Latest CVE Feed
-
5.5
MEDIUMCVE-2024-43914
In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid BUG_ON() while continue reshape after reassembling Currently, mdadm support --revert-reshape to abort the reshape while reassembling, as the test 07revert-grow. However,... Read more
Affected Products : linux_kernel- Published: Aug. 26, 2024
- Modified: Sep. 05, 2024
-
5.5
MEDIUMCVE-2024-43894
In the Linux kernel, the following vulnerability has been resolved: drm/client: fix null pointer dereference in drm_client_modeset_probe In drm_client_modeset_probe(), the return value of drm_mode_duplicate() is assigned to modeset->mode, which will lea... Read more
Affected Products : linux_kernel- Published: Aug. 26, 2024
- Modified: Sep. 10, 2024
-
5.5
MEDIUMCVE-2024-42263
In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix potential memory leak in the timestamp extension If fetching of userspace memory fails during the main loop, all drm sync objs looked up until that point will be leaked bec... Read more
Affected Products : linux_kernel- Published: Aug. 17, 2024
- Modified: Aug. 19, 2024
-
5.5
MEDIUMCVE-2024-42236
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() Userspace provided string 's' could trivially have the length zero. Left unchecked this will firstly result in an OOB ... Read more
Affected Products : linux_kernel- Published: Aug. 07, 2024
- Modified: Aug. 08, 2024
-
5.5
MEDIUMCVE-2024-42231
In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix calc_available_free_space() for zoned mode calc_available_free_space() returns the total size of metadata (or system) block groups, which can be allocated from unalloc... Read more
Affected Products : linux_kernel- Published: Jul. 30, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2017-15939
dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles NULL files in a .debug_line file table, which allows remote attackers to cause a denial of service (NULL pointer dereference and application... Read more
Affected Products : binutils- EPSS Score: %0.34
- Published: Oct. 27, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2024-41833
Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitig... Read more
- Published: Aug. 14, 2024
- Modified: Aug. 15, 2024
-
5.5
MEDIUMCVE-2024-41009
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix overrunning reservations in ringbuf The BPF ring buffer internally is implemented as a power-of-2 sized circular buffer, with two logical and ever-increasing counters: consumer... Read more
Affected Products : linux_kernel- Published: Jul. 17, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-40936
In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix memregion leaks in devm_cxl_add_region() Move the mode verification to __create_region() before allocating the memregion to avoid the memregion leaks.... Read more
Affected Products : linux_kernel- Published: Jul. 12, 2024
- Modified: Feb. 03, 2025
-
5.5
MEDIUMCVE-2017-15954
bchunk (related to BinChunker) 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow (with a resultant invalid free) and crash when processing a malformed CUE (.cue) file.... Read more
- EPSS Score: %0.31
- Published: Oct. 28, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2024-40843
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15. An app may be able to modify protected parts of the file system.... Read more
Affected Products : macos- Published: Sep. 17, 2024
- Modified: Mar. 20, 2025
-
5.5
MEDIUMCVE-2024-39489
In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix memleak in seg6_hmac_init_algo seg6_hmac_init_algo returns without cleaning up the previous allocations if one fails, so it's going to leak all that memory and the crypto ... Read more
Affected Products : linux_kernel- Published: Jul. 10, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2017-15841
When HOST sends a Special command ID packet, Controller triggers a RAM Dump and FW reset in Snapdragon Mobile in version SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, Snapdragon_High_Med_2016.... Read more
Affected Products : sd_450_firmware sd_625_firmware sd_820_firmware sd_835_firmware snapdragon_high_med_2016_firmware sd_410_firmware sd_412_firmware sd_425_firmware sd_427_firmware sd_430_firmware +22 more products- EPSS Score: %0.04
- Published: May. 06, 2019
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2017-15873
The get_next_block function in archival/libarchive/decompress_bunzip2.c in BusyBox 1.27.2 has an Integer Overflow that may lead to a write access violation.... Read more
- EPSS Score: %0.12
- Published: Oct. 24, 2017
- Modified: Jun. 09, 2025
-
5.5
MEDIUMCVE-2024-36481
In the Linux kernel, the following vulnerability has been resolved: tracing/probes: fix error check in parse_btf_field() btf_find_struct_member() might return NULL or an error via the ERR_PTR() macro. However, its caller in parse_btf_field() only checks... Read more
Affected Products : linux_kernel- Published: Jun. 21, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-35986
In the Linux kernel, the following vulnerability has been resolved: phy: ti: tusb1210: Resolve charger-det crash if charger psy is unregistered The power_supply frame-work is not really designed for there to be long living in kernel references to power_... Read more
Affected Products : linux_kernel- Published: May. 20, 2024
- Modified: Apr. 04, 2025
-
5.5
MEDIUMCVE-2024-35953
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix deadlock in context_xa ivpu_device->context_xa is locked both in kernel thread and IRQ context. It requires XA_FLAGS_LOCK_IRQ flag to be passed during initialization oth... Read more
Affected Products : linux_kernel- Published: May. 20, 2024
- Modified: Jan. 10, 2025
-
5.5
MEDIUMCVE-2017-15642
In lsx_aiffstartread in aiff.c in Sound eXchange (SoX) 14.4.2, there is a Use-After-Free vulnerability triggered by supplying a malformed AIFF file.... Read more
- EPSS Score: %0.60
- Published: Oct. 19, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2024-3567
A flaw was found in QEMU. An assertion failure was present in the update_sctp_checksum() function in hw/net/net_tx_pkt.c when trying to calculate the checksum of a short-sized fragmented packet. This flaw allows a malicious guest to crash QEMU and cause a... Read more
- Published: Apr. 10, 2024
- Modified: May. 06, 2025
-
5.5
MEDIUMCVE-2024-35247
In the Linux kernel, the following vulnerability has been resolved: fpga: region: add owner module and take its refcount The current implementation of the fpga region assumes that the low-level module registers a driver for the parent device and uses it... Read more
Affected Products : linux_kernel- Published: Jun. 24, 2024
- Modified: Feb. 03, 2025