36 matches found
CVE-2026-47550
A flaw was found in the NVIDIA GPU display driver. The kernel mode layer fails to properly validate user-supplied memory pointers before dereferencing them. A local attacker with low privileges can exploit this issue by submitting a crafted pointer, potentially leading to arbitrary code execution...
Astra Linux – Vulnerability in Linux 5.10, Linux
In the Linux kernel, the following vulnerability has been resolved: spi: bcm2835: bcm2835spihandleerr: Fixed the issue of NULL pointer dereferencing for non-DMA transfers. If an IRQ-based transfer times out, the bcm2835spihandleerr function is called. Since commit 1513ceee70f2 “spi: bcm2835: Drop...
DEBIAN-CVE-2026-44508
Rsync is a file-copying tool that uses a delta-transfer algorithm to synchronize remote and local files. In versions prior to 3.4.3, the receiver's compressed-token decoder accumulated a 32-bit signed counter without checking for overflow. A malicious sender can trigger an overflow that with...
CVE-2026-44508
Rsync is a file-copying tool that uses a delta-transfer algorithm to synchronize remote and local files. In versions prior to 3.4.3, the receiver's compressed-token decoder accumulated a 32-bit signed counter without checking for overflow. A malicious sender can trigger an overflow that with...
PT-2026-61714
Name of the Vulnerable Software and Affected Versions rsync versions prior to 3.4.3 Description rsync is a file-copying tool utilizing a delta-transfer algorithm to synchronize files. The receiver's compressed-token decoder fails to check for overflow when accumulating a 32-bit signed counter. A...
rsync: rsync: Remote memory disclosure via integer overflow in compressed-token decoding
A flaw was found in rsync. An authenticated daemon peer can exploit an integer overflow vulnerability in the compressed-token decoder. By carefully manipulating the compressed-token, a malicious sender can trigger an overflow, leading to remote memory disclosure. This allows an attacker to leak...
DFVULN-839 - Use-After-Free in MessagePack::Buffer#clear Enables Cross-Buffer Disclosure
Summary MessagePack::Bufferclear shifts out every chunk and returns its 4 KiB rmem page to the shared pool, but does not reset the buffer's rmem cursor rmemlast, rmemend, rmemowner. The next write sees "unused rmem space" left over from the freed page and hands back a slice of memory that has...
PT-2026-61487
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the spi: qup driver where the system may dereference an error pointer if DMA Direct Memory Access setup fails during the probe process. When DMA setup fails, the drive...
CVE-2025-47398
Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers...
CVE-2025-47398 Use After Free in Graphics
Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers...
EUVD-2025-206610
Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers...
PT-2026-5676
Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers...
CVE-2025-47398: Use After Free
Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers...
GNU GRUB 安全漏洞
GNU GRUB is a Linux system boot program from the GNU community. A security vulnerability exists in GNU GRUB that originates from incorrectly retaining memory pointers during file closure, which could lead to a denial of service...
EUVD-2018-21592
Malware in sbrugna...
EUVD-2024-36105
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2018-25103
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There exists use-after-free vulnerabilities in lighttpd = 1.4.50 request parsing which might read from invalid pointers to memory used in the same request, not...
CVE-2018-25103
There exists use-after-free vulnerabilities in lighttpd = 1.4.50 request parsing which might read from invalid pointers to memory used in the same request, not from other requests...
PT-2025-20990 · Microsoft · Office Excel
Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel affected versions not specified Description: The issue is related to the release of an invalid pointer or reference in Microsoft Office Excel, allowing an unauthorized attacker to execute code locally. This can be...