16533 matches found
PT-2025-33573
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel’s comedi subsystem, specifically within the pcl812 driver. An unchecked integer value, it-options1, received from userspace, can lead to a bit shift...
ffmpeg:ffmpeg_AV_CODEC_ID_DXV_DEC_fuzzer: Use-of-uninitialized-value in dxv_decompress_cgo
Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5339599339847680 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDDXVDECfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type:...
libxml2 Heap Buffer Overflow DoS
The vulnerability of the xmlSchemaCopyValue function in the libxml2 library is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to trigger a service failure through a specially created document...
gnutls:gnutls_x509_parser_fuzzer: Use-of-uninitialized-value in gnutls_x509_ext_import_crl_dist_points
Detailed Report: https://oss-fuzz.com/testcase?key=6265652982120448 Project: gnutls Fuzzing Engine: libFuzzer Fuzz Target: gnutlsx509parserfuzzer Job Type: libfuzzermsangnutls Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: gnutlsx509extimportcrldistpoints...
OESA-2025-1820 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: tipc: fix the msg-req tlv len check in tipcnlcompatnametabledumpheader This is a follow-up for commit 974cb0e3e7c9 "tipc: fix uninit-value in...
OESA-2025-1793 git security update
Security Fixes: Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed CRLF. When writing a config...
ipvs: fix uninit-value for saddr in do_output_route4
...
fbdev: omapfb: Add 'plane' value check
...
latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.
...
Unspecified Vulnerability in Redis (CNVD-2025-16526)
Redis is the United States Redis company's set of open-source use of ANSI C written to support the network , can be based on memory can also be a persistent log-type , key-value Key-Value storage database , and provides a variety of languages API. Redis has a security vulnerability that could be...
Unspecified Vulnerability in Redis (CNVD-2025-16525)
Redis is the United States Redis company's set of open-source use of ANSI C written to support the network , can be based on memory can also be a persistent log-type , key-value Key-Value storage database , and provides a variety of languages API. Redis has a security vulnerability that can be...
Security update for libsoup2
This update for libsoup2 fixes the following issues: CVE-2025-4945: Add value checks for date/time parsing bsc1243314. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command list...
Security update for libsoup
This update for libsoup fixes the following issues: CVE-2025-4945: Add value checks for date/time parsing bsc1243314. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command liste...
SUSE-SU-2025:02276-1 Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-4945: Add value checks for date/time parsing bsc1243314...
CVE-2025-38330
In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Fix OOB memory read access in KUnit test ctl cache KASAN reported out of bounds access - csdspctlcacheinitmultipleoffsets. The code uses mockcoefftemplate.lengthbytes 4 bytes for register value allocations. But...
AZL-64979 CVE-2025-38312 affecting package kernel for versions less than 6.6.96.1-1
In the Linux kernel, the following vulnerability has been resolved: fbdev: core: fbcvt: avoid division by 0 in fbcvthperiod In fbfindmodecvt, iff mode-refresh somehow happens to be 0x80000000, cvt.frefresh will become 0 when multiplying it by 2 due to overflow. It's then passed to fbcvthperiod,...
DEBIAN-CVE-2025-38277
In the Linux kernel, the following vulnerability has been resolved: mtd: nand: ecc-mxic: Fix use of uninitialized variable ret If ctx-steps is zero, the loop processing ECC steps is skipped, and the variable ret remains uninitialized. It is later checked and returned, which leads to undefined...
CVE-2025-38342 software node: Correct a OOB check in software_node_get_reference_args()
In the Linux kernel, the following vulnerability has been resolved: software node: Correct a OOB check in softwarenodegetreferenceargs softwarenodegetreferenceargs wants to get @index-th element, so the property value requires at least 'index + 1 sizeofref' bytes but that can not be guaranteed by...
OSV-2025-542 Use-of-uninitialized-value in httpEncode64_3
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=430110066 Crash type: Use-of-uninitialized-value Crash state: httpEncode643 fuzzhttpcore.c fuzzhttpcore.c...