CVE-2025-47098: Access of Uninitialized Pointer

InCopy versions 20.3, 19.5.3 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-49529: Access of Uninitialized Pointer

Illustrator versions 28.7.6, 29.5.1 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-43592: Access of Uninitialized Pointer

InDesign Desktop versions 19.5.3 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-47121: Access of Uninitialized Pointer

Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Adobe InCopy < 19.5.4 / 20.0 < 20.4.0 Multiple Vulnerabilities Arbitrary code execution (APSB25-59)

The version of Adobe InCopy installed on the remote host is prior to 19.5.4, 20.4.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-59 advisory. - InCopy versions 20.3, 19.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could...

Adobe Illustrator < 28.7.8 / 29.0.0 < 29.6.0 Multiple Vulnerabilities (APSB25-65) (macOS)

The version of Adobe Illustrator installed on the remote macOS host is prior to 28.7.8, 29.6.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-65 advisory. - Illustrator versions 28.7.6, 29.5.1 and earlier are affected by an Integer Underflow Wrap or Wraparound...

The vulnerability of the xfs component in the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the xfs component in Linux operating systems relates to access to an uninitialized pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2025-48922

Уязвимость компонента blocklayout/extent tree.c ядра операционной системы Linux связана с доступом к неинициализированному указателю. Эксплуатация уязвимости позволяет нарушителю вызвать отказ в обслуживании...

EulerOS 2.0 SP13 : xorg-x11-server (EulerOS-SA-2025-1712)

According to the versions of the xorg-x11-server package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An access to an uninitialized pointer flaw was found in X.Org and Xwayland. The function compCheckRedirect may fail if it cannot allocate...

The vulnerability of the ip_vs_protocol_init function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the ipvsprotocolinit function in Linux kernel relates to the use of an uninitialized pointer. Exploiting this vulnerability can allow a remote attacker to cause service failures...

EulerOS 2.0 SP11 : xorg-x11-server (EulerOS-SA-2025-1682)

According to the versions of the xorg-x11-server package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device rema...

EulerOS 2.0 SP11 : xorg-x11-server (EulerOS-SA-2025-1681)

According to the versions of the xorg-x11-server package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device rema...

The vulnerability of the radeon_vce_cs_parse() function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the radeonvcecsparse function in the Linux operating system’s kernel is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-37996 KVM: arm64: Fix uninitialized memcache pointer in user_mem_abort()

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix uninitialized memcache pointer in usermemabort Commit fce886a60207 "KVM: arm64: Plumb the pKVM MMU in KVM" made the initialization of the local memcache variable in usermemabort conditional, leaving a codepath whe...

CVE-2025-37996

Summary: CVE-2025-37996 affects the Linux kernel on ARM64 with KVM. The root cause was an uninitialized local memcache pointer in user_mem_abort() caused by a conditional initialization after the commit that plumbed the pKVM MMU. A code path through kvm_pgtable_stage2_map() could use the uninitia...

CVE-2025-37996: Use of Uninitialized Resource

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix uninitialized memcache pointer in usermemabort Commit fce886a60207 "KVM: arm64: Plumb the pKVM MMU in KVM" made the initialization of the local memcache variable in usermemabort conditional, leaving a codepath whe...

CVE-2025-37995: Access of Uninitialized Pointer

In the Linux kernel, the following vulnerability has been resolved: module: ensure that kobjectput is safe for module type kobjects In 'lookuporcreatemodulekobject', an internal kobject is created using 'modulektype'. So call to 'kobjectput' on error handling path causes an attempt to use an...

The vulnerability of the vbi_strndup_iconv_ucs2() function in the VBI capture and decoding library libzvbi allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the vbistrndupiconvucs2 function in the VBI capture and decoding library libzvbi is related to access to an uninitialized pointer. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

CVE-2024-24443

An uninitialized pointer dereference in the ngaphandlepdusessionresourcesetupresponse routine of OpenAirInterface CN5G AMF oai-cn5g-amf up to v2.0.0 allows attackers to cause a Denial of Service DoS via a crafted PDU Session Resource Setup Response...

CVE-2024-24449

An uninitialized pointer dereference in the NasPdu::NasPdu component of OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a Denial of Service DoS via a crafted InitialUEMessage message sent to the AMF...