libplist allows attackers to cause a denial of service (large memory allocation and crash) via vectors involving an offset size of zero.

...

CVE-2023-53483 ACPI: processor: Check for null return of devm_kzalloc() in fch_misc_setup()

In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: Check for null return of devmkzalloc in fchmiscsetup devmkzalloc may fail, clkdata-name might be NULL and will cause a NULL pointer dereference later. rjw: Subject and changelog edits...

CVE-2023-53454

CVE-2023-53454 - Linux kernel HID multitouch fix : The issue arises from using the input_dev name in a devm-allocated string, which can cause a use-after-free when input_dev is unregistered and a uevent referencing the name fires. The patch changes the reference to the HID device for devm allocat...

CVE-2023-53454 HID: multitouch: Correct devm device reference for hidinput input_dev name

In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Correct devm device reference for hidinput inputdev name Reference the HID device rather than the input device for the devm allocation of the inputdev name. Referencing the inputdev would lead to a use-after-free...

UBUNTU-CVE-2025-39913

In the Linux kernel, the following vulnerability has been resolved: tcpbpf: Call skmsgfree when tcpbpfsendverdict fails to allocate psock-cork. syzbot reported the splat below. 0 The repro does the following: 1. Load a skmsg prog that calls bpfmsgcorkbytesmsg, corkbytes 2. Attach the prog to a...

UBUNTU-CVE-2025-39891

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Initialize the chanstats array to zero The adapter-chanstats array is initialized in mwifiexinitchannelscangap with vmalloc, which doesn't zero out memory. The array is filled in mwifiexupdatechanstatistics and the...

CVE-2025-39891

CVE-2025-39891 (Linux kernel) affects the wifi: mwifiex driver. The chan_stats[] memory is allocated with vmalloc() and not zeroed, and the array is only partially initialized in mwifiex_update_chan_statistics(). This can allow an information leak if data hasn’t been filled before a user query vi...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not freeing memory allocated by devsetname, which could lead to a memory leak...

K000156710: Multiple ImageMagick vulnerabilities

Security Advisory Description CVE-2016-8677 The AcquireQuantumPixels function in MagickCore/quantum.c in ImageMagick before 7.0.3-1 allows remote attackers to have unspecified impact via a crafted image file, which triggers a memory allocation failure. CVE-2016-8862 The AcquireMagickMemory functi...

Amazon Linux 2023 : expat, expat-devel, expat-static (ALAS2023-2025-1196)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1196 advisory. libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing. CVE-2025-59375 Tenable has extracted the preceding...

Important: expat

Issue Overview: libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing. CVE-2025-59375 Affected Packages: expat Issue Correction: Run dnf update expat --releasever 2023.9.20250929 or dnf update --advisory...

Linux net/ipv6/mcast.c DoS

The vulnerability of the net/ipv6/mcast.c component in the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel Unbounded Memory DoS

The vulnerability of the Linux operating system’s kernel is related to the allocation of unlimited memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux fs/erofs/fileio.c DoS

The vulnerability of the fs/erofs/fileio.c component in the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel mm/vma DoS

The vulnerability of the mm/vma component in the Linux operating system’s kernel is related to the allocation of unlimited memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the tomoyowritecontrol function in the tomoyo/common.c component of the Linux kernel is related to the allocation of unlimited memory. Exploiting this vulnerability could allow a attacker to cause a service failure...

OpenImageIO imagebuf.cpp Heap Buffer Overflow DoS

The vulnerability of the imagebuf.cpp component in the OpenImageIO image processing library is related to the allocation of unlimited memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Linux kernel Unbounded Memory DoS

The vulnerability of the Linux operating system’s kernel is related to the allocation of unlimited memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux genirq/msi Component Confidential Data Access DoS

The vulnerability of the genirq/msi component in the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

SUSE CVE-2025-60019

glib-networking's OpenSSL backend fails to properly check the return value of memory allocation routines. An out of memory condition could potentially result in writing to an invalid memory location...