EUVD-2025-204876

Malicious code in rpc-validate npm...

MAL-2025-192749 Malicious code in rpc-validate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6c08295788ac997e7566fad616096d89ea31e26771abbd32fb6d42f199875f2 The package rpc-validate was found to contain malicious code. Source: ghsa-malware 95f6f8651242afb77a3d28835bf912aacbfc4e3abbc3da2313fb6c3bd0c12ed1 A...

Malicious Package

Overview rpc-validate is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2025-15013

A vulnerability was identified in floooh sokol up to 5d11344150973f15e16d3ec4ee7550a73fb995e0. The impacted element is the function sgvalidatepipelinedesc in the library sokolgfx.h. Such manipulation leads to stack-based buffer overflow. The attack must be carried out locally. The exploit is...

CVE-2025-15013

A vulnerability was identified in floooh sokol up to 5d11344150973f15e16d3ec4ee7550a73fb995e0. The impacted element is the function sgvalidatepipelinedesc in the library sokolgfx.h. Such manipulation leads to stack-based buffer overflow. The attack must be carried out locally. The exploit is...

Stack-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow via the sgvalidatepipelinedesc function. An attacker can execute arbitrary code or cause a crash by supplying crafted input that triggers a stack-based buffer overflow. Remediation A fix was pushed into the...

CVE-2025-15013 floooh sokol sokol_gfx.h _sg_validate_pipeline_desc stack-based overflow

A vulnerability was identified in floooh sokol up to 5d11344150973f15e16d3ec4ee7550a73fb995e0. The impacted element is the function sgvalidatepipelinedesc in the library sokolgfx.h. Such manipulation leads to stack-based buffer overflow. The attack must be carried out locally. The exploit is...

Sokol security vulnerabilities

Sokol is a platform interface for Andre Weissflog individual developers. A security vulnerability exists in Sokol, which stems from a misbehavior of the function sgvalidatepipelinedesc in the library sokolgfx.h, which could lead to a stack buffer overflow...

dcn20_fast_validate_bw Heap Buffer Overflow DoS

The vulnerability of the dcn20fastvalidatebw function in the drivers/gpu/drm/amd/display/dc/dcn20/dcn20resource.c driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Component DoS

The vulnerability in the sound/usb/validate.c component of the Linux operating system is related to reading data from beyond the allowed buffer limits. Exploiting this vulnerability allows an attacker to cause a service failure...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-991153)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991153 advisory. In the Linux kernel, the following vulnerability has been resolved: dm raid: fix accesses beyond end of raid member array On dm-raid table load using raidctr, dm-rai...

SUSE CVE-2023-53820

In the Linux kernel, the following vulnerability has been resolved: loop: loopsetstatusfrominfo check before assignment In loopsetstatusfrominfo, lo-looffset and lo-losizelimit should be checked before reassignment, because if an overflow error occurs, the original correct value will be changed t...

CVE-2025-48628

In validateIconUserBoundary of PrintManagerService.java, there is a possible cross-user image leak due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-40334 drm/amdgpu: validate userq buffer virtual address and size

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate userq buffer virtual address and size It needs to validate the userq object virtual address to determine whether it is residented in a valid vm mapping...

CVE-2025-40335

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate userq input args This will help on validating the userq input args, and rejecting for the invalid userq request at the IOCTLs first place...

EUVD-2025-201741

In validateIconUserBoundary of PrintManagerService.java, there is a possible cross-user image leak due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

amdgpu_dm create_validate_stream_for_sink DoS

Vulnerability of the createvalidatestreamforsink function in the drivers/gpu/drm/amd/display/amdgpudm/amdgpudm.c file – The driver that supports AMD GPU Direct Rendering Infrastructure DRI in Linux operating systems is vulnerable due to a pointer issue. Exploiting this vulnerability could allow a...

Inside Hive Pro: A Complete Platform Review

Knowing you have a vulnerability is one thing; knowing if you’re truly exposed is another. A critical vulnerability might exist on a server, but can an attacker actually reach it? Will your firewall block the attempt? Will your EDR detect the payload? Traditional vulnerability management can't...

Malicious code in session-validate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91001b31023cb6f1a30d084b1c484e703936c4378ac7b76fc85dd023771cd8d2 The package session-validate was found to contain malicious code...

MAL-2025-191586 Malicious code in session-validate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91001b31023cb6f1a30d084b1c484e703936c4378ac7b76fc85dd023771cd8d2 The package session-validate was found to contain malicious code...