Latest CVE Feed
-
5.5
MEDIUMCVE-2024-56752
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new() When the call to gf100_grctx_generate() fails, unlock gr->fecs.mutex before returning the error. Fixes smatch warning: ... Read more
Affected Products : linux_kernel- Published: Dec. 29, 2024
- Modified: Jan. 06, 2025
-
5.5
MEDIUMCVE-2017-9260
The TDStretchSSE::calcCrossCorr function in source/SoundTouch/sse_optimized.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted wav file.... Read more
Affected Products : soundtouch- EPSS Score: %3.74
- Published: Jul. 27, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2024-30278
Media Encoder versions 23.6.5, 24.3 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation o... Read more
Affected Products : media_encoder- Published: Jun. 13, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-30302
Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation... Read more
- Published: May. 02, 2024
- Modified: Dec. 02, 2024
-
5.5
MEDIUMCVE-2024-57922
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add check for granularity in dml ceil/floor helpers [Why] Wrapper functions for dcn_bw_ceil2() and dcn_bw_floor2() should check for granularity is non zero to avoid ass... Read more
Affected Products : linux_kernel- Published: Jan. 19, 2025
- Modified: Feb. 27, 2025
- Vuln Type: Misconfiguration
-
5.5
MEDIUMCVE-2024-35301
In JetBrains TeamCity before 2024.03.1 commit status publisher didn't check project scope of the GitHub App token... Read more
Affected Products : teamcity- Published: May. 16, 2024
- Modified: Dec. 16, 2024
-
5.5
MEDIUMCVE-2024-35786
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix stale locked mutex in nouveau_gem_ioctl_pushbuf If VM_BIND is enabled on the client the legacy submission ioctl can't be used, however if a client tries to do so regard... Read more
Affected Products : linux_kernel- Published: May. 17, 2024
- Modified: Jan. 10, 2025
-
5.5
MEDIUMCVE-2023-32611
A flaw was found in GLib. GVariant deserialization is vulnerable to a slowdown issue where a crafted GVariant can cause excessive processing, leading to denial of service.... Read more
Affected Products : glib- EPSS Score: %0.04
- Published: Sep. 14, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-36008
In the Linux kernel, the following vulnerability has been resolved: ipv4: check for NULL idev in ip_route_use_hint() syzbot was able to trigger a NULL deref in fib_validate_source() in an old tree [1]. It appears the bug exists in latest trees. All ca... Read more
Affected Products : linux_kernel- Published: May. 20, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-35796
In the Linux kernel, the following vulnerability has been resolved: net: ll_temac: platform_get_resource replaced by wrong function The function platform_get_resource was replaced with devm_platform_ioremap_resource_byname and is called using 0 as name.... Read more
Affected Products : linux_kernel- Published: May. 17, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-35851
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: qca: fix NULL-deref on non-serdev suspend Qualcomm ROME controllers can be registered from the Bluetooth line discipline and in this case the HCI UART serdev pointer is NULL.... Read more
Affected Products : linux_kernel- Published: May. 17, 2024
- Modified: Dec. 30, 2024
-
5.5
MEDIUMCVE-2024-35903
In the Linux kernel, the following vulnerability has been resolved: x86/bpf: Fix IP after emitting call depth accounting Adjust the IP passed to `emit_patch` so it calculates the correct offset for the CALL instruction if `x86_call_depth_emit_accounting... Read more
Affected Products : linux_kernel- Published: May. 19, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2017-9470
In ytnef 1.9.2, the MAPIPrint function in lib/ytnef.c allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file.... Read more
Affected Products : ytnef- EPSS Score: %0.23
- Published: Jun. 07, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2024-56549
In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix NULL pointer dereference in object->file At present, the object->file has the NULL pointer dereference problem in ondemand-mode. The root cause is that the allocated fd ... Read more
Affected Products : linux_kernel- Published: Dec. 27, 2024
- Modified: Feb. 21, 2025
-
5.5
MEDIUMCVE-2024-58062
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: avoid NULL pointer dereference When iterating over the links of a vif, we need to make sure that the pointer is valid (in other words - that the link exists) before ... Read more
Affected Products : linux_kernel- Published: Mar. 06, 2025
- Modified: Mar. 25, 2025
- Vuln Type: Memory Corruption
-
5.5
MEDIUMCVE-2023-3006
A known cache speculation vulnerability, known as Branch History Injection (BHI) or Spectre-BHB, becomes actual again for the new hw AmpereOne. Spectre-BHB is similar to Spectre v2, except that malicious code uses the shared branch history (stored in the ... Read more
Affected Products : linux_kernel- EPSS Score: %0.01
- Published: May. 31, 2023
- Modified: Jan. 09, 2025
-
5.5
MEDIUMCVE-2017-9617
In Wireshark 2.2.7, deeply nested DAAP data may cause stack exhaustion (uncontrolled recursion) in the dissect_daap_one_tag function in epan/dissectors/packet-daap.c in the DAAP dissector.... Read more
Affected Products : wireshark- EPSS Score: %0.10
- Published: Jun. 14, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2022-42266
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an unprivileged regular user can cause exposure of sensitive information to an actor that is not explicitly authorized ... Read more
- EPSS Score: %0.08
- Published: Dec. 30, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-35927
In the Linux kernel, the following vulnerability has been resolved: drm: Check output polling initialized before disabling In drm_kms_helper_poll_disable() check if output polling support is initialized before disabling polling. If not flag this as a wa... Read more
Affected Products : linux_kernel- Published: May. 19, 2024
- Modified: Jun. 19, 2025
-
5.5
MEDIUMCVE-2023-30774
A vulnerability was found in the libtiff library. This flaw causes a heap buffer overflow issue via the TIFFTAG_INKNAMES and TIFFTAG_NUMBEROFINKS values.... Read more
- EPSS Score: %0.02
- Published: May. 19, 2023
- Modified: Mar. 14, 2025