33 matches found
SUSE CVE-2025-1218
The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make the client read past the end of the packet buffer, which is undefined behaviour and c...
AZL-104904 CVE-2025-1218 affecting package php 8.3.36-1
The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make the client read past the end of the packet buffer, which is undefined behaviour and c...
DEBIAN-CVE-2025-1218
The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make the client read past the end of the packet buffer, which is undefined behaviour and c...
CVE-2025-1218
The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make the client read past the end of the packet buffer, which is undefined behaviour and c...
UBUNTU-CVE-2025-1218
The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make the client read past the end of the packet buffer, which is undefined behaviour and c...
CVE-2025-1218
The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make the client read past the end of the packet buffer, which is undefined behaviour and c...
CVE-2025-1218
The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make the client read past the end of the packet buffer, which is undefined behaviour and c...
EUVD-2025-211005
The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make the client read past the end of the packet buffer, which is undefined behaviour and c...
CVE-2025-1218 Various packet overreads in mysqlnd_writeprotocol.c
The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make the client read past the end of the packet buffer, which is undefined behaviour and c...
CVE-2025-1218
A flaw in the PHP MySQL Native Driver (mysqlnd) wire protocol parser allows for an out-of-bounds read because the parser fails to verify if an incoming packet contains enough bytes before reading its fields. A malicious or compromised database server can exploit this by sending a truncated packet...
SUSE CVE-2026-72232
In the Linux kernel, the following vulnerability has been resolved: batman-adv: ensure minimal ethernet header on TX As documented in commit 8bd67ebb50c0 "net: bridge: xmit: make sure we have at least eth header len bytes", it is possible by for a local user with eBPF TC hook access to attach a t...
CVE-2026-63947: Out-of-bounds Read
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HIDP: fix missing length checks in hidpinputreport hidpinputreport reads keyboard and mouse payload data from an skb without first verifying that skb-len contains enough data. hidprecvintrframe pulls the 1-byte HIDP...
CVE-2026-63947: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HIDP: fix missing length checks in hidpinputreport hidpinputreport reads keyboard and mouse payload data from an skb without first verifying that skb-len contains enough data. hidprecvintrframe pulls the 1-byte HIDP...
CVE-2025-12131
A truncated 802.15.4 packet can lead to an assert, resulting in a denial of service...
CVE-2025-12131
A truncated 802.15.4 packet can lead to an assert, resulting in a denial of service...
CVE-2025-12131 Truncated 802.15.4 packet leads to denial of service
A truncated 802.15.4 packet can lead to an assert, resulting in a denial of service...
CVE-2025-12131 Truncated 802.15.4 packet leads to denial of service
A truncated 802.15.4 packet can lead to an assert, resulting in a denial of service...
CVE-2025-12131
CVE-2025-12131 describes a vulnerability in handling of truncated 802.15.4 packets that can trigger an assertion and cause a denial of service. Documents reference an adjacent attacker vector and low attack complexity, with exposure tied to 802.15.4 packet processing; exploitation status is not p...
