Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper handling of MSDU buffer types, which can lead to kernel crashes and buffer leaks...

The vulnerability of AMD’s microprogramming software related to writing beyond buffer boundaries in memory allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of AMD’s microprogramming software lies in writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

ROS-20251216-7345

A vulnerability in the GIMP graphical editor is related to a buffer overflow in dynamic memory. Exploitation of the vulnerability could allow an attacker to execute arbitrary code using a specially crafted XWD file...

ROS-20251215-7303

A vulnerability in Mozilla Firefox, Firefox ESR and Thunderbird email client is related to an operation exceeding the memory buffer boundaries. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

The vulnerability of the Projected File System component in Windows operating systems, which allows attackers to enhance their privileges

The vulnerability of the Projected File System component in Windows operating systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Routing and Remote Access Service (RRAS) in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Routing and Remote Access Service RRAS in Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted request...

The vulnerability of the Projected File System component in Windows operating systems, which allows attackers to enhance their privileges

The vulnerability of the Projected File System component in Windows operating systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CVE-2023-53801

In the Linux kernel, the following vulnerability has been resolved: iommu/sprd: Release dma buffer to avoid memory leak When attaching to a domain, the driver would alloc a DMA buffer which is used to store address mapping table, and it need to be released when the IOMMU domain is freed...

CVE-2025-14330: Improper Restriction of Operations within the Bounds of a Memory Buffer

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6...

The vulnerability of operating systems iOS, iPadOS, watchOS, and visionOS, related to operations beyond the memory buffer, allows attackers to trigger a service failure.

The vulnerability of operating systems iOS, iPadOS, watchOS, and visionOS is related to the execution of operations beyond the boundaries of memory buffers. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Command Line Interface (CLI) of the WatchGuard Fireware operating system, which allows a hacker to execute arbitrary code

The vulnerability of the Command Line Interface CLI of the WatchGuard Fireware operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the nfs_direct_write_completion() function in the fs/nfs/direct.c module of the Linux file system support module allows a hacker to cause a service failure.

The vulnerability of the nfsdirectwritecompletion function in the fs/nfs/direct.c module of the Linux file system support module is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Safari browser in iOS, iPadOS, and VisionOS operating systems, related to reading beyond the buffer limit of memory, allows attackers to trigger a service failure.

The vulnerability of the Safari browser in iOS, iPadOS, and VisionOS operating systems is related to reading data beyond the buffer limit of memory. Exploiting this vulnerability can allow a malicious actor to trigger a service failure through a specially crafted HTML page...

The vulnerability of the huge_memory.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the hugememory.c component in the Linux operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of Intel Xeon processor microprogramming software, related to the execution of operations outside the buffer in memory, allows attackers to exploit their privileges.

The vulnerability of Intel Xeon processor microprogramming software relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows attackers to enhance their privileges...

The vulnerability of the tx.c component in the Linux operating system’s kernel allows a attacker to compromise the integrity of the protected information.

The vulnerability of the tx.c component in the Linux operating system’s kernel is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to compromise the integrity of the protected information...

The vulnerability of the FortiADC application delivery controller, related to writing beyond the buffer’s boundaries in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of the FortiADC application delivery controller is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted HTTP requests...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Cisco Rv110W_Firmware

c...

CVE-2025-33195

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause unexpected memory buffer operations. A successful exploit of this vulnerability might lead to data tampering, denial of service, or escalation of privileges...

The vulnerability of the microprogrammed software of the Zenitel TCIV-3+ IP video door phones lies in the fact that the operation values can escape beyond the buffer in memory, allowing a intruder to cause a service failure.

The vulnerability of the microprogrammed software of the Zenitel TCIV-3+ IP video door phones is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure...