webkitgtk: Processing maliciously crafted web content may lead to memory corruption

A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling...

Radare2 缓冲区错误漏洞

Radare2 is a Libre reverse framework open-sourced by Radare for Unix geeks. A buffer error vulnerability exists in Radare2 versions prior to 5.9.9, which stems from improperly restricted memory buffer manipulation that could result in a buffer overflow...

CVE-2025-26263

GeoVision ASManager Windows desktop application with the version 6.1.2.0 or less fixed in 6.2.0, is vulnerable to credentials disclosure due to improper memory handling in the ASManagerService.exe process...

CVE-2025-26263

GeoVision ASManager Windows desktop application with the version 6.1.2.0 or less fixed in 6.2.0, is vulnerable to credentials disclosure due to improper memory handling in the ASManagerService.exe process...

CVE-2025-26263

CVE-2025-26263 affects GeoVision ASManager Windows desktop application (GV-ASManager)

CVE-2025-26263

GeoVision ASManager Windows desktop application with the version 6.1.2.0 or less fixed in 6.2.0, is vulnerable to credentials disclosure due to improper memory handling in the ASManagerService.exe process...

CVE-2025-26263

GeoVision ASManager Windows desktop application with the version 6.1.2.0 or less fixed in 6.2.0, is vulnerable to credentials disclosure due to improper memory handling in the ASManagerService.exe process...

GeoVision ASManager 安全漏洞

GeoVision ASManager GV-ASManager is an access control system developed by the Chinese company GeoVision. A credential disclosure vulnerability exists in the GeoVision ASManager Windows Application due to improper memory handling in the ASManagerService.exe process. An attacker can exploit this...

CVE-2025-21738

CVE-2025-21738 describes a Linux kernel vulnerability in the ata libata-sff path where ata_pio_sector() could write outside the allocated buffer, potentially corrupting memory. The issue arises when handling a SCSI_IOCTL_SEND_COMMAND (out_len 0xd42) with SCSI command ATA_16 PASS-THROUGH, ATA_NOP,...

CVE-2022-49676

In the Linux kernel, the following vulnerability has been resolved: memory: samsung: exynos5422-dmc: Fix refcount leak in ofgetdramtimings ofparsephandle returns a node pointer with refcount incremented, we should use ofnodeput on it when not need anymore. This function doesn't call ofnodeput in...

CVE-2022-49714

The CVE-2022-49714 item concerns a refcount leak in the Linux kernel’s irqchip/realtek-rtl code within map_interrupts. The root cause was that of_find_node_by_phandle() returned a node pointer with an incremented refcount and missing of_node_put() on all paths, including error paths. The fix is t...

CVE-2022-49676 memory: samsung: exynos5422-dmc: Fix refcount leak in of_get_dram_timings

In the Linux kernel, the following vulnerability has been resolved: memory: samsung: exynos5422-dmc: Fix refcount leak in ofgetdramtimings ofparsephandle returns a node pointer with refcount incremented, we should use ofnodeput on it when not need anymore. This function doesn't call ofnodeput in...

CVE-2022-49097 NFS: Avoid writeback threads getting stuck in mempool_alloc()

In the Linux kernel, the following vulnerability has been resolved: NFS: Avoid writeback threads getting stuck in mempoolalloc In a low memory situation, allow the NFS writeback code to fail without getting stuck in infinite loops in mempoolalloc...

CVE-2022-49049 mm/secretmem: fix panic when growing a memfd_secret

In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix panic when growing a memfdsecret When one tries to grow an existing memfdsecret with ftruncate, one gets a panic 1. For example, doing the following reliably induces the panic: fd = memfdsecret; ftruncatefd, 10;...

CVE-2025-26596

A heap overflow flaw was found in X.Org and Xwayland. The computation of the length in XkbSizeKeySyms differs from what is written in XkbWriteKeySyms, which may lead to a heap-based buffer overflow...

USN-7278-1 openssl vulnerabilities

George Pantelakis and Alicja Kario discovered that OpenSSL had a timing side-channel when performing ECDSA signature computations. A remote attacker could possibly use this issue to recover private data. CVE-2024-13176 It was discovered that OpenSSL incorrectly handled certain memory operations...

Ubuntu: Security Advisory (USN-7273-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco BroadWorks Denial of Service Vulnerability

Cisco BroadWorks is a carrier-grade unified communications software platform from Cisco. It is used to deploy cloud calls from public network platforms on any type of wired or wireless network architecture. A denial of service vulnerability exists in Cisco BroadWorks that stems from improper memo...

CVE-2025-25467

Insufficient tracking and releasing of allocated used memory in libx264 git master allows attackers to execute arbitrary code via creating a crafted AAC file...

libxml: use-after-free in xmlXIncludeAddNode

A flaw was found in libxml2 where improper handling of memory allocation failures in libxml2 can lead to crashes, memory leaks, or inconsistent states. While an attacker cannot directly control allocation failures, they may trigger denial-of-service conditions under extreme system stress...