CVE-2025-27534

in OpenHarmony v5.0.2 and prior versions allow a local attacker case DOS through missing release of memory...

CVE-2025-25057

in OpenHarmony v5.0.2 and prior versions allow a local attacker case DOS through missing release of memory...

CVE-2025-27534 arkcompiler_ets_runtime has an out-of-bounds read vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker case DOS through missing release of memory...

CVE-2025-27534

CVE-2025-27534 affects OpenHarmony v5.0.2 and earlier. The vulnerability is a local-denial-of-service caused by missing release of memory (memory not freed). Root cause: memory release issue leading to exhaustion under local access. Impact: denial of service when a local attacker triggers the con...

CVE-2025-25057

CVE-2025-25057 affects OpenHarmony v5.0.2 and earlier. The root cause is a memory release issue that can be exploited locally to cause a denial of service (memory leak). The available sources consistently describe a local attacker and a DoS outcome due to unfreed memory, but do not provide concre...

PT-2025-15136 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 5.0.2 Description: The issue allows a local attacker to cause a denial of service DOS through a missing release of memory. Recommendations: For versions prior to 5.0.2, update to a version that includes a fix for...

The vulnerability of the xe_display_fini_noirq() function in the Linux kernel’s Direct Rendering Infrastructure Support driver allows a malicious actor to cause a service failure.

The vulnerability of the xedisplayfininoirq function in the Direct Rendering Infrastructure DRI driver of the Linux operating system is related to improper memory release before deleting the last pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

HDF5 Double Release Vulnerability

HDF5 is a library of HDF open source . HDF5 has a double release vulnerability, which originates from the double release of the parameter mem of the function H5MMrealloc in the file src/H5MM.c. There are no detailed vulnerability details provided...

CVE-2025-21976 fbdev: hyperv_fb: Allow graceful removal of framebuffer

In the Linux kernel, the following vulnerability has been resolved: fbdev: hypervfb: Allow graceful removal of framebuffer When a Hyper-V framebuffer device is unbind, hypervfb driver tries to release the framebuffer forcefully. If this framebuffer is in use it produce the following WARN and henc...

The vulnerability of the extent_write_locked_range() function in the file system of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the extentwritelockedrange function in the file system of the Linux operating system’s kernel relates to improper memory release before deleting the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the audio_element_obu() function in the libavformat library of the Ffmpeg multimedia environment allows a hacker to induce a service failure.

The vulnerability of the audioelementobu function in the libavformat library of the Ffmpeg multimedia environment is related to improper memory release before deleting the last reference „memory leak“ when processing the numparameters parameter. Exploiting this vulnerability can allow an attacker...

Missing Release of Memory after Effective Lifetime

Overview org.infinispan:infinispan-server-rest is an Infinispan Rest Server. Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime via the REST compare API. A user can trigger an OutOfMemoryError by sending many requests with large 1 MiB POST data ...

The vulnerability of the nfs4_set_security_label() function in the fs/nfs/nfs4proc.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the nfs4setsecuritylabel function in the fs/nfs/nfs4proc.c module of the Linux kernel is related to improper memory release before deleting the last reference memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the add_adev() function in the drivers/net/ethernet/microsoft/mana/mana_en.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the addadev function in the drivers/net/ethernet/microsoft/mana/manaen.c module of the Linux kernel is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ibmvnic_xmit() function in the drivers/net/ethernet/ibm/ibmvnic.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the ibmvnicxmit function in the drivers/net/ethernet/ibm/ibmvnic.c file of the Linux kernel is related to improper memory release before deleting the last reference „memory leak“. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the amd_pstate_epp_cpu_exit() function in the drivers/cpufreq/amd-pstate.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the amdpstateeppcpuexit function in the drivers/cpufreq/amd-pstate.c module of the Linux operating system is related to improper memory release before deleting the last reference „memory leak“. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the msft_add_address_filter_sync() function in the net/bluetooth/msft.c module of the Linux kernel’s Bluetooth subsystem allows a malicious actor to cause a service failure.

The vulnerability of the msftaddaddressfiltersync function in the net/bluetooth/msft.c module of the Linux kernel’s Bluetooth subsystem is related to improper memory release before deleting the last reference „memory leak“. Exploiting this vulnerability could allow a attacker to cause a service...

The vulnerability of the nft_data_hold() function in the net/netfilter/nf_tables_api.c module of the netfilter component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the nftdatahold function in the net/netfilter/nftablesapi.c module of the netfilter component of the Linux operating system is related to improper memory release before deleting the last reference memory leak. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the nft_mapelem_deactivate() function in the net/netfilter/nf_tables_api.c module of the netfilter component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the nftmapelemdeactivate function in the net/netfilter/nftablesapi.c module of the netfilter component of the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the restore_planes_and_stream_state() function in the drivers/gpu/drm/amd/display/dc/core/dc.c kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the restoreplanesandstreamstate function in the drivers/gpu/drm/amd/display/dc/core/dc.c kernel of the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the...