CVE-2025-68777

In the Linux kernel, the following vulnerability has been resolved: Input: tiam335xtsc - fix off-by-one error in wireorder validation The current validation 'wireorderi ARRAYSIZEconfigpins' allows wireorderi to equal ARRAYSIZEconfigpins, which causes out-of-bounds access when used as index in...

AZL-74450 CVE-2025-68777 affecting package kernel for versions less than 6.6.121.1-1

In the Linux kernel, the following vulnerability has been resolved: Input: tiam335xtsc - fix off-by-one error in wireorder validation The current validation 'wireorderi ARRAYSIZEconfigpins' allows wireorderi to equal ARRAYSIZEconfigpins, which causes out-of-bounds access when used as index in...

UBUNTU-CVE-2025-68777

In the Linux kernel, the following vulnerability has been resolved: Input: tiam335xtsc - fix off-by-one error in wireorder validation The current validation 'wireorderi ARRAYSIZEconfigpins' allows wireorderi to equal ARRAYSIZEconfigpins, which causes out-of-bounds access when used as index in...

CVE-2026-0892

creationtimestamp| type| source ---|---|--- 2026-01-13 16:03:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mccwldcfcw2u 2026-01-13 16:10:43+00:00| seen| Telegram/NtGdm-nKviNCWHikD-PcF3b4R8AkgqcqlHzrx8XSXT7S4dA 2026-01-13 23:47:38+00:00| seen|...

CVE-2025-68777

In the Linux kernel, the following vulnerability has been resolved: Input: tiam335xtsc - fix off-by-one error in wireorder validation The current validation 'wireorderi ARRAYSIZEconfigpins' allows wireorderi to equal ARRAYSIZEconfigpins, which causes out-of-bounds access when used as index in...

CVE-2025-68777

In the Linux kernel, the following vulnerability has been resolved: Input: tiam335xtsc - fix off-by-one error in wireorder validation The current validation 'wireorderi ARRAYSIZEconfigpins' allows wireorderi to equal ARRAYSIZEconfigpins, which causes out-of-bounds access when used as index in...

CVE-2025-68777

CVE-2025-68777 in the Linux kernel affects the ti_am335x_tsc driver. The validation for wire_order uses the condition wire_order[i] > ARRAY_SIZE(config_pins), which permits wire_order[i] to equal ARRAY_SIZE(config_pins) and can trigger an out-of-bounds access when indexing config_pins[wire_ord...

CVE-2025-68777 Input: ti_am335x_tsc - fix off-by-one error in wire_order validation

In the Linux kernel, the following vulnerability has been resolved: Input: tiam335xtsc - fix off-by-one error in wireorder validation The current validation 'wireorderi ARRAYSIZEconfigpins' allows wireorderi to equal ARRAYSIZEconfigpins, which causes out-of-bounds access when used as index in...

CVE-2025-68777 Input: ti_am335x_tsc - fix off-by-one error in wire_order validation

In the Linux kernel, the following vulnerability has been resolved: Input: tiam335xtsc - fix off-by-one error in wireorder validation The current validation 'wireorderi ARRAYSIZEconfigpins' allows wireorderi to equal ARRAYSIZEconfigpins, which causes out-of-bounds access when used as index in...

CVE-2026-0507

creationtimestamp| type| source ---|---|--- 2026-01-13 03:00:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcbkspx7uq2u 2026-01-13 03:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcbktmnaj22b 2026-01-13 03:02:40+00:00| seen|...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which originates from a worse-than-one error in the wireorder validation in the tiam335xtsc driver, which could lead to...

CVE-2026-22252

creationtimestamp| type| source ---|---|--- 2026-01-12 20:01:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcatgdt6jq2u 2026-01-12 20:07:23+00:00| seen| Telegram/8sAp-VzdCpmBtZpXHcIlhxzqtmWknERFSKz0UU7al4qy2OU 2026-01-12 21:56:33+00:00| seen|...

CVE-2026-0839

creationtimestamp| type| source ---|---|--- 2026-01-11 06:25:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mc4vdwnb372t 2026-01-11 06:25:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mc4vedkjop2t 2026-01-11 07:00:35+00:00|...

CVE-2026-21884

creationtimestamp| type| source ---|---|--- 2026-01-10 03:23:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mc22pzr3ja2t 2026-01-10 04:02:20+00:00| seen| Telegram/hIscdD1HJtLSg0SDRbuSjzrqCFMwMv5SX0wjW8Bk7vM6o 2026-01-10 04:14:31+00:00| seen|...

CVE-2026-22594

creationtimestamp| type| source ---|---|--- 2026-01-10 03:22:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mc22nlkmkt2z 2026-01-10 03:22:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mc22obo6f52p 2026-01-10 04:02:47+00:00|...

CVE-2017-18347

Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device's protected firmware via a special sequence of Serial Wire Debug SWD commands because there is a race condition between full initialization of the SWD...

CVE-2021-41119

Wire-server is the system server for the wire back-end services. Releases prior to v2022-03-01 are subject to a denial of service attack via a crafted object causing a hash collision. This collision causes the server to spend at least quadratic time parsing it which can lead to a denial of servic...

CVE-2021-41101

wire-server is an open-source back end for Wire, a secure collaboration platform. Before version 2.106.0, the CORS Access-Control-Allow-Origin header set by nginz is set for all subdomains of .wire.com including wire.com. This means that if somebody were to find an XSS vector in any of the...

CVE-2022-23605

Wire webapp is a web client for the wire messaging protocol. In versions prior to 2022-01-27-production.0 expired ephemeral messages were not reliably removed from local chat history of Wire Webapp. In versions before 2022-01-27-production.0 ephemeral messages and assets might still be accessible...

CVE-2022-31009

wire-ios is an iOS client for the Wire secure messaging application. Invalid accent colors of Wire communication partners may render the iOS Wire Client partially unusable by causing it to crash multiple times on launch. These invalid accent colors can be used by and sent between Wire users. The...