CVE Vulnerability Catalog

The AGL app-framework-binder (afb-daemon) version v19.90.0 contains a privilege escalation vulnerability in the supervision Do command. The on_supervision_call function nullifies the request credentials before executing an attacker-controlled API call, allowing any registered API to be executed with a NULL credential context.

MixPHP Framework versions 2.x through 2.2.17 have an unsafe deserialization vulnerability. The sync-invoke client (Connection.php:76) calls unserialize() on data received from the server response, allowing for client-side RCE if connecting to a malicious server.

An issue was discovered in Vanetza V2X v26.02 allowing remote unauthorized attackers to cause a denial of service. The vulnerability exists in the GeoNetworking packet processing pipeline where OpenSSL exceptions from ECC point validation are not properly caught.

An unsafe deserialization vulnerability exists in MixPHP Framework versions 2.x through 2.2.17. The sync-invoke TCP server receives data from a TCP socket and passes it directly to Opis\Closure\unserialize(), then executes the result via call_user_func(). No authentication or signature verification is performed on the TCP connection, allowing an attacker with access to the localhost TCP port (server binds 127.0.0.1) to send a crafted serialized PHP closure to achieve arbitrary code execution.

Oprogramowanie uruchamiane jako użytkownik bez uprawnień może wykonywać nieprawidłowe wywołania systemowe GPU, zmuszając GPU do zapisu w dowolnych stronach pamięci fizycznej. W określonych okolicznościach, ten exploit może prowadzić do uszkodzenia stron danych, które nie są przydzielone przez sterownik GPU.

Strona internetowa zawierająca nietypową zawartość WebGPU ładowaną do procesu renderowania GPU GLES może wywołać awarię związaną z użyciem po zwolnieniu (UAF) w bibliotece współdzielonej użytkownika GPU GLES. Na niektórych platformach, gdy proces wykonujący obciążenie graficzne ma uprawnienia systemowe, może to umożliwić dalsze wykorzystanie podatności w systemie.

Strona internetowa zawierająca nietypową zawartość WebGPU ładowaną do procesu renderowania GPU GLES może wywołać awarię związaną z używaniem po zwolnieniu pamięci (UAF) w bibliotece współdzielonej użytkownika GPU GLES. Na niektórych platformach, gdy proces wykonujący obciążenie graficzne ma uprawnienia systemowe, może to umożliwić dalsze exploity na urządzeniu.

A vulnerability in the Linux kernel's GSO fallback for tunneled traffic with IPV6_CSUM flag was found. Incorrect network header length checking caused tunneled packets with IPv6 extension headers to not fall back to software checksumming, potentially leading to processing errors.

A vulnerability has been identified in the Linux kernel related to improper initialization of the aio_cmd->iocb structure in target_core_file. This issue may lead to incorrect write failure statuses during write command execution.

A vulnerability has been identified in the Linux kernel's wifi (mac80211) module that allows improper operations on non-TDLS stations. The issue arises from the lack of verification whether a station is actually a TDLS station before executing the ENABLE_LINK operation.

In the Linux kernel, when processing user options in IPv6 Router Advertisement (RA) messages, the nduseroptmsg structure sent in RTM_NEWNDUSEROPT netlink message does not zero its padding fields, potentially leaking kernel memory. The fix initializes these padding fields to zero.

In the Linux kernel, the crypto authencesn module has a vulnerability where high-order sequence bits (hiseq) are unnecessarily placed at the end of the destination buffer during out-of-place decryption (src != dst), causing incorrect hashing data arrangement.

A vulnerability has been identified in the Linux kernel regarding incorrect length accounting for TX packets that span multiple buffer descriptors. This issue leads to the loss of earlier bytes, potentially stalling the TX queue.

In the Linux kernel, a vulnerability was found in the regsafe() function related to pointers to packets. The bug may cause a state with a valid packet range not to be explored, leading to potential security issues.

In the Linux kernel, the netfilter x_tables module lacks validation that names are nul-terminated. This flaw can cause invalid data to be passed to functions expecting C strings, potentially leading to errors or security breaches.

In the Linux kernel netfilter subsystem, a use-after-free vulnerability was found in nf_conntrack_helper_unregister(). When destroying expectations for a helper being unregistered, a NULL pointer was passed instead of the helper pointer, so expectations were not removed and the freed helper structure was still referenced.

A vulnerability in the Linux kernel netfilter ctnetlink module fails to validate the helper for new expectations, allowing an attacker to supply an arbitrary helper from userspace, leading to a slab-out-of-bounds read and potential kernel memory leak.

A vulnerability has been identified and resolved in the Linux kernel. It concerns a potential use-after-free (UAF) in the set_cig_params_sync function related to Bluetooth connections.

In the Linux kernel, a vulnerability was found in the BPF verifier related to incorrect path pruning due to precision tracking for atomic fetch operations (BPF_ATOMIC with BPF_FETCH). The backtracking logic did not account for the source register also being the destination, leading to missing precision marks on stack slots. This could cause the verifier to incorrectly consider two states equivalent and prune one branch, potentially allowing unsafe BPF programs.

A vulnerability has been identified in the Linux kernel that allows the import of a zero-length buffer, leading to out-of-bounds memory reads. This issue occurs in the validate_fixed_range() function, where the lack of proper buffer length checking results in incorrect offset calculations.