CVE-2025-12829

An uninitialized stack read issue exists in Amazon Ion-C versions v1.1.4 that may allow a threat actor to craft data and serialize it to Ion text in such a way that sensitive data in memory could be exposed through UTF-8 escape sequences. To mitigate this issue, users should upgrade to version...

CVE-2025-12829

An uninitialized stack read issue exists in Amazon Ion-C versions v1.1.4 that may allow a threat actor to craft data and serialize it to Ion text in such a way that sensitive data in memory could be exposed through UTF-8 escape sequences. To mitigate this issue, users should upgrade to version...

Amazon Ion C 安全漏洞

Amazon Ion C is an amazon-ion open source C implementation of Amazon Ion. A security vulnerability exists in versions prior to Amazon Ion C v1.1.4, which stems from an uninitialized stack read issue that could cause UTF-8 escape sequences to expose sensitive data in memory...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : sccache (SUSE-SU-2025:3944-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:3944-1 advisory. - CVE-2025-55159 - updated slab with the uninit memory access fix bsc1248003 Tenable has extracted the...

PT-2025-45475

Name of the Vulnerable Software and Affected Versions Amazon Ion-C versions prior to 1.1.4 Description An uninitialized stack read issue exists that may allow an attacker to craft data and serialize it to Ion text. This could expose sensitive data in memory through UTF-8 escape sequences...

OSV-2025-879 Use-of-uninitialized-value in JS_DefineProperty

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=457858149 Crash type: Use-of-uninitialized-value Crash state: JSDefineProperty buildbacktrace JSCallInternal...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990434)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990434 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction AV/C deferred transactio...

Security update for sccache

This update for sccache fixes the following issues: CVE-2025-55159: updated slab with the uninit memory access fix bsc1248003 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comma...

SUSE-SU-2025:3955-1 Security update for sccache

This update for sccache fixes the following issues: - CVE-2025-55159: updated slab with the uninit memory access fix bsc1248003...

SUSE-SU-2025:3944-1 Security update for sccache

This update for sccache fixes the following issues: - CVE-2025-55159 - updated slab with the uninit memory access fix bsc1248003...

CVE-2025-64118

node-tar is a Tar for Node.js. In 7.5.1, using .t aka .list with sync: true to read tar entry contents returns uninitialized memory contents if tar file was changed on disk to a smaller size while being read. This vulnerability is fixed in 7.5.2...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990046)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990046 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid uninitialized value in BPFCOREREADBITFIELD Changes from V1: - Use a default branch in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989981)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989981 advisory. In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix uninit-value in copyname syzbot reported BUG: KMSAN: uninit-value in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989718)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989718 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix uninit-value in mpolrebindpolicy mpolsetnodemaskmm/mempolicy.c does not set up...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989570)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989570 advisory. In the Linux kernel, the following vulnerability has been resolved: staging: rtl8712: fix uninit-value in usbread8 and friends When r8712usbctrlvendorreq returns...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989357)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989357 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Prevent use of lock before it is initialized If there is a failure during probe of hfi...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-989993)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989993 advisory. In the Linux kernel, the following vulnerability has been resolved: rtl818x: Prevent using not initialized queues Using not existing queues can panic the kernel with...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990378)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990378 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid uninitialized value in BPFCOREREADBITFIELD Changes from V1: - Use a default branch in...

Samba Information Disclosure (CVE-2025-9640)

In the vfsstreamsxattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability. Note that Nessus has not tested for...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988785)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988785 advisory. In the Linux kernel, the following vulnerability has been resolved: staging: rtl8712: fix uninit-value in r871xudrvinit When 'tmpU1b' returns from r8712read8padapter...