Linux kernel Data Compromise

The vulnerability of the Linux operating system’s kernel is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and accessibility of the protected information...

Tenda CH22 Router Form Add UserName XSS

The vulnerability of the formaddUserName function /goform/addUserName of the Tenda CH22 router’s software lies in the fact that the operation may be executed outside the buffer in memory when processing the Password parameter. Exploiting this vulnerability could allow an attacker to compromise th...

CVE-2025-38669 Revert "drm/gem-shmem: Use dma_buf from GEM object instance"

In the Linux kernel, the following vulnerability has been resolved: Revert "drm/gem-shmem: Use dmabuf from GEM object instance" This reverts commit 1a148af06000e545e714fe3210af3d77ff903c11. The dmabuf field in struct drmgemobject is not stable over the object instance's lifetime. The field become...

AMD firmware Buffer Overflow Info Disclosure

The vulnerability in the firmware of AMD graphics processors’ microprogramming system relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential information...

Liblouis compilePassOpcode Buffer Overflow

The vulnerability of the compilePassOpcodecompileTranslationTable.c function in the Liblouis translator is related to the execution of an operation outside of the buffer in memory. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

CVE-2025-38511

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Clear all LMTT pages on alloc Our LMEM buffer objects are not cleared by default on alloc and during VF provisioning we only setup LMTT PTEs for the actually provisioned LMEM range. But beyond that valid range we might...

CVE-2025-38511

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Clear all LMTT pages on alloc Our LMEM buffer objects are not cleared by default on alloc and during VF provisioning we only setup LMTT PTEs for the actually provisioned LMEM range. But beyond that valid range we might...

Adobe Substance 3D Modeler Buffer Overflow Information Disclosure

The vulnerability of the Adobe Substance 3D Modeler software for 3D modeling is related to reading data beyond the buffer boundaries of memory. Exploiting this vulnerability can allow an attacker to disclose confidential information...

Adobe Substance 3D Modeler Buffer Overflow Information Disclosure

The vulnerability of the Adobe Substance 3D Modeler software for 3D modeling is related to reading data beyond the buffer limit of memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

NVIDIA Triton Inference Server Stack Overflow Vulnerability

Triton Inference Server is a high-performance inference service engine developed by NVIDIA, designed for AI model deployment in production environments, with support for a variety of frameworks TensorFlow, PyTorch, ONNX, etc. and optimized inference performance for GPUs and CPUs. A stack overflow...

IBM Tivoli Monitoring Buffer Overflow

The vulnerability of the IBM Tivoli Monitoring information infrastructure lies in the overflow of buffers in the dynamic memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause server failures...

NVIDIA Triton Inference Server Buffer Overflow

The vulnerability of the software for deploying and executing NVIDIA Triton Inference Server previously known as TensorRT Inference Server is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause service failures, gain unauthorized access...

Security Bulletin: Astronomer with IBM is vulnerable to several vulnerabilities

Summary Open source software is used by Astronomer with IBM as part of overall processing functionality. Vulnerability Details CVEID:CVE-2021-33194 DESCRIPTION: golang.org/x/net before v0.0.0-20210520170846-37e1c6afe023 allows attackers to cause a denial of service infinite loop via crafted...

CVE-2025-55159: Improper Restriction of Operations within the Bounds of a Memory Buffer

slab is a pre-allocated storage for a uniform data type. In version 0.4.10, the getdisjointmut method incorrectly checked if indices were within the slab's capacity instead of its length, allowing access to uninitialized memory. This could lead to undefined behavior or potential crashes. This has...

Linux Distros Unpatched Vulnerability : CVE-2023-28772

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel before 5.13.3. lib/seqbuf.c has a seqbufputmemhex buffer overflow. CVE-2023-28772 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2022-50226

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leak For some sev ioctl interfaces, input may be passed that is less than or equal t...

Mozilla Firefox Thunderbird Heap Buffer Overflow DoS

The vulnerability in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Mozilla Firefox Thunderbird Heap Buffer Overflow DoS

The vulnerability in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

WebKit DoS

The vulnerability of the web page rendering module in WebKit operating systems for iOS, iPadOS, macOS, tvOS, visionOS, watchOS, and the Safari browser arises from operations that go beyond the buffer limits in memory. Exploiting this vulnerability can allow a malicious actor to cause service...

Windows Event Log Buffer Overflow

The vulnerability of Windows operating system event logs is related to insufficient checking of values in XML log fields. Exploiting this vulnerability can allow an attacker to cause a memory buffer overflow in the event log and re-write it by sending a specially crafted XML file...