Lucene search
K

3038 matches found

NVD
NVD
added 2025/10/30 5:15 a.m.3 views

CVE-2025-62231

A flaw was identified in the X.Org X server’s X Keyboard Xkb extension where improper bounds checking in the XkbSetCompatMap function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a cras...

7.3CVSS0.00255EPSS
Exploits0References38
CVE
CVE
added 2025/10/30 5:8 a.m.24 views

CVE-2025-62231

The CVE-2025-62231 issue is a use-after-free/value overflow in the X.Org X server’s XkbSetCompatMap() that can overflow an unsigned short and cause memory corruption or a crash. Public advisories (ALMAS/ALAS) associate this with the Xorg X11/Xwayland stack and Xorg-server-Xwayland/Xorg components...

7.3CVSS6.4AI score0.00255EPSS
Exploits0References38
Vulnrichment
Vulnrichment
added 2025/10/30 5:8 a.m.3 views

CVE-2025-62231 Xorg: xmayland: value overflow in xkbsetcompatmap()

A flaw was identified in the X.Org X server’s X Keyboard Xkb extension where improper bounds checking in the XkbSetCompatMap function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a cras...

7.3CVSS6.4AI score0.00255EPSS
Exploits0References36
EUVD
EUVD
added 2025/10/30 5:8 a.m.5 views

EUVD-2025-36898

A flaw was identified in the X.Org X server’s X Keyboard Xkb extension where improper bounds checking in the XkbSetCompatMap function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a cras...

7.3CVSS6.3AI score0.00255EPSS
Exploits0References3
AlpineLinux
AlpineLinux
added 2025/10/30 5:8 a.m.11 views

CVE-2025-62231

A flaw was identified in the X.Org X server’s X Keyboard Xkb extension where improper bounds checking in the XkbSetCompatMap function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a cras...

7.3CVSS6.5AI score0.00255EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/10/30 5:8 a.m.3 views

CVE-2025-62231

A flaw was identified in the X.Org X server’s X Keyboard Xkb extension where improper bounds checking in the XkbSetCompatMap function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a cras...

7.3CVSS6.3AI score0.00255EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/10/30 12:0 a.m.2 views

ImageMagick < 7.1.2-8 DoS (GHSA-wpp4-vqfq-v4hp)

The remote host has a version of ImageMagick installed that is prior to prior to 7.1.2-8. It is, therefore, affected by denial of service vulnerability as referenced in GHSA-wpp4-vqfq-v4hp advisory. - ImageMagick is a software suite to create, edit, compose, or convert bitmap images. ImageMagick...

5.5CVSS5.4AI score0.00298EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/10/30 12:0 a.m.3 views

Red Hat Enterprise Linux 安全漏洞

Red Hat Enterprise Linux is a Linux operating system for enterprise users from the American company Red Hat. A security vulnerability exists in Red Hat Enterprise Linux that stems from improper boundary checking in the XkbSetCompatMap function, which could result in an unsigned short integer...

7.3CVSS6.8AI score0.00255EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2025/10/29 12:24 a.m.1 views

SUSE CVE-2025-40081

In the Linux kernel, the following vulnerability has been resolved: perf: armspe: Prevent overflow in PERFIDX2OFF Cast nrpages to unsigned long to avoid overflow when handling large AUX buffer sizes = 2 GiB...

5.5CVSS7AI score0.00175EPSS
Exploits0References22
SUSE CVE
SUSE CVE
added 2025/10/29 12:23 a.m.1 views

SUSE CVE-2025-62594

ImageMagick is a software suite to create, edit, compose, or convert bitmap images. ImageMagick versions prior to 7.1.2-8 are vulnerable to denial-of-service due to unsigned integer underflow and division-by-zero in the CLAHEImage function. When tile width or height is zero, unsigned underflow...

5.3CVSS6.8AI score0.00298EPSS
Exploits1References7
NVD
NVD
added 2025/10/28 12:15 p.m.3 views

CVE-2025-40081

In the Linux kernel, the following vulnerability has been resolved: perf: armspe: Prevent overflow in PERFIDX2OFF Cast nrpages to unsigned long to avoid overflow when handling large AUX buffer sizes = 2 GiB...

0.00175EPSS
Exploits0References8
OSV
OSV
added 2025/10/28 12:15 p.m.8 views

UBUNTU-CVE-2025-40081

In the Linux kernel, the following vulnerability has been resolved: perf: armspe: Prevent overflow in PERFIDX2OFF Cast nrpages to unsigned long to avoid overflow when handling large AUX buffer sizes = 2 GiB...

5.9AI score0.00175EPSS
Exploits0References38
EUVD
EUVD
added 2025/10/28 11:48 a.m.2 views

EUVD-2025-36447

In the Linux kernel, the following vulnerability has been resolved: perf: armspe: Prevent overflow in PERFIDX2OFF Cast nrpages to unsigned long to avoid overflow when handling large AUX buffer sizes = 2 GiB...

6.4AI score0.00175EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2025/10/28 5:12 a.m.11 views

CVE-2025-62594

A vulnerability in ImageMagick’s CLAHEImage function in MagickCore/enhance.c allows a zero tile width or height to trigger unsigned integer underflow and division-by-zero conditions. When tileinfo.height or tileinfo.width becomes zero, pointer arithmetic using these values can result in...

5.5CVSS6.7AI score0.00298EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/10/28 12:0 a.m.3 views

PT-2025-44230

Name of the Vulnerable Software and Affected Versions X.Org Server affected versions not specified Description A flaw exists in the X Keyboard Xkb extension of the X.Org X server. Improper bounds checking within the XkbSetCompatMap function can lead to an unsigned short overflow when processing...

7.8CVSS8.3AI score0.0045EPSS
Exploits0References149
Tenable Nessus
Tenable Nessus
added 2025/10/28 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-62594

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is a software suite to create, edit, compose, or convert bitmap images. ImageMagick versions prior to 7.1.2-8 are vulnerable to denial-of-service du...

5.5CVSS5.8AI score0.00298EPSS
Exploits1References3
CNNVD
CNNVD
added 2025/10/28 12:0 a.m.7 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to convert nrpages to an unsigned long type, which could lead to an overflow in the PERFIDX2OFF...

6.2AI score0.00175EPSS
Exploits0References7
OSV
OSV
added 2025/10/28 12:0 a.m.1 views

UBUNTU-CVE-2025-62231

A flaw was identified in the X.Org X server’s X Keyboard Xkb extension where improper bounds checking in the XkbSetCompatMap function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a cras...

7.3CVSS7.2AI score0.00255EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2025/10/27 11:33 p.m.8 views

ImageMagick CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash (DoS)

Summary A single root cause in the CLAHE implementation — tile width/height becoming zero — produces two distinct but related unsafe behaviors. Vulnerabilities exists in the CLAHEImage function of ImageMagick’s MagickCore/enhance.c. 1. Unsigned integer underflow → out-of-bounds pointer arithmetic...

5.5CVSS7.8AI score0.00298EPSS
Exploits1References4Affected Software12
EUVD
EUVD
added 2025/10/27 11:33 p.m.2 views

EUVD-2025-36365

ImageMagick CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash DoS...

4.7CVSS6.2AI score0.00298EPSS
Exploits1References3
Rows per page
Query Builder