CVE Vulnerability Catalog

Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in privilege escalation and arbitrary code execution.

Improper restriction of operations within the bounds of a memory buffer in the AMD secure processor (ASP) could allow an attacker to read or write to protected memory potentially resulting in arbitrary code execution.

Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) could allow an attacker with the ability to write outside the trusted memory range (TMR) to change the execution flow of the Video Core Next (VCN) firmware.

Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalation resulting in arbitrary code execution.

CVE-2025-52540 describes an improper input validation vulnerability in the AMD Platform Management Framework (PMF) Driver that can allow a local attacker to write Out-of-Bounds, potentially resulting in privilege escalation.

An improper input validation vulnerability within the AMD Platform Management Framework (PMF) driver can allow a local attacker to read or write Out-of-Bounds, potentially resulting in privilege escalation.

Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO) could allow an attacker to achieve privilege escalation resulting in arbitrary code execution.

In ZITADEL, an identity management platform, a vulnerability was discovered in the LDAP identity provider implementation that improperly handles user-provided usernames in LDAP search filters. This allows unauthenticated attackers to perform LDAP Filter Injection during the login process.

In python-utcp prior to version 1.1.3, the _prepare_environment() function in cli_communication_protocol.py passes a full copy of os.environ to every CLI subprocess. When combined with CVE-2026-45369, an attacker can exfiltrate all process-level secrets in a single tool call.

In the python-utcp library prior to version 1.1.3, the _substitute_utcp_args method in cli_communication_protocol.py inserts user-controlled tool_args values directly into shell command strings without any sanitization. This allows an attacker to inject arbitrary shell commands.

Elixir WebRTC, an Elixir implementation of the W3C WebRTC API, had an issue with missing DTLS peer certificate fingerprint validation in the DTLS client (active) role prior to versions 0.15.1 and 0.16.1. This bug weakens WebRTC's mutual authentication, potentially allowing a man-in-the-middle attack when combined with insecure signaling.

In versions 1.180.8 and earlier, the DELETE /api/projects/{account_handle}/{project_handle}/previews/{preview_id} endpoint in Tuist does not verify that the preview belongs to the project specified in the URL path. This allows an attacker to delete any preview whose UUID is supplied.

In libyang library prior to SO 5.2.15, an integer overflow in lyb_read_string() in src/parser_lyb.c leads to a heap buffer overflow when parsing a maliciously crafted LYB binary blob. An attacker who can supply LYB data to any libyang consumer (NETCONF server, sysrepo, etc.) can trigger a crash or potential heap corruption.

OneDev is a Git server with CI/CD, kanban, and packages. Prior to version 15.0.2, there was behavior that broke the expected boundary between repository-controlled LFS metadata and server-local filesystem paths.

In ClipBucket v5 prior to version 5.5.3 - #122, there is a critical SQL Injection (SQLi) vulnerability exploitable through the 'type' parameter on the authenticated admin endpoint admin_area/action_logs.php. The value of this parameter is directly concatenated into a SQL WHERE condition without parameterization, allowing for UNION-based attacks and data exfiltration from the database.

In the rust-openssl library, versions from 0.9.7 to before 0.10.79, there is a vulnerability related to improper processing of OCSP responder URLs from a certificate's AIA extension. The use of invalid bytes in the OCSP accessLocation can lead to a violation of the UTF-8 invariant, resulting in undefined behavior.

A privilege escalation vulnerability in Crabbox prior to v0.12.0 allows users with visibility-only access to obtain Code, WebVNC, and Egress agent tickets via POST requests. Attackers can exploit insufficient access controls on ticket endpoints to impersonate trusted lease-side bridges.

Missing integrity verification in the Triton inference handler in Amazon SageMaker Python SDK v2 before v2.257.2 and v3 before v3.8.0 might allow a remote authenticated actor to achieve code execution in inference containers via replacement of model artifacts in S3 with a specially crafted pickle payload that is deserialized without verification.

The ModelBuilder/Serve components in Amazon SageMaker Python SDK before v2.257.2 and v3 before v3.8.0 have cleartext storage of sensitive information. This may allow a remote authenticated actor to extract the HMAC signing key from SageMaker API responses and forge valid integrity signatures for specially crafted model artifacts, leading to code execution in inference containers.

A use after free vulnerability in Extensions in Google Chrome on Mac prior to version 148.0.7778.168 allows an attacker to execute arbitrary code via a malicious extension if a user installs it.