23105 matches found
OpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attack
...
node-forge ASN.1 Unbounded Recursion
...
node-forge ASN.1 OID Integer Truncation
...
CVE-2025-12816
...
Glib: integer overflow in in g_escape_uri_string()
...
CVE-2025-12977
...
CVE-2025-12969
...
CVE-2025-12970
...
In libexpat through 2.7.3, a crafted file with an approximate size of 2 MiB can lead to dozens of seconds of processing time.
...
WebAssembly Micro Runtime frame_offset_bottom array bounds overflow in fast Interpreter mode when handling GET_GLOBAL(I32) followed by if opcode
...
WebAssembly Micro Runtime vulnerable to a segmentation fault in v128.store instruction
...
UEFI Shell accessible in AAVMF with Secure Boot enabled on Ubuntu
...
GNU Binutils Linker elfxx-x86.c _bfd_x86_elf_late_size_sections out-of-bounds
...
Podman: build context bind mount
...
wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start()
...
drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port
...
xen: fix UAF in dmabuf_exp_from_pages()
...
RDMA/hns: Fix double destruction of rsv_qp
...
In LibSass 3.5.5, a use-after-free vulnerability exists in the SharedPtr class in SharedPtr.cpp (or SharedPtr.hpp) that may cause a denial of service (application crash) or possibly have unspecified other impact.
...
In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::Selector_List::populate_extends in SharedPtr.hpp (used by ast.cpp and ast_selectors.cpp) may cause a Denial of Service (application crash) via a crafted sass input file.
...
LIBPNG is vulnerable to a heap buffer over-read in `png_write_image_8bit` with grayscale+alpha or RGB/RGBA images
...
LIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
...
LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
...
ext4: avoid deadlock in fs reclaim with page writeback
...
drm/msm: Make .remove and .shutdown HW shutdown consistent
...
drm/meson: remove drm bridges at aggregate driver unbind time
...
LIBPNG is vulnerable to a heap buffer overflow in `png_do_quantize` via malformed palette index
...
drm/amdgpu: fix calltrace warning in amddrm_buddy_fini
...
iommu/mediatek: Fix crash on isr after kexec()
...
net-imap rubygem vulnerable to possible DoS by memory exhaustion
...
Timing Side-Channel in PSK Binder Verification
...
DoS Vulnerability in wolfSSL TLS 1.3 CKS Extension
...
TLS 1.2 Client Can Downgrade Digest Used
...
Improper Validation of Signature Algorithm Used in TLS 1.3 CertificateVerify
...
Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt
...
Potential DoS Vulnerability through Multiple KeyShareEntry with Same Group in TLS 1.3 ClientHello
...
Constant Time Issue with Xtensa-based ESP32 and X22519
...
Forward Secrecy Violation in WolfSSL TLS 1.3
...
ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
...
Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND"
...
f2fs: zone: fix to avoid inconsistence in between SIT and SSA
...
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
...
Libvirt: information disclosure via world-readable vm snapshots
...
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
...
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
...
Libxslt: type confusion in exsltfuncresultcompfunction of libxslt
...
Denial of service vulnerability in HAProxy mjson library
...
Grub2: missing unregister call for normal_exit command may lead to use-after-free
...