CVE-2025-10547

An uninitialized variable in the HTTP CGI request arguments processing component of Vigor Routers running DrayOS may allow an attacker the ability to perform RCE on the appliance through memory corruption...

CVE-2025-10547 CVE-2025-10547

An uninitialized variable in the HTTP CGI request arguments processing component of Vigor Routers running DrayOS may allow an attacker the ability to perform RCE on the appliance through memory corruption...

CVE-2025-10547

CVE-2025-10547 affects DrayTek Vigor Routers running DrayOS. An uninitialized variable in the HTTP CGI request arguments processing component can cause memory corruption, enabling remote code execution (RCE). Impact, per sources, includes unauthenticated attacker access via LAN or WAN (if EasyVPN...

CVE-2025-58777

VT Studio versions 8.53 and prior contain an access of uninitialized pointer vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the affected product...

Multiple vulnerabilities in multiple Keyence products

Overview Multiple products provided by KEYENCE CORPORATION contain multiple vulnerabilities listed below. Stack-based buffer overflow CWE-121 - CVE-2025-58775, CVE-2025-58776 Access of uninitialized pointer CWE-824 - CVE-2025-58777 Buffer underflow CWE-124 - CVE-2025-61690 Out-of-bounds read...

DrayTek Vigor Routers 安全漏洞

DrayTek Vigor Routers is a series of wireless routers from China-based DrayTek. A security vulnerability exists in DrayTek Vigor Routers that stems from the presence of uninitialized variables in the HTTP CGI request parameter handling component, which could lead to memory corruption and remote...

CVE-2025-58777

VT Studio versions 8.53 and prior contain an access of uninitialized pointer vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the affected product...

CVE-2025-58777

VT Studio versions 8.53 and prior contain an access of uninitialized pointer vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the affected product...

CVE-2025-58777

VT Studio versions 8.53 and prior contain an access of uninitialized pointer vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the affected product...

CVE-2025-58777

CVE-2025-58777 affects KEYENCE VT STUDIO 8.53 and earlier, where an access of an uninitialized pointer (via a specially crafted file) may lead to arbitrary code execution. Mitigation noted in PT-2025-40318: update VT STUDIO to a version later than 8.53.

CVE-2025-58777

VT Studio versions 8.53 and prior contain an access of uninitialized pointer vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the affected product...

KEYENCE VT STUDIO 缓冲区错误漏洞

KEYENCE VT STUDIO is a human-machine interface screen design and configuration software from KEYENCE Japan. A buffer error vulnerability exists in KEYENCE VT STUDIO version 8.53 and earlier, which originates from an uninitialized pointer access and could lead to the execution of arbitrary code...

PT-2025-40318

Name of the Vulnerable Software and Affected Versions VT Studio versions 8.53 and prior Description VT Studio versions 8.53 and earlier are susceptible to an issue where an uninitialized pointer can be accessed. Exploitation of this condition, through the use of a specially crafted file, may lead...

SUSE CVE-2022-50465

In the Linux kernel, the following vulnerability has been resolved: ext4: fix leaking uninitialized memory in fast-commit journal When space at the end of fast-commit journal blocks is unused, make sure to zero it out so that uninitialized memory is not leaked to disk...

SUSE CVE-2023-53462

In the Linux kernel, the following vulnerability has been resolved: hsr: Fix uninit-value access in fillframeinfo Syzbot reports the following uninit-value access problem. ===================================================== BUG: KMSAN: uninit-value in fillframeinfo net/hsr/hsrforward.c:601 inli...

SUSE CVE-2023-53525

In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Allow UD qptype to join multicast only As for multicast: - The SIDR is the only mode that makes sense; - Besides PSUDP, other port spaces like PSIB is also allowed, as it is UD compatible. In this case qkey also needs t...

CLSA-2025-1759330475 libssh: Fix of CVE-2025-5372

CVE-2025-5372: uninitialized key buffers caused by inconsistent sshkdf return value...

CVE-2023-53525

In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Allow UD qptype to join multicast only As for multicast: - The SIDR is the only mode that makes sense; - Besides PSUDP, other port spaces like PSIB is also allowed, as it is UD compatible. In this case qkey also needs t...

CVE-2023-53462

In the Linux kernel, the following vulnerability has been resolved: hsr: Fix uninit-value access in fillframeinfo Syzbot reports the following uninit-value access problem. ===================================================== BUG: KMSAN: uninit-value in fillframeinfo net/hsr/hsrforward.c:601 inli...

CVE-2022-50465

In the Linux kernel, the following vulnerability has been resolved: ext4: fix leaking uninitialized memory in fast-commit journal When space at the end of fast-commit journal blocks is unused, make sure to zero it out so that uninitialized memory is not leaked to disk...