounting a Squashfs filesystem and issuing a specific input/output control ioctl command. This can lead to an incorrect block size calculation, causing a shift-out-of-boun...
CVE-2026-21864
Valkey-Bloom is a Rust based Valkey module which brings a Bloom Filter Module data type into the Valkey distributed key-value database. Prior to commit a68614b6e3845777d383b3a513cedcc08b3b7ccd, a specially crafted RESTORE command can cause Valkey to hit an assertion, causes the server to shutdown...
kernel: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue
In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue When the task management thread processes reply queues while the reset thread resets them, the task management thread accesses an invalid queue ID 0xFFFF, s...
kernel: Linux kernel: Memory corruption in Squashfs due to incorrect block size calculation
A flaw was found in the Linux kernel's Squashfs filesystem. A local attacker can exploit this vulnerability by simultaneously mounting a Squashfs filesystem and issuing a specific input/output control ioctl command. This can lead to an incorrect block size calculation, causing a shift-out-of-boun...
CVE-2026-25966
A flaw was found in ImageMagick. The "secure" security policy, intended to prevent reading and writing from standard streams, can be bypassed. An attacker can exploit this by using fd: pseudo-filenames, which are not properly blocked by the policy. This allows the attacker to circumvent the...
Incomplete List of Disallowed Inputs
Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
Incomplete List of Disallowed Inputs
Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
Incomplete List of Disallowed Inputs
Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...
Incomplete List of Disallowed Inputs
Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...
CVE-2026-27576
OpenClaw is a personal AI assistant. In versions 2026.2.17 and below, the ACP bridge accepts very large prompt text blocks and can assemble oversized prompt payloads before forwarding them to chat.send. Because ACP runs over local stdio, this mainly affects local ACP clients for example IDE...
