PT-2025-25556

Name of the Vulnerable Software and Affected Versions Liferay Portal versions 7.0.0 through 7.4.3.21 Liferay DXP versions 7.4 GA through update 9 Liferay DXP versions 7.3 GA through update 25 Liferay DXP older unsupported versions Description The issue allows remote attackers to consume system...

CVE-2023-48010

STMicroelectronics SPC58 is vulnerable to Missing Protection Mechanism for Alternate Hardware Interface. Code running as Supervisor on the SPC58 PowerPC microcontrollers may disable the System Memory Protection Unit and gain unabridged read/write access to protected assets...

linux-firmware security update

An update is available for linux-firmware. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The linux-firmware packages contain all of the firmware files that are...

Denial Of Service (DoS)

XGrammar is vulnerable to Denial Of Service DoS. The vulnerability is due to unbounded in-memory caching of compiled grammars, allows an attacker to exhaust system memory due to unbounded in-memory caching of compiled grammars...

Linux Kernel Out-of-Bounds Access Vulnerability

Linux Kernel contains an out-of-bounds access vulnerability in the USB-audio driver that allows an attacker with physical access to the system to use a malicious USB device to potentially manipulate system memory, escalate privileges, or execute arbitrary code...

CVE-2025-25178: Improper Validation of Specified Quantity in Input

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause kernel system memory corruption...

SUSE-SU-2025:20240-1 Security update for gstreamer

This update for gstreamer fixes the following issues: - CVE-2024-47606: avoid integer overflow when allocating sysmem bsc1234449...

Linux Distros Unpatched Vulnerability : CVE-2024-35995

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACPI: CPPC: Use accesswidth over bitwidth for system memory accesses To align with ACPI 6.3+, since bitwidth can be any 8-bit value, it cannot be depended on to...

Linux Distros Unpatched Vulnerability : CVE-2020-14381

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Red Hat Enterprise Linux - kernel: referencing inode of removed superblock in getfutexkey causes UAF Ubuntu Linux - A flaw was found in the Linux kernels futex...

Linux Distros Unpatched Vulnerability : CVE-2020-19726

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers to read or write to system memory or cause a denial of...

Denial Of Service (DoS)

libming.so is vulnerable to Denial Of Service DoS. The vulnerability is due to a memory leak in the parseSWFFILTERLIST function in util/parser.c and by improper memory management when processing crafted SWF files, allowing attackers to exhaust system memory and trigger a denial of service...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from arm-smmu-v3 not checking the return value of platformgetresource, which could lead to a null pointer dereference...

CVE-2023-20515

Improper access control in the fTPM driver in the trusted OS could allow a privileged attacker to corrupt system memory, potentially leading to loss of integrity, confidentiality, or availability...

CVE-2023-20515

Improper access control in the fTPM driver in the trusted OS could allow a privileged attacker to corrupt system memory, potentially leading to loss of integrity, confidentiality, or availability...

CVE-2023-20515

Improper access control in the fTPM driver in the trusted OS could allow a privileged attacker to corrupt system memory, potentially leading to loss of integrity, confidentiality, or availability...

CVE-2023-20515

CVE-2023-20515 affects the fTPM driver in the AMD trusted OS. Root cause: improper access control allowing a privileged local attacker to corrupt system memory, potentially impacting integrity, confidentiality, and availability. Affected component: fTPM driver within AMD trusted OS. Impact: memor...

CVE-2023-20515

Improper access control in the fTPM driver in the trusted OS could allow a privileged attacker to corrupt system memory, potentially leading to loss of integrity, confidentiality, or availability...

CVE-2024-21453

Transient DOS while decoding message of size that exceeds the available system memory...

Excessive Memory Consumption

github.com/t2bot/matrix-media-repo is vulnerable to Excessive Memory Consumption. The vulnerability is due to inadequate handling of large JSON responses, allowing an attacker to exhaust system memory and potentially crash the application...

CVE-2024-46668

CVE-2024-46668 describes an allocation of resources without limits or throttling (CWE-770) in Fortinet FortiOS. The vulnerability affects FortiOS versions 7.4.0–7.4.4, 7.2.0–7.2.8, 7.0.0–7.0.15, and 6.4.0–6.4.15, where an unauthenticated remote attacker could cause memory exhaustion by uploading ...