Browse CVEs

CRITICAL 9.8 CVE-2025-0075 In process_service_search_attr_req of sdp_server.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to re… Android Mitigation only Fix from $2,3002025-08-26 HIGH 8.0 CVE-2023-21125 In btif_hh_hsdata_rpt_copy_cb of bta_hh.cc, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of… Android Mitigation only Fix from $1,9502025-08-26 HIGH 8.8 CVE-2025-9478 Use after free in ANGLE in Google Chrome prior to 139.0.7258.154 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 139.0.7258.154+ Fix from $1,9502025-08-26 MEDIUM 5.5 CVE-2025-9394 A flaw has been found in PoDoFo 1.1.0-dev. This issue affects the function PdfTokenizer::DetermineDataType of the file src/podofo/main/PdfTokenizer.c… Podofo Patch available Fix from $1,6002025-08-24 MEDIUM 5.5 CVE-2025-9386 A vulnerability has been found in appneta tcpreplay up to 4.5.1. The impacted element is the function get_l2len_protocol of the file get.c of the com… Tcpreplay after 4.5.1 Fix from $1,6002025-08-24 MEDIUM 5.5 CVE-2025-9385 A flaw has been found in appneta tcpreplay up to 4.5.1. The affected element is the function fix_ipv6_checksums of the file edit_packet.c of the comp… Tcpreplay after 4.5.1 Fix from $1,6002025-08-24 HIGH 7.8 CVE-2025-38666 In the Linux kernel, the following vulnerability has been resolved: net: appletalk: Fix use-after-free in AARP proxy probe The AARP proxy‐probe rou… Linux Kernel 5.4.297 / 5.10.241+ Fix from $1,9502025-08-22 HIGH 7.8 CVE-2025-38653 In the Linux kernel, the following vulnerability has been resolved: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.a… Linux Kernel 6.1.148 / 6.6.102+ Fix from $1,9502025-08-22 HIGH 7.8 CVE-2025-38656 In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start() Preserve the error cod… Linux Kernel 5.5 / 5.11+ Fix from $1,9502025-08-22 HIGH 7.8 CVE-2025-38627 In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic The decompress_io_c… Linux Kernel 6.16.1+ Fix from $1,9502025-08-22 HIGH 7.8 CVE-2025-38620 In the Linux kernel, the following vulnerability has been resolved: zloop: fix KASAN use-after-free of tag set When a zoned loop device, or zloop d… Linux Kernel Patch available Fix from $1,9502025-08-22 HIGH 7.8 CVE-2025-38618 In the Linux kernel, the following vulnerability has been resolved: vsock: Do not allow binding to VMADDR_PORT_ANY It is possible for a vsock to au… Linux Kernel 5.4.297 / 5.10.241+ Fix from $1,9502025-08-22 MEDIUM 5.3 CVE-2025-9157 A vulnerability was determined in appneta tcpreplay up to 4.5.2-beta2. The impacted element is the function untrunc_packet of the file src/tcpedit/ed… Patch available Fix from $1,6002025-08-19 HIGH 7.8 CVE-2025-38594 In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix UAF on sva unbind with pending IOPFs Commit 17fce9d2336d ("iomm… Linux Kernel Patch available Fix from $1,9502025-08-19 HIGH 7.8 CVE-2025-38595 In the Linux kernel, the following vulnerability has been resolved: xen: fix UAF in dmabuf_exp_from_pages() [dma_buf_fd() fixes; no preferences reg… Linux Kernel 6.12.42 / 6.15.10+ Fix from $1,9502025-08-19 HIGH 7.8 CVE-2025-38596 In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix UAF in panthor_gem_create_with_handle() debugfs code The objec… Linux Kernel Patch available Fix from $1,9502025-08-19 HIGH 7.8 CVE-2025-38598 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix use-after-free in amdgpu_userq_suspend+0x51a/0x5a0 [ +0.000020… Linux Kernel Patch available Fix from $1,9502025-08-19 HIGH 7.8 CVE-2025-38580 In the Linux kernel, the following vulnerability has been resolved: ext4: fix inode use after free in ext4_end_io_rsv_work() In ext4_io_end_defer_c… Linux Kernel 6.15.10 / 6.16.1+ Fix from $1,9502025-08-19 HIGH 7.8 CVE-2025-38584 In the Linux kernel, the following vulnerability has been resolved: padata: Fix pd UAF once and for all There is a race condition/UAF in padata_reo… Linux Kernel 6.15.10 / 6.16.1+ Fix from $1,9502025-08-19 MEDIUM 5.5 CVE-2025-38577 In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid panic in f2fs_evict_inode As syzbot [1] reported as below: … Linux Kernel 5.4.297 / 5.10.241+ Fix from $1,6002025-08-19 MEDIUM 5.5 CVE-2025-38578 In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid UAF in f2fs_sync_inode_meta() syzbot reported an UAF issue a… Linux Kernel 5.4.297 / 5.10.241+ Fix from $1,6002025-08-19 HIGH 7.8 CVE-2025-38570 In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: unlink NAPIs from queues on error to open CI hit a UaF in fbnic in … Linux Kernel 6.15.10 / 6.16.1+ Fix from $1,9502025-08-19 HIGH 7.8 CVE-2025-38554 In the Linux kernel, the following vulnerability has been resolved: mm: fix a UAF when vma->mm is freed after vma->vm_refcnt got dropped By inducin… Linux Kernel 6.15.10 / 6.16.1+ Fix from $1,9502025-08-19 HIGH 7.8 CVE-2025-38555 In the Linux kernel, the following vulnerability has been resolved: usb: gadget : fix use-after-free in composite_dev_cleanup() 1. In func configfs… Linux Kernel 5.4.297 / 5.10.241+ Fix from $1,9502025-08-19 HIGH 7.8 CVE-2025-38536 In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix potential use-after-free in airoha_npu_get() np->name was bein… Linux Kernel 6.15.8+ Fix from $1,9502025-08-16 HIGH 7.8 CVE-2025-38527 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cifs_oplock_break A race condition can occur… Linux Kernel 3.17 / 4.10+ Fix from $1,9502025-08-16 CRITICAL 9.8 CVE-2025-50518 A use-after-free vulnerability exists in the coap_delete_pdu_lkd function within coap_pdu.c of the libcoap library. This issue occurs due to improper… Mitigation only Fix from $2,3002025-08-14 HIGH 8.8 CVE-2025-8882 Use after free in Aura in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage in specific UI gestures to p… Chrome 139.0.7258.127+ Fix from $1,9502025-08-13 HIGH 7.8 CVE-2025-54229 Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in … Framemaker 2020.9 / 2022.7+ Fix from $1,9502025-08-12 HIGH 7.8 CVE-2025-54230 Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in … Framemaker 2020.9 / 2022.7+ Fix from $1,9502025-08-12