831 matches found
CVE-2026-43151: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: Revert "media: iris: Add sanity check for stop streaming" This reverts commit ad699fa78b59241c9d71a8cafb51525f3dab04d4. Revert the check that skipped stopstreaming when the instance was in IRISINSTERROR, as it caused multiple...
CVE-2026-43146: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: media: iris: Add buffer to list only after successful allocation Move listaddtail to after dmaallocattrs succeeds when creating internal buffers. Previously, the buffer was enqueued in buffers-list before the DMA allocation. If t...
CVE-2026-43142: Missing Release of Memory after Effective Lifetime
In the Linux kernel, the following vulnerability has been resolved: media: iris: gen1: Destroy internal buffers after FW releases After the firmware releases internal buffers, the driver was not destroying them. This left stale allocations that were no longer used, especially across resolution...
PT-2026-44363
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the iris release internal buffers function. A regression was introduced where session release buf could free a buffer while the caller, iris release...
Linux Heap Buffer Overflow DoS
The vulnerability of the irisdestroyinternalbuffers function in the drivers/media/platform/qcom/iris/irisbuffer.c file, a driver for multimedia devices in the Linux kernel, is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause service failures...
Linux Function Heap Buffer Overflow DoS
The vulnerability of the irishfigen2handlesystemerror function in the drivers/media/platform/qcom/iris/irishfigen2response.c driver for multimedia devices in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service...
Astra Linux - уязвимость в linux-5.10
In the Linux kernel, the following vulnerability has been resolved: media: iris: Add sanity check for stop streaming Add sanity check in irisvb2stopstreaming. If inst-state is already IRISINSTERROR, we should skip the streamoff operation because it would still send packets to the firmware. In...
CVE-2025-68542
Missing Authorization vulnerability in vgdevsolutions Checkout Gateway for IRIS checkout-gateway-iris allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Checkout Gateway for IRIS: from n/a through = 1.3...
CVE-2025-68542
Missing Authorization vulnerability in vgdevsolutions Checkout Gateway for IRIS checkout-gateway-iris allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Checkout Gateway for IRIS: from n/a through = 1.3...
CVE-2025-68542
CVE-2025-68542 describes a Missing Authorization/Broken Access Control vulnerability in vgdevsolutions Checkout Gateway for IRIS (WordPress plugin Checkout Gateway for IRIS) 1.3.
CVE-2025-68542 WordPress Checkout Gateway for IRIS plugin <= 1.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in vgdevsolutions Checkout Gateway for IRIS checkout-gateway-iris allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Checkout Gateway for IRIS: from n/a through = 1.3...
CVE-2025-68542 WordPress Checkout Gateway for IRIS plugin <= 1.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in vgdevsolutions Checkout Gateway for IRIS checkout-gateway-iris allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Checkout Gateway for IRIS: from n/a through = 1.3...
WordPress plugin Checkout Gateway for IRIS has security vulnerabilities
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be added to a...
PT-2026-21095
Name of the Vulnerable Software and Affected Versions vgdevsolutions Checkout Gateway for IRIS versions through 1.3 Description An authorization issue exists in vgdevsolutions Checkout Gateway for IRIS. The issue involves incorrectly configured access control security levels, potentially allowing...
CVE-2025-68542: Missing Authorization
Missing Authorization vulnerability in vgdevsolutions Checkout Gateway for IRIS checkout-gateway-iris allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Checkout Gateway for IRIS: from n/a through = 1.3...
WordPress Checkout Gateway for IRIS plugin <= 1.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Checkout Gateway for IRIS versions = 1.3...
CVE-2025-68812
In the Linux kernel, the following vulnerability has been resolved: media: iris: Add sanity check for stop streaming Add sanity check in irisvb2stopstreaming. If inst-state is already IRISINSTERROR, we should skip the streamoff operation because it would still send packets to the firmware. In...
SUSE CVE-2025-68812
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2026-22783
Iris is a web collaborative platform that helps incident responders share technical details during investigations. Prior to 2.4.24, the DFIR-IRIS datastore file management system has a vulnerability where mass assignment of the filelocalname field combined with path trust in the delete operation...