9540 matches found
Linux Distros Unpatched Vulnerability : CVE-2025-21996
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/radeon: fix uninitialized size issue in radeonvcecsparse On the off chance that command stream passed from userspace via ioctl call to radeonvcecsparse is...
Mbed TLS mbedtls_pem_read_buffer() mbedtls_pk_parse() DoS Disclosure Protected Information
The vulnerability of the mbedtlspemreadbuffer and mbedtlspkparse functions in Mbed TLS is related to an off-by-one error. Exploiting this vulnerability can allow a remote attacker to cause service failures or expose protected information...
Linux Distros Unpatched Vulnerability : CVE-2025-30204
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits...
DEBIAN-CVE-2025-47806
In GStreamer through 1.26.1, the subparse plugin's parsesubriptime function may write data past the bounds of a stack buffer, leading to a crash...
AZL-66180 CVE-2025-47806 affecting package gstreamer1-plugins-base 1.20.0-3
In GStreamer through 1.26.1, the subparse plugin's parsesubriptime function may write data past the bounds of a stack buffer, leading to a crash...
DEBIAN-CVE-2025-47808
In GStreamer through 1.26.1, the subparse plugin's tmplayerparseline function may dereference a NULL pointer while parsing a subtitle file, leading to a crash...
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the qtdemuxparsetrak function when parsing certain MP4 files. An attacker can access sensitive information by crafting a malicious MP4 file that triggers a read past the end of a heap buffer. Remediation Upgrade...
Stack-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow via the parsesubriptime function in the gst/subparse/gstsubparse.c. An attacker can cause a crash by providing specially crafted input that results in writing data past the bounds of a stack buffer. Remediati...
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the qtdemuxparsetree function when parsing certain MP4 files. An attacker can access sensitive information by crafting a malicious MP4 file that triggers a read past the end of a heap buffer. Remediation Upgrade...
NULL Pointer Dereference
Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the tmplayerparseline function when parsing a subtitle file. An attacker can cause a crash by providing a specially crafted subtitle file that triggers a NULL pointer dereference. Remediation Upgrade gstream...
CVE-2025-47808
In GStreamer through 1.26.1, the subparse plugin's tmplayerparseline function may dereference a NULL pointer while parsing a subtitle file, leading to a crash...
Linux Distros Unpatched Vulnerability : CVE-2025-21946
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: fix out-of-bounds in parsesecdesc If osidoffset, gsidoffset and dacloffset could be greater than smbntsd struct size. If it is smaller, It could cause...
CVE-2025-47183
In GStreamer through 1.26.1, the isomp4 plugin's qtdemuxparsetree function may read past the end of a heap buffer while parsing an MP4 file, leading to information disclosure...
GStreamer security vulnerabilities
GStreamer is an open source set of frameworks for processing streaming media from GStreamer. A security vulnerability exists in GStreamer 1.26.1 and earlier versions, which stems from an out-of-bounds read in the qtdemuxparsetree function that could lead to information disclosure...
CVE-2025-47806
In GStreamer through 1.26.1, the subparse plugin's parsesubriptime function may write data past the bounds of a stack buffer, leading to a crash...
GStreamer security vulnerabilities
GStreamer is an open source set of frameworks for processing streaming media from GStreamer. A security vulnerability exists in GStreamer 1.26.1 and earlier versions, which stems from an out-of-bounds read in the qtdemuxparsetrak function that could lead to information disclosure...
CVE-2025-47183
In GStreamer through 1.26.1, the isomp4 plugin's qtdemuxparsetree function may read past the end of a heap buffer while parsing an MP4 file, leading to information disclosure...
Linux Distros Unpatched Vulnerability : CVE-2025-38307
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Verify content returned by parseintarray The first element of the returned...
kernel: cifs: potential buffer overflow in handling symlinks
A buffer overflow vulnerability has been identified in the Linux kernel's Common Internet File System CIFS module, specifically within the parsemfsymlink function. This flaw is caused by insufficient input validation on the linklen value, which dictates the length of a symbolic link. An attacker...
kernel: cifs: potential buffer overflow in handling symlinks
A buffer overflow vulnerability has been identified in the Linux kernel's Common Internet File System CIFS module, specifically within the parsemfsymlink function. This flaw is caused by insufficient input validation on the linklen value, which dictates the length of a symbolic link. An attacker...