Symlink Attack

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Symlink Attack in the handling of browser trace and download output paths, specifically when processing temporary output. An attacker can overwrite arbitrary files by exploiting symlink...

CVE-2025-47377

Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls...

CVE-2025-47376

Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls...

CVE-2025-47386 Use After Free in Automotive Audio

Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs...

CVE-2025-47386 Use After Free in Automotive Audio

Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs...

EUVD-2025-208193

Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs...

EUVD-2025-208189

Memory Corruption while processing IOCTL calls when concurrent access to shared buffer occurs...

CVE-2025-47381 Use After Free in Automotive Audio

Memory Corruption while processing IOCTL calls when concurrent access to shared buffer occurs...

CVE-2025-47381

Memory Corruption while processing IOCTL calls when concurrent access to shared buffer occurs...

CVE-2025-47377

CVE-2025-47377 is described across connected records as a use-after-free/memory corruption issue in automotive audio related to IOCTL processing: a buffer is accessed after it has been freed, leading to potentially high impact. The CVE entry is linked to an automotive audio context, with a CVSS 3...

EUVD-2025-208186

Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls...

CVE-2025-47376

Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls...

CVE-2025-47376 Use After Free in Automotive Audio

Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls...

EUVD-2025-208185

Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls...

CVE-2025-47376 Use After Free in Automotive Audio

Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls...

CVE-2025-47375

Memory corruption while handling different IOCTL calls from the user-space simultaneously...

EUVD-2025-208184

Memory corruption while handling different IOCTL calls from the user-space simultaneously...

libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read

A flaw was found in libpng, a reference library for processing PNG Portable Network Graphics image files. A local attacker could exploit a heap buffer over-read vulnerability in the pngimagefinishread function by tricking a user into processing a specially crafted interlaced 16-bit PNG file with ...

PT-2026-22645

Name of the Vulnerable Software and Affected Versions affected versions not specified Description A memory corruption issue exists when processing IOCTL calls with concurrent access to a shared buffer. This can lead to system instability or potential code execution. Approximately 1000 devices...

PT-2026-22649

Name of the Vulnerable Software and Affected Versions affected versions not specified Description A memory corruption issue exists when invoking IOCTL calls with concurrent access to a shared buffer. This can lead to unpredictable system behavior. Approximately 1000 devices worldwide are estimate...