Lucene search
+L

4298 matches found

CNVD
CNVD
•added 2025/03/27 12:00 a.m.•178 views

HDF5 H5Z__scaleoffset_decompress_one_byte function buffer overflow vulnerability

HDF5 is a library of HDF open source . HDF5 has a buffer overflow vulnerability , the vulnerability stems from the H5Z scaleoffsetdecompressonebyte function fails to correctly validate the length of the input data size , an attacker can use this vulnerability to cause a denial of service...

7.8CVSS7.2AI score0.00404EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/03/27 12:00 a.m.•23 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an error in the calculation of the erofs offset...

5.5CVSS6.3AI score0.00192EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/27 12:00 a.m.•3 views

CVE-2022-49747: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: erofs/zmap.c: Fix incorrect offset calculation Effective offset to add to length was being incorrectly calculated, which resulted in iomap-length being set to 0, triggering a WARNON in iomapiterdone. Fix that, and describe it in...

5.5CVSS5.9AI score0.00192EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/27 12:00 a.m.•11 views

PT-2025-13289 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to an incorrect offset calculation in the Linux kernel, specifically in the erofs/zmap.c file. This miscalculation resulted in the iomap-length being set to 0,...

4.6CVSS4.9AI score0.00192EPSS
SaveExploits0References19
BDU FSTEC
BDU FSTEC
•added 2025/03/21 12:00 a.m.•19 views

Linux arch/arm/mach-ep93xx/clock.c Heap Buffer Overflow DoS

The vulnerability of the ep93xxdivrecalcrate function in the arch/arm/mach-ep93xx/clock.c module of the Linux operating system is related to a single-bit offset error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of the protected...

7.1CVSS7.2AI score0.00244EPSS
SaveExploits0References20Affected Software6
NVD
NVD
•added 2025/03/14 9:15 p.m.•77 views

CVE-2025-2308

A vulnerability, which was classified as critical, was found in HDF5 1.14.6. This affects the function H5Zscaleoffsetdecompressonebyte of the component Scale-Offset Filter. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed...

7.8CVSS0.00404EPSS
SaveExploits1References4
osv_azl
osv_azl
•added 2025/03/14 9:15 p.m.•31 views

AZL-58810 CVE-2025-2308 affecting package hdf5 1.14.6-4

A vulnerability, which was classified as critical, was found in HDF5 1.14.6. This affects the function H5Zscaleoffsetdecompressonebyte of the component Scale-Offset Filter. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed...

7.8CVSS5.5AI score0.00404EPSS
SaveExploits1References1
osv_debian
osv_debian
•added 2025/03/14 9:15 p.m.•12 views

DEBIAN-CVE-2025-2308

A vulnerability, which was classified as critical, was found in HDF5 1.14.6. This affects the function H5Zscaleoffsetdecompressonebyte of the component Scale-Offset Filter. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed...

7.8CVSS5AI score0.00404EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2025/03/14 9:15 p.m.•29 views

UBUNTU-CVE-2025-2308

A vulnerability, which was classified as critical, was found in HDF5 1.14.6. This affects the function H5Zscaleoffsetdecompressonebyte of the component Scale-Offset Filter. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed...

7.8CVSS5.4AI score0.00404EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
•added 2025/03/14 8:31 p.m.•15 views

CVE-2025-2308 HDF5 Scale-Offset Filter H5Z__scaleoffset_decompress_one_byte heap-based overflow

A vulnerability, which was classified as critical, was found in HDF5 1.14.6. This affects the function H5Zscaleoffsetdecompressonebyte of the component Scale-Offset Filter. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed...

5.3CVSS5.3AI score0.00404EPSS
SaveExploits1References4
CVE
CVE
•added 2025/03/14 8:31 p.m.•175 views

CVE-2025-2308

CVE-2025-2308 affects HDF5 1.14.6, specifically the H5Z__scaleoffset_decompress_one_byte function in the Scale-Offset Filter. The cited issue is a heap-based buffer overflow exploitable via local access; disclosure indicates public exploits and local attack requirements. Several trusted sources (...

7.8CVSS5.3AI score0.00404EPSS
SaveExploits1References4Affected Software1
Mend
Mend
•added 2025/03/14 8:31 p.m.•9 views

CVE-2025-2308

A vulnerability, which was classified as critical, was found in HDF5 1.14.6. This affects the function H5Zscaleoffsetdecompressonebyte of the component Scale-Offset Filter. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed...

7.8CVSS0.00404EPSS
SaveExploits1References7
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:00 a.m.•8 views

iomap: avoid avoid truncating 64-bit offset to 32 bits

...

5.5CVSS7.4AI score0.00217EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:00 a.m.•16 views

filemap: avoid truncating 64-bit offset to 32 bits

...

5.5CVSS7.4AI score0.00215EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/03/14 12:00 a.m.•11 views

PT-2025-11304

Name of the Vulnerable Software and Affected Versions HDF5 version 1.14.6 Description A critical vulnerability was found in HDF5, affecting the function H5Z scaleoffset decompress one byte of the component Scale-Offset Filter. The manipulation leads to heap-based buffer overflow. An attack must b...

7.8CVSS5.2AI score0.00404EPSS
SaveExploits1References29
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/14 12:00 a.m.•6 views

CVE-2025-2308: Heap-based Buffer Overflow

A vulnerability, which was classified as critical, was found in HDF5 1.14.6. This affects the function H5Zscaleoffsetdecompressonebyte of the component Scale-Offset Filter. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed...

7.8CVSS5.5AI score0.00404EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/03/12 9:42 a.m.•7 views

CVE-2025-21847 ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data()

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: stream-ipc: Check for cstream nullity in sofipcmsgdata The nullity of sps-cstream should be checked similarly as it is done in sofsetstreamdataoffset function. Assuming that it is not NULL if sps-stream is NULL is...

7.7AI score0.00218EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2024-26926

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: binder: check offset alignment in bindergetobject Commit 6d98eb95b450 binder: avoid potentia...

7.8CVSS5.4AI score0.00444EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2024-26589

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: bpf: Reject variable offset alu on PTRTOFLOWKEYS For PTRTOFLOWKEYS, checkflowkeysaccess only...

7.8CVSS6AI score0.00239EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/03/03 10:07 a.m.•43 views

CVE-2024-43060 Use of Out-of-range Pointer Offset in Automotive Audio

Memory corruption during voice activation, when sound model parameters are loaded from HLOS to ADSP...

7.8CVSS0.00117EPSS
SaveExploits0References1
Rows per page
Query Builder