69 matches found
Security update for glib2
This update for glib2 fixes the following issues: CVE-2025-14512: integer overflow in the GIO escapebytestring function when processing malicious files or remote filesystem attribute values can lead to denial-of-service bsc1254878. CVE-2025-14087: buffer underflow in the GVariant parser...
[SECURITY] [DLA 4383-1] rails security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4383-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès November 25, 2025 https://wiki.debian.org/LTS -...
The vulnerability of the check_ptr_to_map_access() function in the kernel/bpf/verifier.c module of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the checkptrtomapaccess function in the kernel/bpf/verifier.c module of the Linux operating system’s kernel is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2025-62496
A vulnerability exists in the QuickJS engine's BigInt string parsing logic jsbigintfromstring when attempting to create a BigInt from a string with an excessively large number of digits. The function calculates the necessary number of bits nbits required to store the BigInt using the formula:...
The vulnerability of the blk_ioctl_discard() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the blkioctldiscard function in the Linux operating system is related to integer overflow. Exploiting this vulnerability could allow an attacker to trigger a service failure...
The vulnerability of the `xp_create_and_assign_umem()` function in the Linux operating system allows a hacker to execute arbitrary code.
The vulnerability of the xpcreateandassignumem function in the Linux operating system is related to integer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
ALPINE-CVE-2025-59800
In Artifex Ghostscript through 10.05.1, ocrbeginpage in devices/gdevpdfocr.c has an integer overflow that leads to a heap-based buffer overflow in ocrline8...
CVE-2025-59800
In Artifex Ghostscript through 10.05.1, ocrbeginpage in devices/gdevpdfocr.c has an integer overflow that leads to a heap-based buffer overflow in ocrline8...
SUSE-SU-2025:20594-1 Security update for libarchive
This update for libarchive fixes the following issues: - CVE-2025-5918: reading past EOF may be triggered for piped file streams bsc1244279 - CVE-2025-5917: off by one error in buildustarentryname at archivewritesetformatpax.c bsc1244336 - CVE-2025-5916: integer overflow while reading warc files ...
USN-7694-1 libxml2 vulnerabilities
Ahmed Lekssays discovered that libxml2 did not properly perform certain mathematical operations, leading to an integer overflow. An attacker could possibly use this issue to cause a crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2025-6021 Ahmed Lekssays discovere...
UBUNTU-CVE-2025-22081
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix a couple integer overflows on 32bit systems On 32bit systems the "off + sizeofstruct NTFSDE" addition can have an integer wrapping issue. Fix it by using sizeadd...
UBUNTU-CVE-2025-3408
A vulnerability was found in Nothings stb up to f056911. It has been rated as critical. Affected by this issue is the function stbdupreplace. The manipulation leads to integer overflow. The attack may be launched remotely. Continious delivery with rolling releases is used by this product...
CVE-2024-50016
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2024-47661 drm/amd/display: Avoid overflow from uint32_t to uint8_t
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid overflow from uint32t to uint8t WHAT & HOW dmubrbcmd's rampingboundary has size of uint8t and it is assigned 0xFFFF. Fix it by changing it to uint8t with value of 0xFF. This fixes 2 INTEGEROVERFLOW issues...
CVE-2024-47661
The CVE-2024-47661 issue affects the Linux kernel’s drm/amd/display path, where dmub_rb_cmd's ramping_boundary was defined as uint8_t but assigned 0xFFFF. The fix changes ramping_boundary to a uint8_t value of 0xFF, addressing two integer-overflow problems reported by Coverity. Affected component...
CVE-2024-46728
CVE-2024-46728 affects the Linux kernel (drm/amd/display) where there is a fix for using aux_rd_interval: the value of aux_rd_interval (size 7) must be checked before use. The connected Azure/Linux Nessus entries confirm the advisory references this vulnerability and describe the fix as preventin...
CVE-2024-46728 drm/amd/display: Check index for aux_rd_interval before using
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check index for auxrdinterval before using auxrdinterval has size of 7 and should be checked. This fixes 3 OVERRUN and 1 INTEGEROVERFLOW issues reported by Coverity...
CVE-2024-46728 drm/amd/display: Check index for aux_rd_interval before using
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check index for auxrdinterval before using auxrdinterval has size of 7 and should be checked. This fixes 3 OVERRUN and 1 INTEGEROVERFLOW issues reported by Coverity...
CVE-2024-46726 drm/amd/display: Ensure index calculation will not overflow
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Ensure index calculation will not overflow WHY & HOW Make sure vmid0p72idx, vnom0p8idx and vmax0p9idx calculation will never overflow and exceess array size. This fixes 3 OVERRUN and 1 INTEGEROVERFLOW issues...