CVE-2025-40148

Summary of CVE-2025-40148 : In the Linux kernel’s AMD display code, a NULL pointer dereference can occur in the dc_stream cursor attribute path. The function dc_stream_set_cursor_attributes() dereferenced stream and nested fields (stream->ctx->dc->current_state) without validating stream...

CVE-2025-40148

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL pointer checks in dcstream cursor attribute functions The function dcstreamsetcursorattributes currently dereferences the stream pointer and nested members stream-ctx-dc-currentstate without checking for...

CVE-2025-40148 drm/amd/display: Add NULL pointer checks in dc_stream cursor attribute functions

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL pointer checks in dcstream cursor attribute functions The function dcstreamsetcursorattributes currently dereferences the stream pointer and nested members stream-ctx-dc-currentstate without checking for...

CVE-2025-40129 sunrpc: fix null pointer dereference on zero-length checksum

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gsskrb5verifymicv2...

Information Exposure

mllogger is vulnerable to Information Exposure. The vulnerability is due to insufficient validation of the key argument in the streamhandler function of mllogger/server.py, which allows a remote attacker to manipulate that argument to disclose sensitive information...

Malicious code in 4meme-readable-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bf6d930ea2c0ad7b353677dfafdbe18356b2cb350a496f593dfd2a284b6ec3e The package 4meme-readable-stream was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-120001

Malicious code in 4meme-readable-stream npm...

MAL-2025-149904 Malicious code in 4meme-readable-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bf6d930ea2c0ad7b353677dfafdbe18356b2cb350a496f593dfd2a284b6ec3e The package 4meme-readable-stream was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-123659

Malicious code in pipe-dynamo-nodejs-stream npm...

EUVD-2025-114351

Malicious code in dotenv-safe-lint-standard-stream npm...

EUVD-2025-112653

Malicious code in hydra-stream-express-lynx npm...

EUVD-2025-114354

Malicious code in dotenv-safe-hyperion-karma-stream npm...

EUVD-2025-123306

Malicious code in procyon-stream-registry-perseus npm...

EUVD-2025-115540

Malicious code in ceres-helmet-wezen-stream npm...

EUVD-2025-121605

Malicious code in stream-jasmine-global-hydra npm...

EUVD-2025-112195

Malicious code in jest-castor-stream-altair npm...

EUVD-2025-124705

Malicious code in mui-stream-jovian-canopus npm...

EUVD-2025-113295

Malicious code in ganymede-prompts-winston-stream npm...

EUVD-2025-121144

Malicious code in transport-docusaurus-markdown-stream npm...

Malicious code in hydra-stream-express-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ff343e869eea3d3afef8aa2d1b4b440a33ca6d31bae23e02944b00880df9f07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...