CVE-2025-67749

PCSX2 is a free and open-source PlayStation 2 PS2 emulator. In versions 2.5.377 and below, an unchecked offset and size used in a memcpy operation inside PCSX2's CDVD SCMD 0x91 and SCMD 0x8F handlers allow a specially crafted disc image or ELF to cause an out-of-bounds read from emulator memory...

DEBIAN-CVE-2025-67749

PCSX2 is a free and open-source PlayStation 2 PS2 emulator. In versions 2.5.377 and below, an unchecked offset and size used in a memcpy operation inside PCSX2's CDVD SCMD 0x91 and SCMD 0x8F handlers allow a specially crafted disc image or ELF to cause an out-of-bounds read from emulator memory...

CVE-2025-67749 PCSX2 has an Out-of-bounds Read due to unchecked offset and size passed to memcpy

PCSX2 is a free and open-source PlayStation 2 PS2 emulator. In versions 2.5.377 and below, an unchecked offset and size used in a memcpy operation inside PCSX2's CDVD SCMD 0x91 and SCMD 0x8F handlers allow a specially crafted disc image or ELF to cause an out-of-bounds read from emulator memory...

CVE-2025-67749 PCSX2 has an Out-of-bounds Read due to unchecked offset and size passed to memcpy

PCSX2 is a free and open-source PlayStation 2 PS2 emulator. In versions 2.5.377 and below, an unchecked offset and size used in a memcpy operation inside PCSX2's CDVD SCMD 0x91 and SCMD 0x8F handlers allow a specially crafted disc image or ELF to cause an out-of-bounds read from emulator memory...

CVE-2025-67749

CVE-2025-67749 affects PCSX2 up to version 2.5.377. The issue arises from an unchecked offset and size used in a memcpy inside CDVD SCMD 0x91 and 0x8F handlers, allowing an specially crafted disc image or ELF to cause an out-of-bounds read from emulator memory (offset/size controlled via MG heade...

CVE-2025-64721

Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. In versions 1.16.6 and below, the SYSTEM-level service SbieSvc.exe exposes SbieIniServer::RC4Crypt to sandboxed processes. The handler adds a fixed header size to a caller-controlled valuelen...

CVE-2025-10451

Unchecked output buffer may allowed arbitrary code execution in SMM and potentially result in SMM memory corruption...

CVE-2025-10451

CVE-2025-10451 affects Insyde InsydeH2O (EFI/UEFI) with an unchecked output buffer that can enable arbitrary code execution in System Management Mode (SMM) and may cause SMM memory corruption. The CVE is described as a H19Int15CallbackSmm memory-corruption vulnerability in combined DXE/SMM (SMRAM...

CVE-2025-10451 H19Int15CallbackSmm: SMM memory corruption vulnerability in combined DXE/SMM (SMRAM write)

Unchecked output buffer may allowed arbitrary code execution in SMM and potentially result in SMM memory corruption...

Insyde InsydeH2O 安全漏洞

Insyde InsydeH2O is a new EFI/UEFI specification from Insyde China. It is intended to replace the traditional BIOS Basic Input/Output System. A security vulnerability exists in Insyde InsydeH2O, which stems from unchecked output buffers and could lead to arbitrary code execution and SMM memory...

CVE-2025-64721 Sandboxie's Integer Overflow in SbieIniServer::RC4Crypt allows sandbox escape and SYSTEM compromise

Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. In versions 1.16.6 and below, the SYSTEM-level service SbieSvc.exe exposes SbieIniServer::RC4Crypt to sandboxed processes. The handler adds a fixed header size to a caller-controlled valuelen...

CVE-2025-65288

A buffer overflow in the Mercury MR816v2 081C3114 4.8.7 Build 110427 Rel 36550n occurs when the device accepts and stores excessively long hostnames from LAN hosts without proper length validation. The affected code performs unchecked copies/concatenations into fixed-size buffers. A crafted long...

altera Quartus Prime Pro Edition Design Software 安全漏洞

The altera Quartus Prime Pro Edition Design Software is an FPGA design and development software suite from altera, USA. A security vulnerability exists in altera Quartus Prime Pro Edition Design Software that originates from not checking target installation directory permissions...

Qnap QTS and QuTS hero Buffer Copy without Checking Size of Input (CVE-2024-37047)

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute code. We have already fixed the vulnerability in the followin...

CVE-2025-14310

CVE-2025-14310 describes a classic buffer overflow in rethinkdb caused by a buffer copy without checking input size, affecting rethinkdb before 2.4.4. According to connected sources, the flaw can enable arbitrary code execution or denial of service, with high impact to confidentiality, integrity,...

CVE-2025-14310

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in rethinkdb.This issue affects rethinkdb: before 2.4.4...

PT-2025-49809

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in rethinkdb.This issue affects rethinkdb: before 2.4.4...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unchecked deviceregister return value, which could lead to a memory leak and null pointer dereference...

The vulnerability of the copy_from_user() function in the arch/sparc/lib/U3memcpy.S module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the copyfromuser function in the arch/sparc/lib/U3memcpy.S file of the Linux operating system’s kernel is related to the lack of a check on the returned value. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

Vulnerability of the loongson2_clk_probe() function in the drivers/clk/clk-loongson2.c module – This driver is part of the Linux kernel’s software synchronization support, which can be exploited by attackers to cause system failures.

Vulnerability of the loongson2clkprobe function in the drivers/clk/clk-loongson2.c module – The Linux kernel programming synchronization driver has a vulnerability related to copying buffers without checking input data. Exploiting this vulnerability could allow an attacker to cause system failure...