CVE-2025-27072

CVE-2025-27072 describes an information-disclosure issue in Qualcomm chipsets during EAVB BE side packet processing with an invalid header length. Connected sources reiterate: vulnerable component is in the EAVB BE processing path; root cause relates to handling of header lengths leading to leaka...

PT-2025-32137 · Eavb · Eavb

Name of the Vulnerable Software and Affected Versions: versions prior to 2025-27072 Description: An information disclosure issue exists while processing a packet at the EAVB BE side with an invalid header length. Recommendations: At the moment, there is no information about a newer version that...

Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-1506002333 fixes several issues. The following security issues were fixed: CVE-2024-56664: bpf, sockmap: Fix race between element replace and close bsc1235250. CVE-2025-37797: netsched: hfsc: Fix a UAF vulnerability in class handling bsc1245793...

ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_match_host_subprotocol

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=4687656288321536 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzprocesspacket Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x5040000000bc Crash State...

CVE-2025-27058

Memory corruption while processing packet data with exceedingly large packet...

CVE-2025-27058 Buffer Copy Without Checking Size of Input in Computer Vision

Memory corruption while processing packet data with exceedingly large packet...

CVE-2025-27058

CVE-2025-27058 is a memory corruption issue in Qualcomm chipsets triggered by processing exceedingly large packets. Affected component/impact: high-severity (CVSS v3.1: High confidentiality, integrity, availability; Local attack, low exploitability required). No exploitation details are provided ...

CVE-2025-27052

CVE-2025-27052 is a memory corruption issue in Qualcomm chipsets where data packets processed by the diagnostic interface from Unix clients trigger corruption. Affected component: Qualcomm diag handling (including closed-source components). Root cause: memory corruption during processing of diagn...

CVE-2025-1991

IBM Informix Dynamic Server 12.10,14.10, and15.0 could allow a remote attacker to cause a denial of service due to an integer underflow when processing packets...

CVE-2025-1991

CVE-2025-1991 affects IBM Informix Dynamic Server versions 12.10, 14.10, and 15.0. The vulnerability is a denial of service caused by an integer underflow during packet processing. IBM’s advisory (ID 7238455) lists fixed releases: 12.10.xC16W2 for 12.10 and 14.10.xC11W2 for 14.10; 15.0 is also li...

IBM Informix Dynamic Server 数字错误漏洞

IBM Informix Dynamic Server IDS is a scalable object-relational database server from International Business Machines IBM that provides continuous data availability and disaster recovery, among other features, for clustered data centers. A numeric error vulnerability exists in IBM Informix Dynamic...

CVE-2025-1991: Integer Underflow (Wrap or Wraparound)

IBM Informix Dynamic Server 12.10,14.10, and15.0 could allow a remote attacker to cause a denial of service due to an integer underflow when processing packets...

CVE-2024-53021

Information disclosure may occur while processing goodbye RTCP packet from network...

kernel: veth: Fix use after free in XDP_REDIRECT

A use-after-free vulnerability has been identified within the vethconvertskbtoxdpbuff function of the Linux kernel's veth driver. The flaw stems from improper memory management during packet headroom expansion for XDP eXpress Data Path. Specifically, when the pskbexpandhead function allocates new...

CVE-2024-29786

In pktprocfilldataaddrwithoutbm of linkrxpktproc.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-48983

An issue was discovered in MBed OS 6.16.0. During processing of HCI packets, the software dynamically determines the length of the packet data by reading 2 bytes from the packet header. A buffer is then allocated to contain the entire packet, the size of which is calculated as the length of the...

CVE-2023-38632

async-sockets-cpp through 0.3.1 has a stack-based buffer overflow in tcpsocket.hpp when processing malformed TCP packets...

CVE-2023-20244

A vulnerability in the internal packet processing of Cisco Firepower Threat Defense FTD Software for Cisco Firepower 2100 Series Firewalls could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper handli...

CVE-2021-36762

An issue was discovered in HCC Embedded InterNiche NicheStack through 4.3. The tfshnd:tftpsrv.c TFTP packet processing function doesn't ensure that a filename is adequately '\0' terminated; therefore, a subsequent call to strlen for the filename might read out of bounds of the protocol packet...

CVE-2021-37206

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 All versions V8.80, SIPROTEC 5 relays with CPU variants CP100 All versions V8.80, SIPROTEC 5 relays with CPU variants CP300 All versions V8.80. Received webpackets are not properly processed. An unauthenticated remot...