128 matches found
CVE-2026-43207
In the Linux kernel, the following vulnerability has been resolved: media: mtk-mdp: Fix error handling in probe function Add mtkmdpunregisterm2mdevice on the error handling path to prevent resource leak. Add check for the return value of vpugetplatdevice to prevent null pointer dereference. And...
CVE-2026-43270
In the Linux kernel, the following vulnerability has been resolved: media: mtk-mdp: Fix a reference leak bug in mtkmdpremove In mtkmdpprobe, vpugetplatdevice increases the reference count of the returned platform device. Add platformdeviceput to prevent reference leak...
CVE-2026-43270
In the Linux kernel, the following vulnerability has been resolved: media: mtk-mdp: Fix a reference leak bug in mtkmdpremove In mtkmdpprobe, vpugetplatdevice increases the reference count of the returned platform device. Add platformdeviceput to prevent reference leak...
CVE-2026-43270 media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove()
In the Linux kernel, the following vulnerability has been resolved: media: mtk-mdp: Fix a reference leak bug in mtkmdpremove In mtkmdpprobe, vpugetplatdevice increases the reference count of the returned platform device. Add platformdeviceput to prevent reference leak...
CVE-2026-43270
The CVE-2026-43270 issue affects the Linux kernel media: mtk-mdp module. In mtk_mdp_probe(), vpu_get_plat_device() increases the platform device reference count and is not consistently released in mtk_mdp_remove(), creating a reference-leak vulnerability. Red Hat and Debian OS/tracking entries co...
CVE-2026-43207 media: mtk-mdp: Fix error handling in probe function
In the Linux kernel, the following vulnerability has been resolved: media: mtk-mdp: Fix error handling in probe function Add mtkmdpunregisterm2mdevice on the error handling path to prevent resource leak. Add check for the return value of vpugetplatdevice to prevent null pointer dereference. And...
Linux Distros Unpatched Vulnerability : CVE-2026-43207
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: mtk-mdp: Fix error handling in probe function Add mtkmdpunregisterm2mdevice on the error handling path to prevent resource leak. Add check for the return...
CVE-2026-43207: NULL Pointer Dereference
In the Linux kernel, the following vulnerability has been resolved: media: mtk-mdp: Fix error handling in probe function Add mtkmdpunregisterm2mdevice on the error handling path to prevent resource leak. Add check for the return value of vpugetplatdevice to prevent null pointer dereference. And...
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from an error in the handling of resources by the mtk-mdp driver’s probe function. This error occurs...
CVE-2026-43270: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: media: mtk-mdp: Fix a reference leak bug in mtkmdpremove In mtkmdpprobe, vpugetplatdevice increases the reference count of the returned platform device. Add platformdeviceput to prevent reference leak...
appyter (>=0.18.3, <=0.18.11), metro-sp-mdp (>=0.1.0, <=2.1.2) +1 more potentially affected by CVE-2026-40934 via jupyter-server (1.13.5)
jupyter-server PYPI version 1.13.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - appyter =0.18.3, =0.1.0, =0.18.0, =0.37.0 Source cves: CVE-2026-40934 Source advisory: OSV:PYSEC-2026-69...
appyter (>=0.18.3, <=0.18.11), metro-sp-mdp (>=0.1.0, <=2.1.2) +1 more potentially affected by CVE-2026-40934 via jupyter-server (1.13.5)
jupyter-server PYPI version 1.13.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - appyter =0.18.3, =0.1.0, =0.18.0, =0.37.0 Source cves: CVE-2026-40934 Source advisory: OSV:GHSA-5MRQ-X3X5-8V8F...
appyter (>=0.18.3, <=0.18.11), metro-sp-mdp (>=0.1.0, <=2.1.2) +1 more potentially affected by CVE-2026-40110 via jupyter-server (1.13.5)
jupyter-server PYPI version 1.13.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - appyter =0.18.3, =0.1.0, =0.18.0, =0.37.0 Source cves: CVE-2026-40110 Source advisory: OSV:GHSA-24QX-W28J-9M6P...
foursquare-map-sdk (>=2.0.0, <=3.1.0), metro-sp-mdp (>=0.1.0, <=2.1.2) +3 more potentially affected by CVE-2026-40171 via jupyterlab (3.2.9)
jupyterlab PYPI version 3.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - foursquare-map-sdk =2.0.0, =0.1.0, =0.8.2, =0.12.0.dev0, =1.11.0, =1.13.0 Source cves: CVE-2026-40171 Source advisory: OSV:GHSA-RCH3-82JR-F9...
Linux MDP3 M2M Buffer Overflow DoS
The vulnerability of the mdpm2mopen function in the drivers/media/platform/mediatek/mdp3/mtk-mdp3-m2m.c driver for multimedia devices in the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
Malicious Package
Overview mdp-client-web is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2026-744 Malicious code in mdp-client-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bae22cc58ac4c2a2b449514ef62c82fde3dd2d6d0d5697b3689f16c8583e62b The package mdp-client-web was found to contain malicious code. Source: ghsa-malware 070c26f2080c516dd8c197674dcc76a911d4dfb62242027e1d50a04c4536f0b2...
Malicious code in mdp-client-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bae22cc58ac4c2a2b449514ef62c82fde3dd2d6d0d5697b3689f16c8583e62b The package mdp-client-web was found to contain malicious code. Source: ghsa-malware 070c26f2080c516dd8c197674dcc76a911d4dfb62242027e1d50a04c4536f0b2...
Several products of Beckhoff Automation have security vulnerabilities.
Beckhoff Automation’s Beckhoff.Device.Manager.XAR, etc., are products of the American company Beckhoff Automation. Beckhoff.Device.Manager.XAR is a core component used for remote management and controller configuration. Beckhoff Automation’s MDP software package for TwinCAT/BSD is a core componen...
Beckhoff Automation's various products have a vulnerability regarding input validation errors.
Beckhoff Automation products such as Beckhoff.Device.Manager.XAR are developed by the American company Beckhoff Automation. Beckhoff.Device.Manager.XAR is a core component used for remote management and controller configuration. The Beckhoff Automation MDP software package for TwinCAT/BSD is a co...