CVE-2025-47386 Use After Free in Automotive Audio

Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs...

CVE-2025-47381 Use After Free in Automotive Audio

Memory Corruption while processing IOCTL calls when concurrent access to shared buffer occurs...

CVE-2025-47381

Memory Corruption while processing IOCTL calls when concurrent access to shared buffer occurs...

EUVD-2025-208189

Memory Corruption while processing IOCTL calls when concurrent access to shared buffer occurs...

CVE-2025-47377

CVE-2025-47377 is described across connected records as a use-after-free/memory corruption issue in automotive audio related to IOCTL processing: a buffer is accessed after it has been freed, leading to potentially high impact. The CVE entry is linked to an automotive audio context, with a CVSS 3...

EUVD-2025-208186

Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls...

EUVD-2025-208185

Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls...

CVE-2025-47376 Use After Free in Automotive Audio

Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls...

CVE-2025-47376

Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls...

CVE-2025-47376 Use After Free in Automotive Audio

Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls...

EUVD-2025-208184

Memory corruption while handling different IOCTL calls from the user-space simultaneously...

CVE-2025-47375

Memory corruption while handling different IOCTL calls from the user-space simultaneously...

libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read

A flaw was found in libpng, a reference library for processing PNG Portable Network Graphics image files. A local attacker could exploit a heap buffer over-read vulnerability in the pngimagefinishread function by tricking a user into processing a specially crafted interlaced 16-bit PNG file with ...

PT-2026-22592

A reflected Cross-Site Scripting XSS vulnerability in the RaiseError function of Skrol29 TbsZip version 2.17 and earlier allows remote attackers to execute arbitrary web script or HTML via a crafted payload in a filename parameter e.g., to the FileRead function. This occurs because the error...

PT-2026-22640

Name of the Vulnerable Software and Affected Versions affected versions not specified Description A memory corruption issue exists when handling various IOCTL calls originating from user-space concurrently. This can lead to unpredictable system behavior. Recommendations At the moment, there is no...

PT-2026-22642

Name of the Vulnerable Software and Affected Versions affected versions not specified Description A memory corruption issue exists when processing IOCTL calls. This occurs due to accessing a buffer after it has been freed. The issue involves a memory corruption vulnerability that could potentiall...

CVE-2025-65465

A reflected Cross-Site Scripting XSS vulnerability in the RaiseError function of Skrol29 TbsZip version 2.17 and earlier allows remote attackers to execute arbitrary web script or HTML via a crafted payload in a filename parameter e.g., to the FileRead function. This occurs because the error...

PT-2026-22645

Name of the Vulnerable Software and Affected Versions affected versions not specified Description A memory corruption issue exists when processing IOCTL calls with concurrent access to a shared buffer. This can lead to system instability or potential code execution. Approximately 1000 devices...

Qualcomm Chipsets Resource Management Vulnerability

Qualcomm Chipsets are a series of chipset developed by Qualcomm Incorporation. Qualcomm Chipsets have a resource management vulnerability that arises from processing multiple IOCTL calls from the user space simultaneously, which may lead to memory corruption...

WordPress plugin Blocksy has a cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...