zlib: Out-of-bound pointer arithmetic in inftrees.c

A vulnerability was discovered in the inftrees.c file of zlib. Pointer arithmetic operations violate the C standard by subtracting an offset from an array pointer before its allocated memory, leading to undefined behavior...

rsync security update

3.1.3-23 - Resolves: RHEL-52004 - Slowness in rsync due to extra validation steps 3.1.3-22 - Resolves: RHEL-91519 - Improper Pointer Arithmetic in pcl...

zlib: Out-of-bound pointer arithmetic in inftrees.c

A vulnerability was discovered in the inftrees.c file of zlib. Pointer arithmetic operations violate the C standard by subtracting an offset from an array pointer before its allocated memory, leading to undefined behavior...

Important: Red Hat Security Advisory: zlib security update

An update for zlib is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

RHEL 7 : zlib (RHSA-2025:8314)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:8314 advisory. The zlib packages provide a general-purpose lossless data compression library that is used by many different programs. Security Fixes: pcl: zlib:...

Mageia: Security Advisory (MGASA-2025-0162)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated zsync packages fix security vulnerabilities

Improper Pointer Arithmetic in pcl. CVE-2025-4638...

MGASA-2025-0162 Updated zsync packages fix security vulnerabilities

Improper Pointer Arithmetic in pcl. CVE-2025-4638...

CVE-2025-37976

CVE-2025-37976 is rejected by its CVE Numbering Authority.

CVE-2025-4638

A vulnerability exists in the inftrees.c component of the zlib library, which is bundled within the PointCloudLibrary PCL. This issue may allow context-dependent attackers to cause undefined behavior by exploiting improper pointer arithmetic. Since version 1.14.0, PCL by default uses a zlib...

UBUNTU-CVE-2025-4638

A vulnerability exists in the inftrees.c component of the zlib library, which is bundled within the PointCloudLibrary PCL. This issue may allow context-dependent attackers to cause undefined behavior by exploiting improper pointer arithmetic. Since version 1.14.0, PCL by default uses a zlib...

CVE-2025-4638 Improper Pointer Arithmetic in pcl

A vulnerability exists in the inftrees.c component of the zlib library, which is bundled within the PointCloudLibrary PCL. This issue may allow context-dependent attackers to cause undefined behavior by exploiting improper pointer arithmetic. Since version 1.14.0, PCL by default uses a zlib...

CVE-2025-4638 Improper Pointer Arithmetic in pcl

A vulnerability exists in the inftrees.c component of the zlib library, which is bundled within the PointCloudLibrary PCL. This issue may allow context-dependent attackers to cause undefined behavior by exploiting improper pointer arithmetic. Since version 1.14.0, PCL by default uses a zlib...

CVE-2025-4638

CVE-2025-4638 affects the inftrees.c component of the zlib library bundled with PointCloudLibrary (PCL). The issue can trigger undefined behavior via improper pointer arithmetic and is relevant when PCL is built with an older zlib (older than 1.14.0) or when the user disables the system zlib, cau...

CVE-2025-4638 Improper Pointer Arithmetic in pcl

A vulnerability exists in the inftrees.c component of the zlib library, which is bundled within the PointCloudLibrary PCL. This issue may allow context-dependent attackers to cause undefined behavior by exploiting improper pointer arithmetic. Since version 1.14.0, PCL by default uses a zlib...

Point Cloud Library 缓冲区错误漏洞

Point Cloud Library PCL is a library in the Point Cloud Library open source. A security vulnerability exists in Point Cloud Library version 1.14.0 and earlier, which stems from improper pointer arithmetic in the zlib library that could lead to undefined behavior...

The vulnerability of the KVM kernel component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the KVM kernel component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the kzalloc() function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the kzalloc function in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the alloc_precpu() function in the Linux operating system allows a hacker to perform a denial-of-service attack.

The vulnerability of the allocprecpu function in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to perform a denial-of-service attack...

`VMABuffer::set_data` may allow out-of-bounds writes from safe code

VMABuffer::setdata was a publicly accessible safe function. It accepted an arbitrary offset and a data slice, then used the offset in unsafe pointer arithmetic before copying the slice into a mapped allocation. Affected versions did not check that the requested write range fit within the allocati...