CVE-2026-19199

The Imagination Technologies Graphics DDK is vulnerable to a numerical error in versions 1.18 RTM2 , 23.2 RTM2 , 24.2 RTM2 , 25.1 RTM2 through 25.3 RTM , and 26.1 RTM2 . The root cause is a 32-bit integer overflow occurring in the KM driver during the conversion from page size allocation to byte ...

CVE-2026-19199: Imagination Technologies Graphics DDK: Software installed and run as a non-privileged user may conduct improper system calls to allocate physical memory

Software installed and run as a non-privileged user may conduct improper system calls to allocate physical memory. A 32-bit integer overflow in the KM driver during page-to-byte conversion of an allocation size can result in an undersized kernel buffer allocation. This may allow unallocated or...

Linux Kernel Security Vulnerabilities

Versions of the Linux kernel prior to 7.1.6 contain security vulnerabilities. These vulnerabilities arise from the CRIU checkpoint copy mechanism for MQD control stacks, which fails to limit the hardware size within the allocated BO area. As a result, memcpy operations may access adjacent GTT...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the ndiscrauseropt function failing to initialize the padding field in the nduseroptmsg structure, resulting...

CVE-2025-15038

The CVE-2025-15038 affected component is the ASUS Business System Control Interface driver. A vulnerability described as Out-of-Bounds allows a local, unprivileged user to craft an IOCTL request that can trigger kernel information disclosure or cause a system crash. The exposure is linked to loca...

CVE-2025-15038

An Out-of-Bounds Read vulnerability exists in the ASUS Business System Control Interface driver. This vulnerability can be triggered by a unprivileged local user sending a specially crafted IOCTL request, potentially leading to a disclosure of kernel information or a system crash. Refer to the...

PT-2024-10671 · Emmc Rpmb · Emmc Rpmb

Name of the Vulnerable Software and Affected Versions: emmc rpmb affected versions not specified Description: The issue is related to a missing bounds check in the emmc rpmb ioctl function of emmc rpmb.c. This could lead to information disclosure of kernel data. Recommendations: At the moment,...

Linux Kernel Security Vulnerabilities

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel that can be exploited by a local user to disclose sensitive information from the kernel if the CPU does not implement SMAP or has SMAP disabled...

OpenBSD security vulnerabilities

OpenBSD is a cross-platform, BSD-based, UNIX-like operating system from the Canadian OpenBSD project group. OpenBSD suffers from a security vulnerability that stems from the implementation of multicast routing that does not properly initialize memory before accessing it . The vulnerability allows...

CVE-2021-21790

An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O read requests. A specially crafted I/O request packet IRP can lead to privileged reads in the context of a driver which can result in sensitive information...

IOBit Advanced SystemCare security vulnerabilities

Iobit IOBit Advanced SystemCare is a system management utility program from the British company IOBit Iobit. The program is mainly used for scanning, repairing and optimizing the system, among other things. A security vulnerability exists in IOBit Advanced SystemCare Ultimate, which stems from an...

FreeBSD-SA-20:03.thrmisc

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:03.thrmisc Security Advisory The FreeBSD Project Topic: kernel stack data disclosure Category: core Module: kernel Announced: 2020-01-28 Credits: Ilja Van...

FreeBSD Input Validation Vulnerability

FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. A security vulnerability exists in FreeBSD. An attacker could exploit this vulnerability to disclose kernel data used in system calls...

Design/Logic Flaw

In FreeBSD before 11.1-STABLEr332066 and 11.1-RELEASE-p10, due to insufficient initialization of memory copied to userland in the network subsystem, small amounts of kernel memory may be disclosed to userland processes. Unprivileged authenticated local users may be able to access small amounts of...

CVE-2018-6921

In FreeBSD before 11.1-STABLEr332066 and 11.1-RELEASE-p10, due to insufficient initialization of memory copied to userland in the network subsystem, small amounts of kernel memory may be disclosed to userland processes. Unprivileged authenticated local users may be able to access small amounts of...

CVE-2018-6919

In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, due to insufficient initialization of memory copied to userland, small amounts of kernel memory may be disclosed to userland processes. Unprivileged users may be able to access small amounts...

CVE-2018-6919

In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, due to insufficient initialization of memory copied to userland, small amounts of kernel memory may be disclosed to userland processes. Unprivileged users may be able to access small amounts...

CVE-2018-6919

In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, due to insufficient initialization of memory copied to userland, small amounts of kernel memory may be disclosed to userland processes. Unprivileged users may be able to access small amounts...