PT-2026-1391

Name of the Vulnerable Software and Affected Versions dpe affected versions not specified Description A memory corruption issue exists in dpe due to a use after free condition. Successful exploitation of this issue could allow a malicious actor with System privileges to achieve local escalation o...

PT-2026-1384

Name of the Vulnerable Software and Affected Versions c2ps affected versions not specified Description A memory corruption issue exists in c2ps due to a use-after-free condition. Successful exploitation of this issue could allow a malicious actor to gain local system privileges, provided they...

PT-2026-1376

Name of the Vulnerable Software and Affected Versions display affected versions not specified Description A memory corruption issue exists due to use after free. Successful exploitation could allow a malicious actor with System privileges to gain local escalation of privilege. User interaction is...

PT-2026-1386

Name of the Vulnerable Software and Affected Versions seninf affected versions not specified Description A race condition may lead to memory corruption in seninf. Successful exploitation could allow a malicious actor with System privileges to escalate their privileges locally. User interaction is...

PT-2026-1377

Name of the Vulnerable Software and Affected Versions display affected versions not specified Description A memory corruption issue exists due to use after free. Successful exploitation could allow a malicious actor with System privileges to escalate privileges locally. User interaction is not...

PT-2026-1381

Name of the Vulnerable Software and Affected Versions imgsys affected versions not specified Description An out-of-bounds write issue exists in imgsys due to improper input validation. Successful exploitation could allow a malicious actor to gain local system privileges, but requires existing...

PT-2026-1382

Name of the Vulnerable Software and Affected Versions versions prior to ALPS10315812 Description An out-of-bounds write issue exists in battery due to a missing bounds check. Successful exploitation could allow a malicious actor with System privileges to escalate privileges locally. User...

PT-2026-1378

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description A flaw exists in Modem that could lead to a remote denial of service. This occurs due to incorrect error handling when a user equipment UE connects to a malicious base station controlled by an...

PT-2026-1370

Name of the Vulnerable Software and Affected Versions versions prior to ALPS10184061 Description A memory corruption issue exists in display due to a use after free condition. Successful exploitation of this issue could allow a malicious actor with System privileges to gain local escalation of...

PT-2026-1366

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description A flaw exists in Modem that may cause a system crash due to improper error handling. This could result in a remote denial of service if a User Equipment UE connects to a malicious base station...

PT-2026-1392

Name of the Vulnerable Software and Affected Versions dpe affected versions not specified Description An out-of-bounds write issue exists in dpe due to an integer overflow. Successful exploitation could allow a malicious actor with System privileges to escalate privileges locally. User interactio...

PT-2026-1390

Name of the Vulnerable Software and Affected Versions dpe affected versions not specified Description A memory corruption issue exists in dpe due to a use-after-free condition. Successful exploitation of this issue could allow a malicious actor to gain local system privileges, provided they alrea...

PT-2026-1385

Name of the Vulnerable Software and Affected Versions mminfra affected versions not specified Description An out-of-bounds write issue exists due to a missing bounds check. Successful exploitation could allow a local attacker with System privileges to escalate their privileges. User interaction i...

PT-2026-1372

Name of the Vulnerable Software and Affected Versions display affected versions not specified Description An out-of-bounds write issue exists due to a missing bounds check. Successful exploitation could allow a malicious actor to gain local system privileges, provided they already possess System...

PT-2026-1365

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description A flaw exists in Modem that may lead to a remote denial of service. This issue stems from a read of uninitialized heap data caused by an uncaught exception. An attacker can exploit this by havi...

PT-2026-1369

Name of the Vulnerable Software and Affected Versions versions prior to ALPS10184084 Description A use-after-free issue exists in display due to a race condition. Successful exploitation could allow a malicious actor with System privileges to escalate privileges locally. User interaction is not...

CVE-2025-65110 Vega Cross-Site Scripting (XSS) via expression abusing vlSelectionTuples function array map calls in environments with satisfactory function gadgets in the global scope

Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. Prior to versions 6.1.2 and 5.6.3, applications meeting two conditions are at risk of arbitrary JavaScript code execution, even if "safe mode" expressionInterpreter is used...

CVE-2025-65110

CVE-2025-65110 affects Vega, a visualization grammar. Prior to versions 6.1.2 and 5.6.3, if an application both attaches the Vega library and a vega.View instance to the global window (or has other safe-function gadget in the global scope) and allows user-defined Vega JSON definitions, it is at r...

mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation

A flaw was found in MariaDB. This vulnerability allows remote attackers to execute arbitrary code on affected installations via improper validation of a user-supplied path prior to using it in file operations in the mariadb-dump utility, requiring user interaction...

CVE-2025-15280

A flaw was found in FontForge. This use-after-free vulnerability in the SFD file parsing component allows remote attackers to execute arbitrary code. Exploitation requires user interaction, such as opening a specially crafted malicious SFD file or visiting a malicious web page. Successful...