5570 matches found
SUSE CVE-2025-0685
A flaw was found in grub2. When reading data from a jfs filesystem, grub's jfs filesystem module uses user-controlled parameters from the filesystem geometry to determine the internal buffer size, however, it improperly checks for integer overflows. A maliciouly crafted filesystem may lead some o...
The vulnerability of D-Link DSR series router microprogramming software, related to the execution of operations beyond the buffer in memory, allows a hacker to execute arbitrary code.
The vulnerability of D-Link DSR series router microprogramming software lies in the fact that the operation data is written outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the SNMP protocol implementation in Cisco IOS and IOS XE operating systems allows a intruder to trigger a service failure.
The vulnerability of SNMP protocol implementations in Cisco IOS and IOS XE operating systems stems from operations that go beyond buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted requests...
The vulnerability of the SceneKit component in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS allows attackers to disclose protected information.
The vulnerability of the SceneKit component in macOS, iOS, iPadOS, watchOS, tvOS, and visionOS relates to operations where data is written beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by security...
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code and trigger service failures.
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to operations that go beyond buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and cause service interruptions...
CLSA-2025-1739525834 kernel: Fix of 24 CVEs
media: uvcvideo: Skip parsing frames of type UVCVSUNDEFINED in uvcparseformat CVE-2024-53104 - wifi: ath9k: add range check for connrspepid in htcconnectservice CVE-2024-53156 - xsk: fix OOB map writes when deleting elements CVE-2024-56614 - hvsock: Initializing vsk-trans to NULL to prevent a...
The vulnerability of the WLAN STA Driver software driver from MediaTek allows a hacker to execute arbitrary code.
The vulnerability of the WLAN STA Driver microprogramming software chip from MediaTek relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the sub_422eb8 function in Linksys E8450 Wi-Fi routers allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the sub422eb8 function in Linksys E8450 Wi-Fi routers’ microprogramming software is related to the copying of buffers without checking the size of the input data during the processing of the strncpy parameter. Exploiting this vulnerability allows an attacker to execute...
CVE-2024-28759
A crafted network packet may cause a buffer overrun in Wind River VxWorks 7 through 23.09...
CLSA-2025-1739352814 kernel: Fix of 13 CVEs
media: uvcvideo: Skip parsing frames of type UVCVSUNDEFINED in uvcparseformat CVE-2024-53104 - btrfs: fix information leak in btrfsioctllogicaltoino CVE-2024-35849 - net: afcan: do not leave a dangling sk pointer in cancreate CVE-2024-56603 - netfilter: xtables: fix LED ID check in ledtgcheck...
Vulnerabilities of Linux operating system’s IB/core components, allowing attackers to cause service failures
The vulnerability of Linux operating system’s IB/core components is related to the execution of operations beyond the boundaries of memory buffers. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the SCSI component in the Linux operating system allows a hacker to increase their privileges.
The vulnerability of the SCSI component in the Linux operating system is related to the operation of the process beyond the memory buffer boundaries. Exploiting this vulnerability can allow an attacker to gain elevated privileges...
CLSA-2025-1739292069 kernel: Fix of 13 CVEs
media: uvcvideo: Skip parsing frames of type UVCVSUNDEFINED in uvcparseformat CVE-2024-53104 - btrfs: fix information leak in btrfsioctllogicaltoino CVE-2024-35849 - net: afcan: do not leave a dangling sk pointer in cancreate CVE-2024-56603 - netfilter: xtables: fix LED ID check in ledtgcheck...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: Firmware: csdsp: Use strnlen on name fields in V1 wmfw files. Use strnlen instead of strlen for the algorithm and coefficient name string arrays in V1 wmfw files. In V1 wmfw files, the name is a NUL-terminated string stored in a...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: The offset and length are sanitized before calling skbchecksum. If the access to the sum of the offset and length exceeds the skbuff length, then skbchecksum triggers a BUGON. skbchecksum internally subtrac...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: drm/amd/display: Check the index msgid before reading or writing. WHAT msgid is used as an array index, and it cannot be a negative value. Therefore, it cannot be equal to MODHDCPMESSAGEIDINVALID -1. HOW Check whether msgid is...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: Avoiding hwdesc array overrun in dw-axi-dmac I have a use case where nrbuffers = 3, and each descriptor consists of 3 segments. As a result, the DMA channel descriptors allocated are 9. Since axidescput handles the hwdesc by...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: ima: fixed the buffer overflow in imaeventdigestinitcommon. The function imaeventdigestinit calls imaeventdigestinitcommon, with HASHALGOLAST being used to access the array hashdigestsize. This leads to a buffer overflow. A...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: drm/amd/display: Check msgid before processing a transaction. WHY & HOW “HDCPMESSAGEIDINVALID -1” is not a valid msgid, nor is it a valid array index. Therefore, it needs to be checked before being used. This fix addresses 4...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: Firmware: csdsp: Prevent buffer overflows when processing V2 algorithm headers. It is necessary to ensure that all fields of a V2 algorithm header fit within the available firmware data buffer. The wmfw V2 format introduced...