7530 matches found
CVE-2025-36907
In drawsurfaceimage of abl/android/lib/draw/draw.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege via USB fastboot, after a bootloader unlock, with no additional execution privileges needed. User interaction is needed for...
DEBIAN-CVE-2025-39674
In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: ufs-qcom: Fix ESI null pointer dereference ESI/MSI is a performance optimization feature that provides dedicated interrupts per MCQ hardware queue. This is optional feature and UFS MCQ should work with and without ESI...
Malicious code in universal-airdrop-checker-ai (npm)
The package universal-airdrop-checker-ai was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-46460 Malicious code in universal-airdrop-checker-ai (npm)
The package universal-airdrop-checker-ai was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
The vulnerability of the composite_dev_cleanup() function in the Linux kernel’s USB component allows a hacker to trigger a service failure.
The vulnerability of the compositedevcleanup function in the Linux kernel’s USB component is related to the dereferencing of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2025-36269
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw within the UFS Universal Flash Storage Qualcomm qcom driver related to Enhanced System Interrupt ESI and Message Signaled Interrupts MSI. A regression...
Grub2: udf: heap based buffer overflow in grub_udf_read_block() may lead to arbitrary code execution
...
usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume
...
usb: gadget: u_serial: Fix race condition in TTY wakeup
...
usb: typec: altmodes/displayport: do not index invalid pin_assignments
...
usb: typec: displayport: Fix potential deadlock
...
usb: net: sierra: check for no status endpoint
...
CVE-2025-36907
In drawsurfaceimage of abl/android/lib/draw/draw.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege via USB fastboot, after a bootloader unlock, with no additional execution privileges needed. User interaction is needed for...
usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
...
sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation.
...
scsi: ufs: qcom: Only free platform MSIs when ESI is enabled
...
usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind.
...
usb: gadget : fix use-after-free in composite_dev_cleanup()
...