CVE-2025-58777

CVE-2025-58777 affects KEYENCE VT STUDIO 8.53 and earlier, where an access of an uninitialized pointer (via a specially crafted file) may lead to arbitrary code execution. Mitigation noted in PT-2025-40318: update VT STUDIO to a version later than 8.53.

CVE-2025-58777

VT Studio versions 8.53 and prior contain an access of uninitialized pointer vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the affected product...

KEYENCE VT STUDIO 缓冲区错误漏洞

KEYENCE VT STUDIO is a human-machine interface screen design and configuration software from KEYENCE Japan. A buffer error vulnerability exists in KEYENCE VT STUDIO version 8.53 and earlier, which originates from an uninitialized pointer access and could lead to the execution of arbitrary code...

KEYENCE VT STUDIO 资源管理错误漏洞

KEYENCE VT STUDIO is a human-machine interface screen design and configuration software from KEYENCE Japan. A resource management error vulnerability exists in KEYENCE VT STUDIO version 8.53 and earlier, which originates from a reuse after release and could lead to the execution of arbitrary code...

PT-2025-40321

Name of the Vulnerable Software and Affected Versions VT STUDIO versions 8.53 and prior Description VT STUDIO versions 8.53 and earlier have a use after free issue. A specially crafted file can trigger arbitrary code execution on a vulnerable system. Recommendations Update VT STUDIO to a version...

PT-2025-40320

Name of the Vulnerable Software and Affected Versions VT STUDIO versions 8.53 and prior Description VT STUDIO versions 8.53 and earlier are susceptible to an out-of-bounds read issue. Processing a specially crafted file may lead to arbitrary code execution on the affected product. Recommendations...

EulerOS 2.0 SP10 : kernel (EulerOS-SA-2025-2100)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0CVE-2022-50228 md: call mdstopwrites in mdstopCVE-2022-49987 iommu/vt-d: avoid...

Linux Distros Unpatched Vulnerability : CVE-2025-38594

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix UAF on sva unbind with pending IOPFs Commit 17fce9d2336d iommu/vt-d: Put iop...

Linux Distros Unpatched Vulnerability : CVE-2018-18883

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Xen 4.9.x through 4.11.x, on Intel x86 platforms, allowing x86 HVM and PVH guests to cause a host OS denial of service NULL pointer...

INVT VT-Designer and HMITool

RISK EVALUATION Successful exploitation of these vulnerabilities could allow attackers to execute arbitrary code in the context of the current process. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as:...

SUSE CVE-2025-38594

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix UAF on sva unbind with pending IOPFs Commit 17fce9d2336d "iommu/vt-d: Put iopf enablement in domain attach path" disables IOPF on device by removing the device from its IOMMU's IOPF queue when the last IOPF-capabl...

UBUNTU-CVE-2025-38594

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix UAF on sva unbind with pending IOPFs Commit 17fce9d2336d "iommu/vt-d: Put iopf enablement in domain attach path" disables IOPF on device by removing the device from its IOMMU's IOPF queue when the last IOPF-capabl...

CVE-2025-38594 iommu/vt-d: Fix UAF on sva unbind with pending IOPFs

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix UAF on sva unbind with pending IOPFs Commit 17fce9d2336d "iommu/vt-d: Put iopf enablement in domain attach path" disables IOPF on device by removing the device from its IOMMU's IOPF queue when the last IOPF-capabl...

SUSE SLES12: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2025:02846-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02846-1 advisory. The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: -...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the iommu/vt-d module that can lead to post-release reuse during sva unbundling...

PT-2025-46630

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.16.0 191 Description The Linux kernel contains a flaw within the iommu/vt-d subsystem related to debugfs and legacy mode page table dump logic. In legacy mode, the SSPTPTR is not properly checked, potentially...

Malicious code in vt-shaver (npm)

The package vt-shaver was found to contain malicious code...

MAL-2025-38662 Malicious code in vt-shaver (npm)

The package vt-shaver was found to contain malicious code...

The vulnerability of the software for programming operator panels of the VT series, such as VT-Designer, arises from writing beyond buffer boundaries, allowing a hacker to execute arbitrary code.

The vulnerability of the software for programming operator panels of the VT series, such as VT-Designer, lies in the writing beyond buffer boundaries when processing PM3 files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the software for programming operator panels of the VT series, namely VT-Designer, arises from errors in data type mixing, allowing a hacker to execute arbitrary code.

The vulnerability of the software for programming operator panels of the VT series, such as VT-Designer, is related to errors in data type mixing during the processing of PM3 files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...