Azure Linux 3.0 Security Update: libsoup (CVE-2025-2784)

The version of libsoup installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-2784 advisory. - A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via...

SAMSUNG SMR 安全漏洞

SAMSUNG SMR is a system patch package from the South Korean company Samsung SAMSUNG. It provides patches for Samsung cell phone applications. SAMSUNG SMR suffers from a security vulnerability that stems from insufficient validation of intent by the broadcast receiver, which could lead to...

libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()

A flaw was found in libsoup. A vulnerability in snifffeedorhtml and skipinsignificantspace functions may lead to a heap buffer over-read...

CVE-2025-21475 Buffer Over-read in Display

Memory corruption while processing escape code, when DisplayId is passed with large unsigned value...

CVE-2025-21475 Buffer Over-read in Display

Memory corruption while processing escape code, when DisplayId is passed with large unsigned value...

CVE-2025-21459 Buffer Over-read in WLAN Host Communication

Transient DOS while parsing per STA profile in ML IE...

CVE-2025-21459 Buffer Over-read in WLAN Host Communication

Transient DOS while parsing per STA profile in ML IE...

CVE-2024-49847 Buffer Over-read in Multi-Mode Call Processor

Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE...

CVE-2024-49847

CVE-2024-49847 describes a transient DoS affecting Qualcomm chipsets during processing of OTA registration messages, caused by incorrect ciphering key data IE. The vulnerability is tied to the OTA handling flow in the chipset/firmware (Qualcomm components). The CVSSv3.1 base is 7.5 (High) with ne...

CVE-2024-49847 Buffer Over-read in Multi-Mode Call Processor

Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE...

CVE-2024-49846 Buffer Over-read in Multi-Mode Call Processor

Memory corruption while decoding of OTA messages from T3448 IE...

CVE-2024-49846 Buffer Over-read in Multi-Mode Call Processor

Memory corruption while decoding of OTA messages from T3448 IE...

CVE-2024-45568 Buffer Over-read in Camera Driver

Memory corruption due to improper bounds check while command handling in camera-kernel driver...

CVE-2024-45568 Buffer Over-read in Camera Driver

Memory corruption due to improper bounds check while command handling in camera-kernel driver...

kernel: nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()

An unchecked buffer bounds flaw was found in the Linux kernel's NVMe TCP Fabrics driver. An attacker with the ability to send a crafted packet to an affected NVMe host could exploit this flaw to alter kernel memory, leading to an escalation of privileges or a compromise of system integrity or...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates when decoding OTA messages from the T3448 IE, which could result in memory corruption...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from the use of an incorrect encryption key data IE when processing registration to receive OTAs, which could result in a temporary denial of service...

MGASA-2025-0148 Updated graphicsmagick packages fix security vulnerabilities

GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call. CVE-2025-32460...

Updated graphicsmagick packages fix security vulnerabilities

GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call. CVE-2025-32460...

CVE-2025-3927

Digigram's PYKO-OUT audio-over-IP AoIP web-server does not require a password by default, allowing any attacker with the target IP address to connect and compromise the device, potentially pivoting to connected network or hardware devices...