CVE-2025-47317 Buffer Over-read in BT Controller

Memory corruption due to global buffer overflow when a test command uses an invalid payload type...

CVE-2025-47317

CVE-2025-47317 is described in the provided sources as memory corruption due to a global buffer overflow when a test command uses an invalid payload type. Connected documents identify Qualcomm-related components and reference a Qualcomm security bulletin; the exact affected product/version detail...

firefox: thunderbird: Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to undefined behavior, invalid pointer in the Graphics...

CVE-2025-39889

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: l2cap: Check encryption key size on incoming connection This is required for passing GAP/SEC/SEM/BI-04-C PTS test case: Security Mode 4 Level 4, Responder - Invalid Encryption Key Size - 128 bit This tests the security...

libceph: fix invalid accesses to ceph_connection_v1_info

...

PT-2025-39284

Name of the Vulnerable Software and Affected Versions affected versions not specified Description A temporary denial-of-service condition can occur when processing power control requests that contain invalid antenna or stream values. Recommendations At the moment, there is no information about a...

PT-2025-39280

Name of the Vulnerable Software and Affected Versions Versions prior to 2025-47317 Description A memory corruption issue exists due to a global buffer overflow. This occurs when a test command utilizes an invalid payload type. Recommendations At the moment, there is no information about a newer...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm, Inc. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption when processing invalid input...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a global buffer overflow when a test command uses an invalid payload type, potentially resulting in memory corruption...

PT-2025-39285

Name of the Vulnerable Software and Affected Versions Versions prior to 2025-47329 Description A memory corruption issue exists when processing invalid inputs during application info setup. This can potentially lead to unexpected behavior or system compromise. Recommendations At the moment, there...

Cisco IOS XE 安全漏洞

Cisco IOS XE is an operating system from Cisco, Inc. Used as a single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. A security vulnerability exists in Cisco IOS XE that stems from insufficient validatio...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from processing a power control request with an invalid antenna or stream value, which could result in a denial of service...

BIT-MONGODB-2024-3372 MongoDB Server may have unexpected application behaviour due to invalid BSON

Improper validation of certain metadata input may result in the server not correctly serialising BSON. This can be performed pre-authentication and may cause unexpected application behavior including unavailability of serverStatus responses. This issue affects MongoDB Server v7.0 versions prior t...

AZL-67662 CVE-2025-39880 affecting package kernel for versions less than 6.6.112.1-1

In the Linux kernel, the following vulnerability has been resolved: libceph: fix invalid accesses to cephconnectionv1info There is a place where generic code in messenger.c is reading and another place where it is writing to con-v1 union member without checking that the union member is active i.e...

CVE-2025-39880

CVE-2025-39880 affects the Linux kernel’s libceph code path, specifically reading the ceph_connection_v1_info structure and writing into con->v1 union members without ensuring the active member (msgr1 vs msgr2). On 64-bit systems, con->v1.auth_retry overlaps con->v2.out_iter, which can y...

CVE-2025-39880

In the Linux kernel, the following vulnerability has been resolved: libceph: fix invalid accesses to cephconnectionv1info There is a place where generic code in messenger.c is reading and another place where it is writing to con-v1 union member without checking that the union member is active i.e...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to check if a con-v1 union member is active, which could lead to invalid access...

Ubuntu 16.04 LTS / 18.04 LTS : Kea DHCP vulnerabilities (USN-7759-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7759-1 advisory. It was discovered that Kea DHCP did not correctly handle invalid hostnames. A remote attacker could possibly use this issue to cause a denial of...

CVE-2025-55780

A null pointer dereference occurs in the function breakwordforoverflowwrap in MuPDF 1.26.4 when rendering a malformed EPUB document. Specifically, the function calls fzhtmlsplitflow to split a FLOWWORD node, but does not check if node-next is valid before accessing node-next-overflowwrap, resulti...

SUSE-SU-2025:03290-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-46733: btrfs: fix qgroup reserve leaks in cowfilerange bsc1230708. - CVE-2024-49996: cifs: Fix buffer overflow when parsing NFS reparse points bsc1232089. -...