Browse CVEs

MEDIUM 5.5 CVE-2025-21848 In the Linux kernel, the following vulnerability has been resolved: nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() Add check for the return value… Linux Kernel 6.1.130 / 6.6.80+ Fix from $1,6002025-03-12 MEDIUM 5.5 CVE-2025-21852 In the Linux kernel, the following vulnerability has been resolved: net: Add rx_skb of kfree_skb to raw_tp_null_args[]. Yan Zhai reported a BPF pro… Linux Kernel 6.12.17 / 6.13.5+ Fix from $1,6002025-03-12 MEDIUM 5.5 CVE-2025-21844 In the Linux kernel, the following vulnerability has been resolved: smb: client: Add check for next_buffer in receive_encrypted_standard() Add chec… Linux Kernel 6.1.130 / 6.6.80+ Fix from $1,6002025-03-12 MEDIUM 5.5 CVE-2025-21846 In the Linux kernel, the following vulnerability has been resolved: acct: perform last write from workqueue In [1] it was reported that the acct(2)… Linux Kernel 6.1.130 / 6.6.80+ Fix from $1,6002025-03-12 MEDIUM 5.5 CVE-2025-21170 Substance3D - Modeler versions 1.15.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial… Substance 3d Modeler 1.21.0+ Fix from $1,6002025-03-11 MEDIUM 5.5 CVE-2025-27179 InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application d… Indesign 19.5.3 / 20.2+ Fix from $1,6002025-03-11 MEDIUM 5.5 CVE-2025-27170 Illustrator versions 29.2.1, 28.7.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-o… Illustrator 28.7.5 / 29.3+ Fix from $1,6002025-03-11 MEDIUM 5.5 CVE-2025-27176 InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application d… Indesign 19.5.3 / 20.2+ Fix from $1,6002025-03-11 MEDIUM 5.1 CVE-2024-56188 there is a possible way to crash the modem due to a missing null check. This could lead to remote denial of service with no additional execution priv… Android No fix yet Fix from $1,6002025-03-10 MEDIUM 5.5 CVE-2025-21833 In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE There is a WARN_ON_ONCE to cat… Linux Kernel 6.13.3+ Fix from $1,6002025-03-06 MEDIUM 5.5 CVE-2024-58080 In the Linux kernel, the following vulnerability has been resolved: clk: qcom: dispcc-sm6350: Add missing parent_map for a clock If a clk_rcg2 has … Linux Kernel 6.1.129 / 6.6.78+ Fix from $1,6002025-03-06 MEDIUM 5.5 CVE-2024-58081 In the Linux kernel, the following vulnerability has been resolved: clk: mmp2: call pm_genpd_init() only after genpd.name is set Setting the genpd'… Linux Kernel 6.12.14 / 6.13.3+ Fix from $1,6002025-03-06 MEDIUM 5.5 CVE-2024-58084 In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: scm: Fix missing read barrier in qcom_scm_get_tzmem_pool() Comm… Linux Kernel after 6.13.3 Fix from $1,6002025-03-06 MEDIUM 5.5 CVE-2024-58076 In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-sm6350: Add missing parent_map for two clocks If a clk_rcg2 has … Linux Kernel 5.15.179 / 6.1.129+ Fix from $1,6002025-03-06 MEDIUM 5.5 CVE-2024-58067 In the Linux kernel, the following vulnerability has been resolved: clk: mmp: pxa1908-mpmu: Fix a NULL vs IS_ERR() check The devm_kzalloc() functio… Linux Kernel 6.13.2+ Fix from $1,6002025-03-06 MEDIUM 5.5 CVE-2024-58068 In the Linux kernel, the following vulnerability has been resolved: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized If a drive… Linux Kernel 6.1.129 / 6.6.76+ Fix from $1,6002025-03-06 MEDIUM 5.5 CVE-2024-58073 In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: check dpu_plane_atomic_print_state() for valid sspp Similar to the… Linux Kernel 6.13.2+ Fix from $1,6002025-03-06 MEDIUM 5.5 CVE-2024-58058 In the Linux kernel, the following vulnerability has been resolved: ubifs: skip dumping tnc tree when zroot is null Clearing slab cache will free a… Linux Kernel 5.4.291 / 5.10.235+ Fix from $1,6002025-03-06 MEDIUM 5.5 CVE-2024-58062 In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: avoid NULL pointer dereference When iterating over the link… Linux Kernel 6.12.13 / 6.13.2+ Fix from $1,6002025-03-06 MEDIUM 5.5 CVE-2024-58064 In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: tests: Fix potential NULL dereference in test_cfg80211_parse_col… Linux Kernel 6.12.13 / 6.13.2+ Fix from $1,6002025-03-06 MEDIUM 5.5 CVE-2024-58065 In the Linux kernel, the following vulnerability has been resolved: clk: mmp: pxa1908-apbc: Fix NULL vs IS_ERR() check The devm_kzalloc() function … Linux Kernel 6.13.2+ Fix from $1,6002025-03-06 MEDIUM 5.5 CVE-2024-58066 In the Linux kernel, the following vulnerability has been resolved: clk: mmp: pxa1908-apbcp: Fix a NULL vs IS_ERR() check The devm_kzalloc() functi… Linux Kernel 6.13.2+ Fix from $1,6002025-03-06 MEDIUM 5.5 CVE-2024-58051 In the Linux kernel, the following vulnerability has been resolved: ipmi: ipmb: Add check devm_kasprintf() returned value devm_kasprintf() can retu… Linux Kernel 5.4.291 / 5.10.235+ Fix from $1,6002025-03-06 MEDIUM 5.5 CVE-2024-58052 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_rang… Linux Kernel 5.4.291 / 5.10.235+ Fix from $1,6002025-03-06 MEDIUM 5.5 CVE-2025-22837 in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through NULL pointer dereference. Openharmony after 5.0.2 Fix from $1,6002025-03-04 HIGH 7.8 CVE-2025-21084 in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through through NULL pointer dereferen… Openharmony after 5.0.2 Fix from $1,9502025-03-04 MEDIUM 5.5 CVE-2025-21097 in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through NULL pointer dereference. Openharmony after 5.0.2 Fix from $1,6002025-03-04 HIGH 7.5 CVE-2025-1877 A vulnerability, which was classified as critical, was found in D-Link DAP-1562 1.10. This affects the function pure_auth_check of the component HTTP… Dap 1562 Firmware No fix yet Fix from $1,9502025-03-03 MEDIUM 5.1 CVE-2025-0287 Various Paragon Software products contain a null pointer dereference vulnerability within biontdrv.sys that is caused by a lack of a valid MasterLrp … Paragon Backup \& Recovery after 17.39 Fix from $1,6002025-03-03 HIGH 7.8 CVE-2024-53024 Memory corruption in display driver while detaching a device. Qcs6490 Firmware Patch available Fix from $1,9502025-03-03