Browse CVEs

HIGH 7.2 CVE-2024-38638 An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow … Qts Mitigation only Fix from $1,9502025-03-07 HIGH 7.5 CVE-2025-27598 ImageSharp is a 2D graphics API. An Out-of-bounds Write vulnerability has been found in the ImageSharp gif decoder, allowing attackers to cause a cra… Imagesharp 2.1.10 / 3.1.7+ Fix from $1,9502025-03-06 HIGH 7.8 CVE-2024-58069 In the Linux kernel, the following vulnerability has been resolved: rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read The nvmem interfa… Linux Kernel 5.4.291 / 5.10.235+ Fix from $1,9502025-03-06 HIGH 7.8 CVE-2025-20931 Out-of-bounds write in parsing bmp image in Samsung Notes prior to version 4.4.26.71 allows local attackers to execute arbitrary code. Notes 4.4.26.71+ Fix from $1,9502025-03-06 HIGH 7.8 CVE-2025-20929 Out-of-bounds write in parsing jpeg image in Samsung Notes prior to version 4.4.26.71 allows local attackers to execute arbitrary code. Notes 4.4.26.71+ Fix from $1,9502025-03-06 MEDIUM 6.5 CVE-2025-1938 Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7. Some of these bugs showed evidence of memory co… Firefox 128.7.0 / 135.0+ Fix from $1,6002025-03-04 HIGH 8.2 CVE-2025-22225 KEV VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write… Esxi Mitigation only Fix from $1,9502025-03-04 HIGH 7.8 CVE-2025-23240 in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vuln… Openharmony after 5.0.2 Fix from $1,9502025-03-04 HIGH 7.8 CVE-2025-23420 in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vuln… Openharmony after 5.0.2 Fix from $1,9502025-03-04 HIGH 7.8 CVE-2025-24309 in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vuln… Openharmony after 5.0.2 Fix from $1,9502025-03-04 HIGH 7.8 CVE-2025-22835 in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vuln… Openharmony after 5.0.2 Fix from $1,9502025-03-04 MEDIUM 6.4 CVE-2025-0684 A flaw was found in grub2. When performing a symlink lookup from a reiserfs filesystem, grub's reiserfs fs module uses user-controlled parameters fro… Grub2 after 2.12 Fix from $1,6002025-03-03 MEDIUM 6.4 CVE-2025-0685 A flaw was found in grub2. When reading data from a jfs filesystem, grub's jfs filesystem module uses user-controlled parameters from the filesystem … Grub2 after 2.12 Fix from $1,6002025-03-03 MEDIUM 6.4 CVE-2025-0686 A flaw was found in grub2. When performing a symlink lookup from a romfs filesystem, grub's romfs filesystem module uses user-controlled parameters f… Grub2 after 2.12 Fix from $1,6002025-03-03 CRITICAL 9.8 CVE-2025-1876 A vulnerability, which was classified as critical, has been found in D-Link DAP-1562 1.10. Affected by this issue is the function http_request_parse … Dap 1562 Firmware No fix yet Fix from $2,3002025-03-03 HIGH 7.8 CVE-2024-45782 A flaw was found in the HFS filesystem. When reading an HFS volume's name at grub_fs_mount(), the HFS filesystem driver performs a strcpy() using the… Openshift Container Platform after 2.12 Fix from $1,9502025-03-03 HIGH 7.8 CVE-2025-1125 When reading data from a hfs filesystem, grub's hfs filesystem module uses user-controlled parameters from the filesystem metadata to calculate the i… Grub2 after 2.12 Fix from $1,9502025-03-03 MEDIUM 6.7 CVE-2024-45780 A flaw was found in grub2. When reading tar files, grub2 allocates an internal buffer for the file name. However, it fails to properly verify the all… Grub2 after 2.12 Fix from $1,6002025-03-03 HIGH 8.8 CVE-2024-53029 Memory corruption while reading a value from a buffer controlled by the Guest Virtual Machine. Qam8255p Firmware Mitigation only Fix from $1,9502025-03-03 HIGH 7.8 CVE-2024-53030 Memory corruption while processing input message passed from FE driver. Msm8996au Firmware No fix yet Fix from $1,9502025-03-03 HIGH 7.8 CVE-2024-53031 Memory corruption while reading a type value from a buffer controlled by the Guest Virtual Machine. Srv1l Firmware No fix yet Fix from $1,9502025-03-03 HIGH 7.8 CVE-2024-53012 Memory corruption may occur due to improper input validation in clock device. Qam8255p Firmware No fix yet Fix from $1,9502025-03-03 HIGH 7.8 CVE-2024-53022 Memory corruption may occur during communication between primary and guest VM. Qam8255p Firmware No fix yet Fix from $1,9502025-03-03 CRITICAL 9.8 CVE-2025-1853 A vulnerability was found in Tenda AC8 16.03.34.06 and classified as critical. This issue affects the function sub_49E098 of the file /goform/SetIpMa… Ac8 Firmware No fix yet Fix from $2,3002025-03-03 HIGH 7.8 CVE-2025-20645 In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious… Android Mitigation only Fix from $1,9502025-03-03 CRITICAL 9.8 CVE-2025-20646 In wlan AP FW, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no ad… Software Development Kit 7.6.7.2+ Fix from $2,3002025-03-03 MEDIUM 6.8 CVE-2025-20650 In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has ph… Yocto Mitigation only Fix from $1,6002025-03-03 CRITICAL 9.8 CVE-2025-1814 A vulnerability, which was classified as critical, has been found in Tenda AC6 15.03.05.16. Affected by this issue is some unknown functionality of t… Ac6 Firmware Mitigation only Fix from $2,3002025-03-02 CRITICAL 9.8 CVE-2025-1744 Out-of-bounds Write vulnerability in radareorg radare2 allows heap-based buffer over-read or buffer overflow.This issue affects radare2: before <5.… Radare2 after 5.9.8 Fix from $2,3002025-02-28 CRITICAL 9.8 CVE-2024-10918 Stack-based Buffer Overflow vulnerability in libmodbus v3.1.10 allows to overflow the buffer allocated for the Modbus response if the function tries … Libmodbus Mitigation only Fix from $2,3002025-02-27