8538 matches found
CVE-2023-53779
Removed by vendor...
COMMAX UMS Client ActiveX Control 缓冲区错误漏洞
COMMAX UMS Client ActiveX Control is a browser plug-in from the Korean company COMMAX. A buffer error vulnerability exists in COMMAX UMS Client ActiveX Control version 1.7.0.2, which stems from a heap buffer overflow issue in CNCCtrl.dll that could lead to the execution of arbitrary code...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from usb-storage alauda not verifying the USB transfer state, which could lead to the use of uninitialized data...
Siemens SIMATIC CN 4100 访问控制错误漏洞
The Siemens SIMATIC CN 4100 is a communication node from Siemens, Germany. The Siemens SIMATIC CN 4100 suffers from an Access Control Error vulnerability that originates when the USB port allows an unauthenticated connection, which can be exploited by an attacker to cause a denial of service...
CVE-2025-48625
In multiple locations of UsbDataAdvancedProtectionHook.java, there is a possible way to access USB data when the screen is off due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-48625
In multiple locations of UsbDataAdvancedProtectionHook.java, there is a possible way to access USB data when the screen is off due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ALSA: usb-audio: Fix potential overflow of PCM transfer buffer
...
EUVD-2023-60060
In the Linux kernel, the following vulnerability has been resolved: regmap-irq: Fix out-of-bounds access when allocating config buffers When allocating the 2D array for handling IRQ type registers in regmapaddirqchipfwnode, the intent is to allocate a matrix with numconfigbases rows and...
CVE-2023-53760
In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: mcq: Fix &hwq-cqlock deadlock issue When ufshcderrhandler is executed, CQ event interrupt can enter waiting for the same lock. This can happen in ufshcdhandlemcqcqevents and also in ufsmtkmcqintr. The following...
CVE-2023-53761 USB: usbtmc: Fix direction for 0-length ioctl control messages
In the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: Fix direction for 0-length ioctl control messages The syzbot fuzzer found a problem in the usbtmc driver: When a user submits an ioctl for a 0-length control transfer, the driver does not check that the direction is...
CVE-2023-53761
In the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: Fix direction for 0-length ioctl control messages The syzbot fuzzer found a problem in the usbtmc driver: When a user submits an ioctl for a 0-length control transfer, the driver does not check that the direction is...
CVE-2023-53760 scsi: ufs: core: mcq: Fix &hwq->cq_lock deadlock issue
In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: mcq: Fix &hwq-cqlock deadlock issue When ufshcderrhandler is executed, CQ event interrupt can enter waiting for the same lock. This can happen in ufshcdhandlemcqcqevents and also in ufsmtkmcqintr. The following...
CVE-2023-53760
In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: mcq: Fix &hwq-cqlock deadlock issue When ufshcderrhandler is executed, CQ event interrupt can enter waiting for the same lock. This can happen in ufshcdhandlemcqcqevents and also in ufsmtkmcqintr. The following...
PT-2025-49582
Name of the Vulnerable Software and Affected Versions UsbDataAdvancedProtectionHook.java affected versions not specified Description A race condition exists in multiple locations within UsbDataAdvancedProtectionHook.java that may allow access to USB data even when the screen is off. Successful...
kalmia_send_init_packet Heap Buffer Overflow DoS
Vulnerability of the kalmiasendinitpacket function in the drivers/net/usb/kalmia.c module – The Linux USB device driver framework is vulnerable due to the lack of protection against uninitialized pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...
set_flicker() Function Heap Buffer Overflow DoS
Vulnerability of the setflicker function in the drivers/media/usb/gspca/cpia1.c module – The Linux kernel’s USB multimedia device driver relies on the ability to perform operations beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux SCSI Device Service Buffer Overflow DoS
The vulnerability of the cpulatencyqosadd, remove, and updaterequest interfaces in the driver/ufs/core/ufs-sysfs.c file of the Linux system’s SCSI device support module is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow a...
CVE-2025-40269
No description is available for this CVE. Mitigation To mitigate this issue, prevent the sndusbaudio kernel module from loading if USB audio functionality is not required. Create a file /etc/modprobe.d/disable-snd-usb-audio.conf with the following content: install sndusbaudio /bin/true After...
CVE-2025-40283
A use-after-free was found in the btusb Bluetooth driver in the Linux kernel. In btusbdisconnect, calling usbdriverreleaseinterface frees the btusb data structure, but the code subsequently accesses fields from this freed structure, causing a use-after-free condition...