php: Single byte overread with convert.quoted-printable-decode filter

A memory-related vulnerability was found in PHP’s filter handling system, particularly when processing input with convert.quoted-printable-decode filters. This issue can lead to a segmentation fault. This vulnerability is triggered through specific sequences of input data, causing PHP to crash...

php: Single byte overread with convert.quoted-printable-decode filter

A memory-related vulnerability was found in PHP’s filter handling system, particularly when processing input with convert.quoted-printable-decode filters. This issue can lead to a segmentation fault. This vulnerability is triggered through specific sequences of input data, causing PHP to crash...

Adobe Dimension 缓冲区错误漏洞

Adobe Dimension is an application for 3D design and rendering. An out-of-bounds write vulnerability exists in Adobe Dimension. The vulnerability is due to a component of the program failing to properly manage memory boundaries when processing specific input. An attacker could exploit the...

Apple多款产品 安全漏洞

Apple iOS is an operating system developed for mobile devices. apple watchOS is an operating system for smartwatches. apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in several Apple products that originates from memory mishandling, which could allow an...

The vulnerability of the Queue Manager, a software tool for managing containerized environments by IBM MQ Operator, allows a intruder to cause a service failure.

The vulnerability of the Queue Manager, a software tool for managing containerized environments in IBM MQ Operator, relates to the use of memory after it is released. Exploiting this vulnerability could allow an attacker to cause service interruptions...

CVE-2025-20976

Out-of-bounds read in applying binary of text content in Samsung Notes prior to version 4.4.29.23 allows attackers to read out-of-bounds memory...

CVE-2025-20976

Out-of-bounds read in applying binary of text content in Samsung Notes prior to version 4.4.29.23 allows attackers to read out-of-bounds memory...

CVE-2025-20976

CVE-2025-20976 concerns Samsung Notes. Multiple sources confirm an out-of-bounds read in the binary-integration step when applying binary of text content, affecting Samsung Notes prior to version 4.4.29.23. The issue allows reading beyond allocated memory, with impact on confidentiality. A fix is...

CVE-2025-20964

CVE-2025-20964 describes an out-of-bounds write in parsing media files within the libsavsvc.so component, enabling local attackers to write memory outside allocated buffers. Multiple sources corroborate the issue and link it to Samsung SMR updates; Samsung’s advisory references a May-2025 SMR rel...

CVE-2025-20937

CVE-2025-20937 describes an out-of-bounds write in the Keymaster trustlet prior to Samsung SMR May-2025 Release 1. The vulnerability enables local privileged attackers to write out-of-bounds memory, potentially causing memory corruption with high impact (confidentiality/ integrity/ availability)....

PT-2025-20048 · Unknown · Libsavsac.So

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue is related to an out-of-bounds write in memory initialization in libsavsvc.so. This allows local attackers to write out-of-bounds memory. The problem is present prior to the SMR...

The vulnerability of the SDK components of AirPlay and CarPlay Communication Plug-in, which allows a perpetrator to cause a service failure.

The vulnerability of the SDK components of AirPlay and CarPlay Communication Plug-in relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of Cobalt Ashlar-Vellum’s software for parametric automated design and 3D modeling lies in its ability to read data beyond the buffer limit in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Cobalt Ashlar-Vellum software for parametric automated design and 3D modeling lies in the reading of data beyond the buffer limit in memory during the processing of CO files. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the Routing Protocol Daemon (RPD) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to cause service interruptions.

The vulnerability of the Routing Protocols Daemon RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending...

CVE-2023-53065

CVE-2023-53065 is a Linux kernel vulnerability in perf/core where perf_output_begin was invoked with an incorrect parameter in perf_event_bpf_output. Syzkaller reported a KASAN stack-out-of-bounds issue, traced through __perf_event_header__init_id, causing memory overwrites. The root cause is the...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.11 bug fix and security update

Red Hat OpenShift Container Platform release 4.18.11 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a...

php: Single byte overread with convert.quoted-printable-decode filter

A memory-related vulnerability was found in PHP’s filter handling system, particularly when processing input with convert.quoted-printable-decode filters. This issue can lead to a segmentation fault. This vulnerability is triggered through specific sequences of input data, causing PHP to crash...

Microsoft Edge browser’s vulnerability, related to the use of memory after its release, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Edge browser is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of Windows operating systems relates to the use of memory after it is freed, allowing an attacker to increase their privileges.

Vulnerabilities of Windows operating systems are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow attackers to increase their privileges...

The vulnerability of the ___do_page_fault() function in the arch/powerpc/mm/fault.c module of the PowerPC platform support for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dopagefault function in the arch/powerpc/mm/fault.c module of the PowerPC platform support for the Linux operating system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...