CVE-2025-60478

A use-after-free in the gffilterpacketdestroy function /filtercore/filterpck.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-2 file...

CVE-2025-60497

A segmentation violation in the GetESD function /isomedia/track.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

CVE-2025-60487

A segmentation violation in the gfisomgetesd function /isomedia/isomread.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted XML file...

CVE-2025-60492

A stack overflow in the gfbifsdecnode function /bifs/fielddecode.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

CVE-2025-60487

The GPAC Project/MP4Box software version before 2.5 is vulnerable to a segmentation violation within the gf_isom_get_esd function (located in /isomedia/isom_read.c). This flaw allows an attacker to trigger a Denial of Service (DoS) by providing a crafted XML file . No specific remediation version...

Linux kernel exec De Thread DoS

The vulnerability of the dethread function in the exec component of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

openFPGALoader Parser Function Unauthorized Access

The vulnerability of the POFParser::parseSection function in the openFPGALoader library lies in the reading of data beyond the allowed range during the parsing of a specially created .pof file. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...

Linux kernel Host1x DoS

The vulnerability of the host1xdeviceadd function in the drivers/gpu/host1x/bus.c kernel module of the Linux operating system is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the axidmacprepperipheraldmavec function in the drivers/dma/dma-axi-dmac.c component of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux DMA Buffer Overflow DoS

The vulnerability of the dmareleasechannel function in the drivers/dma/dmaengine.c component of the Linux operating system is related to the improper implementation of the memory management thread. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

Linux kernel rpcrdma_xprt_connect Heap Buffer Overflow DoS

The vulnerability of the rpcrdmaxprtconnect function in the net/sunrpc/xprtrdma/verbs.c component of the Linux kernel is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux arch/x86/kvm/svm/sev.c Heap Buffer Overflow DoS

The vulnerability of the sevvmmoveenccontextfrom function in the arch/x86/kvm/svm/sev.c component of the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

PT-2026-120160

Vyper before 0.2.9 deploys forwarder proxies through the built-in create forwarder to function that report a fixed 4096-byte RETURNDATASIZE rather than the actual return data size. Calls through these proxies can yield corrupted data when a function returns more than 4096 bytes without return dat...

PT-2026-120345

A weakness has been identified in Tenstorrent tt-metal up to 0.80.0. The affected element is the function load hf state dict filtered of the file models/tt transformers/tt/load checkpoints.py. This manipulation of the argument weight map causes path traversal. The attack may be initiated remotely...

ROS-20261021-73-0070

The vulnerability of the rdpeiserverhandlemessages function in the channels/rdpei/server/rdpeimain.c file of the RDP client FreeRDP is related to insufficient input validation. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Apache AsterixDB 0.9.9 Missing Authentication

Summary Apache AsterixDB is a highly scalable data management system that can store, index, and manage semi-structured data, e.g., much like MongoDB, but it also supports a full-power query language with the expressiveness of SQL and more. Unlike analytics engines like Apache Hive or Apache Spark...

PT-2026-120155

Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an incorrect stack tip pointer when internal function calls appear inside tuples or nested calls. Contracts using such calls as tuple elements, call arguments, or builtin arguments like concat or ecrecover can...

Linux kernel rpcrdma_create_id Heap Buffer Overflow DoS

The vulnerability of the rpcrdmacreateid function in the net/sunrpc/xprtrdma/verbs.c component of the Linux kernel is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

EUVD-2025-211159

A heap use-after-free in the gffilterpidsendeventdownstream function /filtercore/filterpid.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

CentOS Linux 6 [TuxCare] Security Update: kernel / kernel-debug / kernel-debug-devel / kernel-devel / etc Multiple Vulnerabilities (CENTOS6:CLSA-2023:1682705952)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2023:1682705952 advisory. - Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denial of service...