Insyde InsydeH2O 缓冲区错误漏洞

Insyde InsydeH2O is a C-language source from Insyde Corporation of Taiwan that implements the new technology "EFI/UEFI" specification, designed to replace the traditional BIOS Basic Input/Output System. A security vulnerability exists in Insyde InsydeH2O 5.0 to 5.5, which can be exploited by...

PT-2025-18524

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the nvmet auth set key function. This issue occurs when changing dhchap secrets, and it fails to release the...

kernel: swiotlb information leak with DMA_FROM_DEVICE

A memory leak flaw was found in the Linux kernel’s DMA subsystem, in the way a user calls DMAFROMDEVICE. This flaw allows a local user to read random memory from the kernel space...

kernel: dma-buf/dma-resv: Stop leaking on krealloc() failure

In the Linux kernel, the following vulnerability has been resolved: dma-buf/dma-resv: Stop leaking on krealloc failure Currently dmaresvgetfences will leak the previously allocated array if the fence iteration got restarted and the kreallocarray fails. Free the old array by hand, and make sure we...

kernel: memory leak for large arguments in video_usercopy function in drivers/media/v4l2-core/v4l2-ioctl.c

A flaw memory leak in the Linux kernel webcam device functionality was found in the way user calls ioctl that triggers videousercopy function. The highest threat from this vulnerability is to system availability...

PT-2022-5679

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel has use-after-free vulnerabilities in the net/bluetooth/l2cap core.c's l2cap connect and l2cap le connect req functions. These vulnerabilities may allow code execution a...

PT-2025-18588

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to memory leaks in the Linux kernel, specifically in the napi get frags function. The problem occurs when tun get user is called, leading to memory leaks in tun napi...

Apple tvOS Buffer Overflow Vulnerability (CNVD-2022-74081)

Apple tvOS is a smart TV operating system from Apple, Inc. A security vulnerability exists in Apple tvOS, which stems from an application that could cause the system to unexpectedly terminate or write to kernel memory. No details of the vulnerability are currently available...

CVE-2022-32925

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 16, iOS 16, watchOS 9. An app may be able to cause unexpected system termination or write kernel memory...

CVE-2022-32936

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13. An app may be able to disclose kernel memory...

CVE-2022-32936

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13. An app may be able to disclose kernel memory...

CVE-2022-32925

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 16, iOS 16, watchOS 9. An app may be able to cause unexpected system termination or write kernel memory...

Design/Logic Flaw

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 16, iOS 16, watchOS 9. An app may be able to cause unexpected system termination or write kernel memory...

Input validation

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13. An app may be able to disclose kernel memory...

CVE-2022-32925

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 16, iOS 16, watchOS 9. An app may be able to cause unexpected system termination or write kernel memory...

CVE-2022-32925

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 16, iOS 16, watchOS 9. An app may be able to cause unexpected system termination or write kernel memory...

CVE-2022-32936

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13. An app may be able to disclose kernel memory...

CVE-2022-32936

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13. An app may be able to disclose kernel memory...

CVE-2022-32925

CVE-2022-32925 corresponds to an out-of-bounds write issue in Apple tvOS/iOS/watchOS. According to connected sources, the vulnerability was addressed with improved bounds checking and is fixed in tvOS 16, iOS 16, and watchOS 9. The issue could allow an app to cause an unexpected system terminatio...

CVE-2022-32936

CVE-2022-32936 is an out-of-bounds read vulnerability in macOS whose impact could allow an app to disclose kernel memory. The issue was mitigated by improved input validation and is fixed in macOS Ventura 13 (Apple security content entry HT213488). The CVSS metrics indicate a locally exploitable ...