24507 matches found
media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
...
Wget2: gnu wget2: memory corruption and crash via filename sanitization logic with attacker-controlled urls
...
Wget2: arbitrary file write via metalink path traversal in gnu wget2
...
CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages
...
hv_netvsc: Fix panic during namespace deletion with VF
...
benet: fix BUG when creating VFs
...
Chromium: CVE-2026-0628 Insufficient policy enforcement in WebView tag
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Crypt::Sodium::XS module versions prior to 0.000042, for Perl, include a vulnerable version of libsodium
...
urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)
...
bearer token leak on cross-protocol redirect
...
broken TLS options for threaded LDAPS
...
CVE-2025-13151
...
smb: client: fix use-after-free in crypt_message when using async crypto
...
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
User interface ui misrepresentation of critical information in Microsoft Edge for Android allows an authorized attacker to perform spoofing over a network...
block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock
...
backlight: led-bl: Add devlink to supplier LEDs
...
drm/vgem-fence: Fix potential deadlock on release
...
crypto: starfive - Correctly handle return of sg_nents_for_len
...
irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()
...
wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring()
...
ALSA: firewire-motu: add bounds check in put_user loop for DSP events
...
mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()
...
staging: most: remove broken i2c driver
...
NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags
...
URI Credential Leakage Bypass over CVE-2025-27221
...
libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to crypto_core_ed25519_is_valid_point, mishandles checks for whether an elliptic curve point is valid because it sometimes allows points that aren't in the main cryptographic group.
...
OOBW in utf_16le_to_utf_8_truncated() in libpcap
...
OOBR and OOBW in pcap_ether_aton() in libpcap
...
Tracing logging user input may result in poisoning logs with ANSI escape sequences
...
In GnuPG through 2.4.8, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)
...
NULL Pointer Dereference in PDO quoting
...
Heap buffer overflow in array_merge()
...
Information Leak of Memory in getimagesize
...
In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed material, such that signature verification of the modified message succeeds (although an "invalid armor" message is printed during verification). This is related to use of \f as a marker to denote truncation of a long plaintext line.
...
MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability
...
PyTorch torch.lstm_cell memory corruption
...
smack: fix bug: unprivileged task can create labels
...
crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id
...
RDMA/rxe: Fix null deref on srq->rq.queue after resize failure
...
bpf: Check skb->transport_header is set in bpf_skb_check_mtu
...
ima: Handle error code returned by ima_filter_rule_match()
...
btrfs: fix racy bitfield write in btrfs_clear_space_info_full()
...
nbd: defer config put in recv_work
...
bpf: Do not let BPF test infra emit invalid GSO types to stack
...
fs/ntfs3: Initialize allocated memory before use
...
bpf: Fix invalid prog->stats access when update_effective_progs fails
...
spi: tegra210-quad: Fix timeout handling
...
ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events
...