CVE-2022-50709 wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: avoid uninit memory read in ath9khtcrxmsg syzbot is reporting uninit value at ath9khtcrxmsg 1, for ioctlUSBRAWIOCTLEPWRITE can call ath9khifusbrxstream with pktlen = 0 but ath9khifusbrxstream uses devallocskbpktlen +...

CVE-2025-68346 ALSA: dice: fix buffer overflow in detect_stream_formats()

In the Linux kernel, the following vulnerability has been resolved: ALSA: dice: fix buffer overflow in detectstreamformats The function detectstreamformats reads the streamcount value directly from a FireWire device without validating it. This can lead to out-of-bounds writes when a malicious...

CVE-2025-68346 ALSA: dice: fix buffer overflow in detect_stream_formats()

In the Linux kernel, the following vulnerability has been resolved: ALSA: dice: fix buffer overflow in detectstreamformats The function detectstreamformats reads the streamcount value directly from a FireWire device without validating it. This can lead to out-of-bounds writes when a malicious...

CVE-2025-68346

In the Linux kernel, the following vulnerability has been resolved: ALSA: dice: fix buffer overflow in detectstreamformats The function detectstreamformats reads the streamcount value directly from a FireWire device without validating it. This can lead to out-of-bounds writes when a malicious...

CVE-2025-68346

The CVE-2025-68346 vulnerability affects the Linux kernel ALSA: dice driver. The root cause is a missing validation of stream_count read from a FireWire device in detect_stream_formats(), which can allow out-of-bounds writes if stream_count exceeds MAX_STREAMS. The fix adds the same validation to...

Linux Distros Unpatched Vulnerability : CVE-2025-68346

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: dice: fix buffer overflow in detectstreamformats The function detectstreamformats reads the streamcount value directly from a FireWire device without...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unvalidated streamcount value that could result in a buffer overflow...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a failure to clean up incoming buffers after a failed stream startup, which could lead to a memory leak...

Linux Distros Unpatched Vulnerability : CVE-2023-54082

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afunix: Fix null-ptr-deref in unixstreamsendpage. Bing-Jhong Billy Jheng reported null-ptr-deref in unixstreamsendpage with detailed analysis and a nice repro...

Linux Distros Unpatched Vulnerability : CVE-2023-54161

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afunix: Fix null-ptr-deref in unixstreamsendpage. Bing-Jhong Billy Jheng reported null-ptr-deref in unixstreamsendpage with detailed analysis and a nice repro...

PT-2025-53238

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5 Description The Linux kernel contains a flaw in the unix stream sendpage function related to a null-pointer dereference. This issue arises when handling sockets in a loop, potentially leading to a...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the release of resources after an initstream failure, which could lead to post-release reuse...

iSeeQ Hybrid DVR WH-H4 安全漏洞

The iSeeQ Hybrid DVR WH-H4 is a hybrid digital video recorder from the South Korean company iSeeQ. A security vulnerability exists in the iSeeQ Hybrid DVR WH-H4 version 1.03R, which originates from unauthenticated access to the getjpeg script, which could result in obtaining a live video stream...

FLIR Thermal Traffic Cameras 安全漏洞

FLIR Thermal Traffic Cameras are a line of thermal traffic detection cameras from FLIR, Inc. A security vulnerability exists in the FLIR thermal traffic cameras that originates from unauthenticated access to a specific video streaming endpoint, which could result in unauthorized access to a live...

FLIR Brickstream 3D+ 安全漏洞

The FLIR Brickstream 3D+ is an intelligent streaming analysis sensor from FLIR, Inc. A security vulnerability exists in FLIR Brickstream 3D+ version 2.1.742.1842, which originates from unauthenticated access to a video streaming endpoint and could result in unauthorized access to a live video...

PT-2025-53159

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5 Description The Linux kernel contained a flaw in the unix stream sendpage function where a null pointer dereference could occur. This issue arose from attempting to add data to the last socket buffer skb in t...

Malicious code in stream-chain-xor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be18a835c94965458ba487a88b339ad55c26ca1f3e4785daf6dabb6d60dc3903 The package stream-chain-xor was found to contain malicious code...

MAL-2025-192864 Malicious code in stream-chain-xor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be18a835c94965458ba487a88b339ad55c26ca1f3e4785daf6dabb6d60dc3903 The package stream-chain-xor was found to contain malicious code...

CVE-2025-65857

An issue was discovered in Xiongmai XM530 IP cameras on firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06. The GetStreamUri exposes RTSP URIs containing hardcoded credentials enabling direct unauthorized video stream access...

CVE-2025-65857

An issue was discovered in Xiongmai XM530 IP cameras on firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06. The GetStreamUri exposes RTSP URIs containing hardcoded credentials enabling direct unauthorized video stream access...