CVE Vulnerability Catalog

A vulnerability in the SoundCloud iOS application version 7.65.2 allows a local attacker to escalate privileges and obtain sensitive information through the session handling component.

In the Linux kernel, a vulnerability in the TCP stack causes the security path (secpath) not to be dropped together with the dst object. This retains a reference to the xfrm_state, preventing its proper cleanup when network namespaces are deleted. The issue manifests as a WARN warning in xfrm6_tunnel_net_exit.

In the Linux kernel, a vulnerability was found in migrate_device_finalize() where a folio to be freed is incorrectly added to the LRU list. This triggers memcg warnings and may cause unnecessary system overhead.

In the Linux kernel, a vulnerability in BPF was found where the freeze_mutex was held during the entire mmap operation, potentially leading to deadlocks. The fix reduces the lock hold time to only the necessary write permission checks.

W jądrze Linuxa zidentyfikowano podatność związaną z brakiem sprawdzenia nullowości wskaźnika cstream w funkcji sof_ipc_msg_data(). Niewłaściwe założenie, że cstream nie jest NULL, gdy wskaźnik stream jest NULL, może prowadzić do dereferencji wskaźnika NULL.

A vulnerability in the Linux kernel's acct(2) system call can cause a NULL pointer dereference when writing to a file that triggers an internal lookup (e.g., /sys/power/resume) after the process has exited and called exit_fs().

W jądrze Linuxa zidentyfikowano podatność, która została naprawiona. W wyniku błędu w funkcji `sst_nor_write_data()` tylko jeden bajt danych jest zapisywany, niezależnie od liczby bajtów przekazanych do tej funkcji, co prowadzi do awarii jądra podczas operacji zapisu.

A stored cross-site scripting (XSS) vulnerability in OpenMRS v2.4.3 Build 0ff0ed allows attackers to inject malicious JavaScript or HTML into the personName.middleName parameter at /openmrs/admin/patients/shortPatientForm.form, leading to script execution in the victim's browser.

Podatność w aplikacji Tap&Sign przed wersją 1.025 polega na przechowywaniu wrażliwych informacji w zmiennych środowiskowych w postaci niezaszyfrowanej oraz na słabym mechanizmie odzyskiwania hasła, co umożliwia wykorzystanie tych luk do nieautoryzowanego dostępu.

In the Linux kernel, a vulnerability in the DRM V3D driver occurs when an active performance monitor (perfmon) is destroyed without being stopped, leaving the `v3d->active_perfmon` pointer stale. This can lead to undefined behavior and system instability.

In the Linux kernel, a vulnerability in the mac80211 subsystem allows deactivating all links via the debugfs interface, triggering a WARN_ON that indicates an internal bug.

In the Linux kernel, a vulnerability in the UBIFS filesystem causes a null pointer dereference when dumping the TNC tree after clearing the slab cache. The pointer c->zroot.znode becomes NULL, leading to a system crash.

In the Linux kernel's remoteproc subsystem, a bug was found where ida_free is called for an ID that was not previously allocated by ida_alloc. The issue occurs in the rproc_alloc function when an error happens before ida_alloc is called, and then in the release path (rproc_type_release) an attempt is made to free an unallocated ID, triggering a kernel warning.

W systemie zarządzania rezerwacjami AtaksAPP występuje podatność na atak typu Cross-Site Scripting (XSS) z powodu niewłaściwej neutralizacji danych wejściowych podczas generowania stron internetowych. Problem dotyczy wersji przed 4.2.3.

A flaw in the romfs module of GRUB2 allows integer overflow during buffer size calculation based on user-controlled filesystem geometry parameters. A crafted filesystem can cause a smaller-than-expected buffer allocation, leading to out-of-bounds writes in grub_romfs_read_symlink() and potentially arbitrary code execution.

A buffer overflow vulnerability was found in the jfs filesystem module of GRUB2. The grub_jfs_lookup_symlink() function writes beyond the allocated buffer when a specially crafted jfs filesystem is used. This can corrupt critical internal GRUB data and potentially lead to arbitrary code execution.

A flaw in GRUB2's reiserfs module allows integer overflow during symlink buffer size calculation, leading to heap out-of-bounds write and potential arbitrary code execution.

A stack overflow vulnerability was found in the BFS file system support in GRUB2. A crafted BFS filesystem image can trigger an uncontrolled loop, causing GRUB2 to crash.

A flaw was found in grub2 when reading tar files. The function allocating a buffer for the file name does not properly check for integer overflows, which can lead to a heap out-of-bounds write. This allows an attacker to bypass secure boot protections.

An integer overflow vulnerability was found in the BFS file system driver in GRUB2. When reading a file with an indirect extent map, GRUB2 fails to validate the number of extent entries, leading to a heap out-of-bounds read.