CVE-2025-64734: Missing Release of Resource after Effective Lifetime

Missing Release of Resource after Effective Lifetime CWE-772 in the T21 Reader allows an attacker with physical access to the Reader to perform a denial-of-service attack against that specific reader, preventing cardholders from badging for entry. This issue affects Command Centre Server: 9.30...

Gallagher T-Series Reader security vulnerability

The Gallagher T-Series Reader is a card reader in an access control system from Gallagher of New Zealand. A security vulnerability exists in the Gallagher T-Series Reader that stems from improper resource release and could lead to a denial of service attack...

PT-2025-47242

Missing Release of Resource after Effective Lifetime CWE-772 in the T21 Reader allows an attacker with physical access to the Reader to perform a denial-of-service attack against that specific reader, preventing cardholders from badging for entry. This issue affects Command Centre Server: 9.30...

[SECURITY] Fedora 41 Update: rust-reqsign-file-read-tokio-2.0.1-1.fc41

Tokio-based file reader implementation for reqsign...

[SECURITY] Fedora 42 Update: rust-reqsign-file-read-tokio-2.0.1-1.fc42

Tokio-based file reader implementation for reqsign...

HSEC-2023-0007 readFloat: memory exhaustion with large exponent

readFloat: memory exhaustion with large exponent Numeric.readFloat takes time and memory linear in the size of the number denoted by the input string. In particular, processing a number expressed in scientific notation with a very large exponent could cause a denial of service. The slowdown is...

Windows Smart Card Reader Privilege Escalation

The vulnerability of the Windows Smart Card Reader component in operating systems is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to gain increased privileges...

CVE-2025-59505 Windows Smart Card Reader Elevation of Privilege Vulnerability

...

CVE-2025-59505

CVE-2025-59505 is a Windows Smart Card Reader privilege-escalation vulnerability described as a double-free issue that could allow an authenticated local attacker to gain elevated privileges. The connected material confirms the CVE is categorized as a high-severity (CVSS v3.1 base 7.8) local, use...

CVE-2025-59505 Windows Smart Card Reader Elevation of Privilege Vulnerability

...

Windows Smart Card Reader Elevation of Privilege Vulnerability

Double free in Windows Smart Card allows an authorized attacker to elevate privileges locally...

kernel: ring-buffer: Validate the persistent meta data subbuf array

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Validate the persistent meta data subbuf array The meta data for a mapped ring buffer contains an array of indexes of all the subbuffers. The first entry is the reader page, and the rest of the entries lay out the...

[SECURITY] Fedora 43 Update: rust-reqsign-file-read-tokio-2.0.1-1.fc43

Tokio-based file reader implementation for reqsign...

Go Reader.ReadResponse DoS

The vulnerability of the Reader.ReadResponse function in the Go programming language is related to an uncontrolled resource consumption resulting from incorrect connection handling during the creation of a response string. Exploiting this vulnerability can allow a malicious actor to cause service...

babeldoc (>=0.3.38, <=0.3.60), iflow-mcp-pdfmathtranslate-pdf2zh (1.9.11) +3 more potentially affected by CVE-2025-70559 via pdfminer-six (20250416.0.0)

pdfminer-six PYPI version 20250416.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - babeldoc =0.3.38, =1.9.8, =1.9.11 Source cves: CVE-2025-70559 Source advisory: OSV:GHSA-F83H-GHPP-7WCC...

babeldoc (>=0.3.38, <=0.3.60), iflow-mcp-pdfmathtranslate-pdf2zh (1.9.11) +3 more potentially affected by CVE-2025-64512 via pdfminer-six (20250416.0.0)

pdfminer-six PYPI version 20250416.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - babeldoc =0.3.38, =1.9.8, =1.9.11 Source cves: CVE-2025-64512 Source advisory: OSV:GHSA-WF5F-4JWR-PPCP...

Teamcenter Visualization WRL File Parsing Vulnerabilities

Siemens Teamcenter Visualization contains multiple file-parsing vulnerabilities in its WRL-file reader that affect versions V14.2, V14.3, V2312, and V2406. If a user opens a specially crafted malicious WRL file, the application may crash or allow arbitrary code execution in the context of the...

BIT-GOLANG-2025-61724 Excessive CPU consumption in Reader.ReadResponse in net/textproto

The Reader.ReadResponse function constructs a response string through repeated string concatenation of lines. When the number of lines in a response is large, this can cause excessive CPU consumption...

BIT-GOLANG-2025-58183 Unbounded allocation when parsing GNU sparse map in archive/tar

tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a...

Rigged Poker Games

The Department of Justice has indicted thirty-one people over the high-tech rigging of high-stakes poker games. In a typical legitimate poker game, a dealer uses a shuffling machine to shuffle the cards randomly before dealing them to all the players in a particular order. As set forth in the...