CVE-2025-3632

IBM 4769 Developers Toolkit 7.0.0 through 7.5.52 could allow a remote attacker to cause a denial of service in the Hardware Security Module HSM due to improper memory allocation of an excessive size...

CVE-2025-3632

CVE-2025-3632 affects IBM 4769 Developers Toolkit versions 7.0.0–7.5.52. The root cause is improper memory allocation of an excessive size in the HSM, which could allow a remote attacker to cause a denial of service. IBM’s security bulletin recommends upgrading to 7.5.62 or later to remediate. Pu...

CVE-2025-3632 IBM 4769 Developers Toolkit denial of service

IBM 4769 Developers Toolkit 7.0.0 through 7.5.52 could allow a remote attacker to cause a denial of service in the Hardware Security Module HSM due to improper memory allocation of an excessive size...

Security Bulletin: Denial of Service Vulnerability in IBM 4769 Developers Toolkit (CVE-2025-3632)

Summary A vulnerability has been discovered in the IBM 4769 Developers Toolkit that could allow a remote attacker to cause a denial of service against the hardware security module HSM. Vulnerability Details CVEID:CVE-2025-3632 DESCRIPTION: IBM 4769 Developers Toolkit could allow a remote attacker...

CVE-2025-47270

nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. The nimiq-network-libp2p subcrate of nimiq/core-rs-albatross is vulnerable to a Denial of Service DoS attack due to uncontrolled memory allocation. Specifically, the...

CVE-2025-47270 nimiq-network-libp2p Uncontrolled Resource Consumption vulnerability

nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. The nimiq-network-libp2p subcrate of nimiq/core-rs-albatross is vulnerable to a Denial of Service DoS attack due to uncontrolled memory allocation. Specifically, the...

CVE-2025-47270 nimiq-network-libp2p Uncontrolled Resource Consumption vulnerability

nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. The nimiq-network-libp2p subcrate of nimiq/core-rs-albatross is vulnerable to a Denial of Service DoS attack due to uncontrolled memory allocation. Specifically, the...

CVE-2025-47270

The CVE-2025-47270 entry concerns nimiq/core-rs-albatross, specifically the nimiq-network-libp2p subcrate. The vulnerability arises in Discovery message handling, which allocates a buffer based on a length value provided by the peer without an upper bound. Because the length is a u32, an attacker...

CVE-2025-3632: Memory Allocation with Excessive Size Value

IBM 4769 Developers Toolkit 7.0.0 through 7.5.52 could allow a remote attacker to cause a denial of service in the Hardware Security Module HSM due to improper memory allocation of an excessive size...

PT-2025-20726 · Ibm · Ibm 4769 Developers Toolkit

Name of the Vulnerable Software and Affected Versions: IBM 4769 Developers Toolkit versions 7.0.0 through 7.5.52 Description: The issue allows a remote attacker to cause a denial of service in the Hardware Security Module HSM due to improper memory allocation of an excessive size. Recommendations...

PT-2025-20692

Name of the Vulnerable Software and Affected Versions nimiq/core-rs-albatross versions prior to 1.1.0 Description The issue is related to uncontrolled memory allocation in the nimiq-network-libp2p subcrate of nimiq/core-rs-albatross, which can lead to a Denial of Service DoS attack. Specifically,...

IBM 4769 Developers Toolkit security vulnerabilities

IBM 4769 Developers Toolkit is a financial-grade Hardware Security Module HSM development suite for cryptographic application development and testing from International Business Machines IBM. A security vulnerability exists in IBM 4769 Developers Toolkit version 7.5.52 and earlier, which stems fr...

core-rs-albatross Resource Management Error Vulnerability

core-rs-albatross is an open source Rust implementation of the Albatross protocol by Nimiq. A resource management error vulnerability exists in core-rs-albatross versions prior to v1.1.0, which stems from uncontrolled memory allocation and could lead to a denial of service attack...

K000151255: GStreamer vulnerability CVE-2024-47606

Security Advisory Description GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemuxparsetheoraextension within qtdemux.c. The vulnerability occurs due to an underflow of the gint size variable, which causes size...

DEBIAN-CVE-2025-37867

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Silence oversized kvmalloc warning syzkaller triggered an oversized kvmalloc warning. Silence it by adding GFPNOWARN. syzkaller log: WARNING: CPU: 7 PID: 518 at mm/util.c:665 kvmallocnodenoprof+0x175/0x180 CPU: 7 UID: ...

UBUNTU-CVE-2025-37852

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: handle amdgpucgscreatedevice errors in amdpowerplaycreate Add error handling to propagate amdgpucgscreatedevice failures to the caller. When amdgpucgscreatedevice fails, release hwmgr and return -ENOMEM to prevent nul...

CVE-2025-37867 RDMA/core: Silence oversized kvmalloc() warning

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Silence oversized kvmalloc warning syzkaller triggered an oversized kvmalloc warning. Silence it by adding GFPNOWARN. syzkaller log: WARNING: CPU: 7 PID: 518 at mm/util.c:665 kvmallocnodenoprof+0x175/0x180 CPU: 7 UID: ...

CVE-2025-37852

CVE-2025-37852 affects the Linux kernel DRM/AMDGPU stack. The root cause is errors from amdgpu_cgs_create_device() in amd_powerplay_create(), which could lead to a null pointer dereference if not handled. The fix propagates the failure to the caller, releases the hwmgr, and returns -ENOMEM instea...

CVE-2025-37852 drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create()

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: handle amdgpucgscreatedevice errors in amdpowerplaycreate Add error handling to propagate amdgpucgscreatedevice failures to the caller. When amdgpucgscreatedevice fails, release hwmgr and return -ENOMEM to prevent nul...

CVE-2025-37841 pm: cpupower: bench: Prevent NULL dereference on malloc failure

In the Linux kernel, the following vulnerability has been resolved: pm: cpupower: bench: Prevent NULL dereference on malloc failure If malloc returns NULL due to low memory, 'config' pointer can be NULL. Add a check to prevent NULL dereference...