DEBIAN-CVE-2025-37935

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtkethsoc: fix SER panic with 4GB+ RAM If the mtkpollrx function detects the MTKRESETTING flag, it will jump to releasedesc and refill the high word of the SDP on the 4GB RFB. Subsequently, mtkrxclean will process ...

PT-2025-22196

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been resolved, specifically in the mtk eth soc component of the Ethernet network driver. The problem occurs when the mtk poll rx function detects the MTK...

PT-2025-11066 · Google · Android

Name of the Vulnerable Software and Affected Versions: sdp discovery.cc affected versions not specified Description: A use-after-free issue exists in the sdp snd service search req function of sdp discovery.cc. This could lead to remote code execution without requiring additional privileges or us...

PT-2025-11055 · Google · Android

Name of the Vulnerable Software and Affected Versions: sdp discovery affected versions not specified Description: A use after free issue exists in the process service attr rsp function of sdp discovery.cc. This could lead to remote code execution without requiring additional privileges or user...

PT-2025-11074 · Google · Android

Name of the Vulnerable Software and Affected Versions: Bluetooth affected versions not specified Description: A use-after-free issue exists in the process service attr rsp function within sdp discovery.cc due to a logic error in the code. This could lead to remote code execution without requiring...

PT-2025-11075 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The software contains a use-after-free flaw in multiple functions within sdp server.cc due to a logic error. This issue may lead to remote code execution without requiring additional...

Linux Distros Unpatched Vulnerability : CVE-2017-1000250

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain...

ASB-A-375404242

In multiple functions of sdpserver.cc, there is a possible use after free due to a logic error in the code. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-375408314

In processserviceattrrsp of sdpdiscovery.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-6137

BT: Classic: SDP OOB access in getattsearchlist...

CVE-2024-20895

Improper access control in Dar service prior to SMR Jul-2024 Release 1 allows local attackers to bypass restriction for calling SDP features...

GHSA-RPMJ-RPGJ-QMPM vulnerabilities

Vulnerabilities for packages: lychee, sdp-k8s-injector, sccache, linkerd2, linkerd-extension-init, zed, nushell, berg, rustup...

PT-2025-5651 · Git +1 · Kamailio

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 8 crash has been reported. The crash occurs in the following functions: extract candidate, parse sdp session, and parse mixed...

CVE-2024-48858

Improper input validation in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition in the context of the process using the image codec...

CVE-2024-48858

Improper input validation in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition in the context of the process using the image codec...

CVE-2024-48857

NULL pointer dereference in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition in the context of the process using the image codec...

CVE-2024-48854

Off-by-one error in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an information disclosure in the context of the process using the image codec...

CVE-2024-48857

NULL pointer dereference in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition in the context of the process using the image codec...

CVE-2024-48855

Out-of-bounds read in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an information disclosure in the context of the process using the image codec...

CVE-2024-48856

Out-of-bounds write in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition or execute code in the context of the process using the image codec...