CVE-2025-45006

Improper mstatus.SUM bit retention non-zero in Open-Source RISC-V Processor commit f517abb violates privileged spec constraints, enabling potential physical memory access attacks...

Security Bulletin: Vulnerability in cryptography affects IBM Cloud Pak for Data System 2.0 (CPDS 2.0) [CVE-2023-0286, CVE-2023-50782]

Summary The cryptography package is used by IBM Cloud Pak for Data System 2.0 . IBM Cloud Pak for Data System 2.0 has addressed the applicable CVEs CVE-2023-0286, CVE-2023-50782 Vulnerability Details CVEID:CVE-2023-0286 DESCRIPTION: There is a type confusion vulnerability relating to X.400 addres...

CVE-2025-20932

CVE-2025-20932 affects Samsung Notes and is caused by an out-of-bounds read during BMP image RLE parsing in versions prior to 4.4.26.71. The vulnerability permits a local attacker to read out-of-bounds memory. The available connected documents specify the affected software and the root cause; exp...