Lucene search
+L

812 matches found

OSV
OSV
added 2025/11/07 6:32 p.m.13 views

CLSA-2025-1762540366 rsync: Fix of CVE-2016-9840

CVE-2016-9840: fix improper pointer arithmetic in inftrees.c...

8.8CVSS7.5AI score0.04793EPSS
SaveExploits0References1
SUSE Linux
SUSE Linux
added 2025/11/07 10:30 a.m.5 views

Security update for ImageMagick

This update for ImageMagick fixes the following issues: CVE-2025-62594: Fixed unsigned underflow and division-by-zero that can lead to OOB pointer arithmetic and process crash. bsc1252749 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

5.8CVSS6.9AI score0.00342EPSS
SaveExploits1References4
OSV
OSV
added 2025/11/07 10:30 a.m.4 views

SUSE-SU-2025:3985-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2025-62594: Fixed unsigned underflow and division-by-zero that can lead to OOB pointer arithmetic and process crash. bsc1252749...

5.5CVSS5.8AI score0.00342EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2025/11/07 12:00 a.m.2 views

SUSE SLED15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2025:3978-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:3978-1 advisory. - CVE-2025-62594: Fixed unsigned underflow and division-by-zero that can lead to OOB pointer arithmetic a...

5.5CVSS5.8AI score0.00342EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2025/11/07 12:00 a.m.5 views

SUSE SLED15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2025:3956-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:3956-1 advisory. - CVE-2025-62594: Fixed unsigned underflow and division-by-zero that can lead to OOB pointer arithmetic and process...

5.5CVSS5.8AI score0.00342EPSS
SaveExploits1References4
OSV
OSV
added 2025/11/06 3:43 p.m.3 views

SUSE-SU-2025:3978-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2025-62594: Fixed unsigned underflow and division-by-zero that can lead to OOB pointer arithmetic and process crash. bsc1252749...

5.5CVSS6.8AI score0.00342EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2025/11/06 12:00 a.m.4 views

The vulnerabilities of the functions uprobe_dispatcher() and uretprobe_dispatcher() in the Linux operating system allow a hacker to cause a service failure.

The vulnerability of the uprobedispatcher and uretprobedispatcher functions in the Linux operating system is related to a pointer arithmetic error. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS5.8AI score0.00212EPSS
SaveExploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/10/31 12:00 a.m.9 views

The vulnerability of the etm_setup_aux() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the etmsetupaux function in the Linux operating system’s kernel is related to a pointer arithmetic error. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS5.8AI score0.00207EPSS
SaveExploits0References13Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/10/31 12:00 a.m.7 views

The vulnerability of the platform_get_resource() function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the platformgetresource function in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

7CVSS5.8AI score0.00187EPSS
SaveExploits0References12Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/10/30 12:00 a.m.10 views

The vulnerability of the stm32_csi_start() function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the stm32csistart function in the Linux operating system’s kernel is related to a pointer arithmetic error. Exploiting this vulnerability could allow an attacker to cause a system failure...

5.5CVSS5.8AI score0.00219EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/10/29 12:00 a.m.4 views

The vulnerability of the do_register_framebuffer() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the doregisterframebuffer function in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

7CVSS6.5AI score0.00141EPSS
SaveExploits0References13Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/10/29 12:00 a.m.7 views

The vulnerability of the `cache_setFlush()` function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the cachesetFlush function in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to trigger a service failure...

5.5CVSS6.7AI score0.0015EPSS
SaveExploits0References13Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/10/28 12:00 a.m.8 views

The vulnerability of the jffs2_prealloc_raw_node_refs function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the jffs2preallocrawnoderefs function in the Linux operating system is related to a pointer arithmetic error. Exploiting this vulnerability could allow an attacker to cause a service failure...

4.8CVSS6.6AI score0.00182EPSS
SaveExploits0References14Affected Software3
Github Security Blog
Github Security Blog
added 2025/10/27 11:33 p.m.14 views

ImageMagick CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash (DoS)

Summary A single root cause in the CLAHE implementation — tile width/height becoming zero — produces two distinct but related unsafe behaviors. Vulnerabilities exists in the CLAHEImage function of ImageMagick’s MagickCore/enhance.c. 1. Unsigned integer underflow → out-of-bounds pointer arithmetic...

5.5CVSS7.8AI score0.00342EPSS
SaveExploits1References4Affected Software12
Tenable Nessus
Tenable Nessus
added 2025/10/27 12:00 a.m.4 views

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-38579)

crypto: bcm - Fix pointer arithmetic In spu2dumpomd value of ptr is increased by ciphkeylen instead of hashivlen which could lead to going beyond the buffer boundaries. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

5.5CVSS6.8AI score0.00254EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/10/27 12:00 a.m.10 views

The vulnerability of the sw_mode_config() function in the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the swmodeconfig function in the Linux operating system’s kernel is related to a pointer arithmetic error. Exploiting this vulnerability could allow an attacker to cause a service failure...

7CVSS6AI score0.0014EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2025/10/21 9:54 p.m.2 views

GHSA-H5J3-CRG5-8JQM orx-pinned-vec has undefined behavior in index_of_ptr with empty slices

The safe function indexofptr causes undefined behavior when called with an empty slice. The issue occurs in the line ptr.addslice.len - 1 which underflows when slice.len is 0, creating a pointer with a massive offset. According to Rust's safety rules, creating such a pointer causes immediate...

5.1CVSS7.2AI score
SaveExploits0References5
RustSec
RustSec
added 2025/10/21 12:00 p.m.11 views

Undefined behavior in index_of_ptr with empty slices

The safe function indexofptr causes undefined behavior when called with an empty slice. The issue occurs in the line ptr.addslice.len - 1 which underflows when slice.len is 0, creating a pointer with a massive offset. According to Rust's safety rules, creating such a pointer causes immediate...

7.2AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/10/08 12:00 a.m.12 views

The vulnerability of the cross-platform Xen kernel supervisor in Linux operating systems, related to the swapping of the zero pointer, allows a malicious actor to trigger a service failure.

The vulnerability of the cross-platform hypervisor Xen in Linux operating systems is related to a pointer arithmetic error. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

10CVSS5.7AI score0.00467EPSS
SaveExploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/10/08 12:00 a.m.12 views

The vulnerability of the cross-platform Xen kernel supervisor in Linux operating systems, related to the swapping of the zero pointer, allows a malicious actor to trigger a service failure.

The vulnerability of the cross-platform hypervisor Xen in Linux operating systems is related to a pointer arithmetic error. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

10CVSS5.7AI score0.00467EPSS
SaveExploits0References4Affected Software3
Rows per page
Query Builder