CVE Vulnerability Catalog

An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to write to an arbitrary memory address resulting in denial of service or arbitrary code execution.

Improper input validation within the AMD Platform Management Framework (PMF) could allow an attacker to unmap arbitrary memory pages potentially impacting integrity and availability, or allowing privilege escalation resulting in loss of confidentiality.

An out of bounds write within the AMD Platform Management Framework (PMF) could allow an attacker to execute arbitrary code at an elevated privilege level potentially leading to loss of confidentiality integrity, or availability.

An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to read or modify an arbitrary address potentially resulting in loss of confidentiality, integrity, or availability.

Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in privilege escalation and arbitrary code execution.

Improper restriction of operations within the bounds of a memory buffer in the AMD secure processor (ASP) could allow an attacker to read or write to protected memory potentially resulting in arbitrary code execution.

Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) could allow an attacker with the ability to write outside the trusted memory range (TMR) to change the execution flow of the Video Core Next (VCN) firmware.

Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalation resulting in arbitrary code execution.

CVE-2025-52540 describes an improper input validation vulnerability in the AMD Platform Management Framework (PMF) Driver that can allow a local attacker to write Out-of-Bounds, potentially resulting in privilege escalation.

An improper input validation vulnerability within the AMD Platform Management Framework (PMF) driver can allow a local attacker to read or write Out-of-Bounds, potentially resulting in privilege escalation.

Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO) could allow an attacker to achieve privilege escalation resulting in arbitrary code execution.

In ZITADEL, an identity management platform, a vulnerability was discovered in the LDAP identity provider implementation that improperly handles user-provided usernames in LDAP search filters. This allows unauthenticated attackers to perform LDAP Filter Injection during the login process.

In python-utcp prior to version 1.1.3, the _prepare_environment() function in cli_communication_protocol.py passes a full copy of os.environ to every CLI subprocess. When combined with CVE-2026-45369, an attacker can exfiltrate all process-level secrets in a single tool call.

In the python-utcp library prior to version 1.1.3, the _substitute_utcp_args method in cli_communication_protocol.py inserts user-controlled tool_args values directly into shell command strings without any sanitization. This allows an attacker to inject arbitrary shell commands.

Elixir WebRTC, an Elixir implementation of the W3C WebRTC API, had an issue with missing DTLS peer certificate fingerprint validation in the DTLS client (active) role prior to versions 0.15.1 and 0.16.1. This bug weakens WebRTC's mutual authentication, potentially allowing a man-in-the-middle attack when combined with insecure signaling.

In versions 1.180.8 and earlier, the DELETE /api/projects/{account_handle}/{project_handle}/previews/{preview_id} endpoint in Tuist does not verify that the preview belongs to the project specified in the URL path. This allows an attacker to delete any preview whose UUID is supplied.

In libyang library prior to SO 5.2.15, an integer overflow in lyb_read_string() in src/parser_lyb.c leads to a heap buffer overflow when parsing a maliciously crafted LYB binary blob. An attacker who can supply LYB data to any libyang consumer (NETCONF server, sysrepo, etc.) can trigger a crash or potential heap corruption.

OneDev is a Git server with CI/CD, kanban, and packages. Prior to version 15.0.2, there was behavior that broke the expected boundary between repository-controlled LFS metadata and server-local filesystem paths.

In ClipBucket v5 prior to version 5.5.3 - #122, there is a critical SQL Injection (SQLi) vulnerability exploitable through the 'type' parameter on the authenticated admin endpoint admin_area/action_logs.php. The value of this parameter is directly concatenated into a SQL WHERE condition without parameterization, allowing for UNION-based attacks and data exfiltration from the database.

In the rust-openssl library, versions from 0.9.7 to before 0.10.79, there is a vulnerability related to improper processing of OCSP responder URLs from a certificate's AIA extension. The use of invalid bytes in the OCSP accessLocation can lead to a violation of the UTF-8 invariant, resulting in undefined behavior.