CVE-2025-4517 Arbitrary writes via tarfile realpath overflow

Allows arbitrary filesystem writes outside the extraction directory during extraction with filter="data". You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall or TarFile.extract using the filter= parameter with a value of...

CVE-2025-31359

A directory traversal vulnerability exists in the PVMP package unpacking functionality of Parallels Desktop for Mac version 20.2.2 55879. This vulnerability can be exploited by an attacker to write to arbitrary files, potentially leading to privilege escalation...

PT-2025-23644 · Samsung · Exynos

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor Exynos versions 1480 and 2400 Description: An issue was discovered in the Samsung Mobile Processor Exynos, where the lack of a length check leads to out-of-bounds writes. Recommendations: For Samsung Mobile Processor...

SAMSUNG Exynos 1380 安全漏洞

SAMSUNG Exynos 1380 is a cell phone chip processor from Samsung South Korea. A security vulnerability exists in SAMSUNG Exynos 1380 that stems from a lack of length checking leading to out-of-bounds writes...

CVE-2025-23097

An issue was discovered in Samsung Mobile Processor Exynos 1380. The lack of a length check leads to out-of-bounds writes...

PT-2025-23634 · Samsung · Samsung Mobile Processor Exynos

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor Exynos versions 1480 through 2400 Description: An issue was discovered in the Samsung Mobile Processor Exynos, where the lack of a length check leads to out-of-bounds writes. Recommendations: For Samsung Mobile...

Python 安全漏洞

Python is an open source, object-oriented programming language from the Python Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. A security vulnerability exists in Python 3.12 and later, which stems from an extraction filter that allows...

PT-2025-23667 · Samsung · Exynos 1380

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor Exynos 1380 affected versions not specified Description: An issue was discovered in the Samsung Mobile Processor Exynos 1380, where the lack of a length check leads to out-of-bounds writes. Recommendations: At the...

Parallels Desktop 安全漏洞

Parallels Desktop is a suite of virtual machine software for the macOS platform from US-based Parallels, Inc. A security vulnerability exists in Parallels Desktop for Mac version 20.2.2, which stems from a directory traversal issue in the PVMP package decompression feature that could lead to...

CVE-2025-23097

An issue was discovered in Samsung Mobile Processor Exynos 1380. The lack of a length check leads to out-of-bounds writes...

CVE-2025-23103

An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The lack of a length check leads to out-of-bounds writes...

SAMSUNG Exynos 2400和SAMSUNG Exynos 1480 安全漏洞

SAMSUNG Exynos 2400 and SAMSUNG Exynos 1480 are both cell phone chip processors from Samsung South Korea. A security vulnerability exists in SAMSUNG Exynos 2400 and SAMSUNG Exynos 1480, which stems from a lack of length checking leading to out-of-bounds writes...

CVE-2025-23107

An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The lack of a length check leads to out-of-bounds writes...

CVE-2025-23107

An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The lack of a length check leads to out-of-bounds writes...

CVE-2025-25179

Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages...

CVE-2025-23099

An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The lack of a length check leads to out-of-bounds writes...

CVE-2025-23099

Affected: Samsung Mobile Processor Exynos 1480 and Exynos 2400. Issue: missing length check leading to out-of-bounds writes in the affected components. Details consistently point to this root cause across multiple sources; no concrete exploit information or CVE-specific exploit path is provided i...

SAMSUNG Exynos 2400和SAMSUNG Exynos 1480 缓冲区错误漏洞

SAMSUNG Exynos 2400 and SAMSUNG Exynos 1480 are both cell phone chip processors from Samsung South Korea. A security vulnerability exists in the SAMSUNG Exynos 2400 and SAMSUNG Exynos 1480 that stems from a missing length check that could lead to out-of-bounds writes...

CVE-2025-23099

An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The lack of a length check leads to out-of-bounds writes...

tar-fs 路径遍历漏洞

tar-fs is a tar-stream filesystem bundle by the individual developer Mathias Buus. A path traversal vulnerability exists in tar-fs versions prior to 3.0.9, which stems from the ability to write outside of a specified directory when extracting, potentially leading to arbitrary file writes...