Browse CVEs

MEDIUM 6.7 CVE-2025-20747 In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a mali… Yocto Mitigation only Fix from $1,6002025-11-04 MEDIUM 6.7 CVE-2025-20746 In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a mali… Yocto Mitigation only Fix from $1,6002025-11-04 MEDIUM 6.7 CVE-2025-20730 In preloader, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege if a mal… Yocto Mitigation only Fix from $1,6002025-11-04 HIGH 7.5 CVE-2025-55560 An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.to_dense(… Pytorch after 2.7.0 Fix from $1,9502025-09-25 HIGH 7.5 CVE-2025-55552 pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randn_like are used together. Pytorch after 2.8.0 Fix from $1,9502025-09-25 HIGH 7.5 CVE-2025-55553 A syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service (DoS). Pytorch after 2.7.0 Fix from $1,9502025-09-25 HIGH 7.5 CVE-2025-55557 A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is compiled by Inductor, leading to a Denial of Service (DoS). Pytorch after 2.7.0 Fix from $1,9502025-09-25 HIGH 7.5 CVE-2025-55558 A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.Tensor.view-to… Pytorch after 2.7.0 Fix from $1,9502025-09-25 MEDIUM 5.3 CVE-2025-55554 pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-.long(). Pytorch after 2.8.0 Fix from $1,6002025-09-25 HIGH 7.5 CVE-2025-55551 An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice operation. Pytorch after 2.8.0 Fix from $1,9502025-09-25 MEDIUM 5.3 CVE-2025-46148 In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect results. Pytorch after 2.6.0 Fix from $1,6002025-09-25 MEDIUM 5.3 CVE-2025-46149 In PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error. Pytorch 2.7.0+ Fix from $1,6002025-09-25 MEDIUM 5.3 CVE-2025-46150 In PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent results. Pytorch 2.7.0+ Fix from $1,6002025-09-25 MEDIUM 5.3 CVE-2025-46152 In PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of-bounds values of the "other" argument. Pytorch 2.7.0+ Fix from $1,6002025-09-25 MEDIUM 5.3 CVE-2025-46153 PyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py even though it lacks full consistency with the eager CPU implementatio… Pytorch 2.7.0+ Fix from $1,6002025-09-25 MEDIUM 5.3 CVE-2025-59354 Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the DragonFly2 uses a variety of hash function… Dragonfly 2.1.0+ Fix from $1,6002025-09-17 CRITICAL 9.8 CVE-2025-59352 Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the gRPC API and HTTP APIs allow peers to send… Dragonfly 2.1.0+ Fix from $2,3002025-09-17 HIGH 7.5 CVE-2025-59348 Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the processPieceFromSource method does not upd… Dragonfly 2.1.0+ Fix from $1,9502025-09-17 HIGH 7.5 CVE-2025-59353 Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, a peer can obtain a valid TLS certificate for … Dragonfly 2.1.0+ Fix from $1,9502025-09-17 MEDIUM 5.3 CVE-2025-59350 Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the access control mechanism for the Proxy fea… Dragonfly 2.1.0+ Fix from $1,6002025-09-17 MEDIUM 5.3 CVE-2025-59351 Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the first return value of a function is derefe… Dragonfly 2.1.0+ Fix from $1,6002025-09-17 MEDIUM 6.5 CVE-2025-59347 Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, The Manager disables TLS certificate verificat… Dragonfly 2.1.0+ Fix from $1,6002025-09-17 MEDIUM 5.3 CVE-2025-59346 Dragonfly is an open source P2P-based file distribution and image acceleration system. Versions prior to 2.1.0 contain a server-side request forgery … Dragonfly 2.1.0+ Fix from $1,6002025-09-17 CRITICAL 9.1 CVE-2025-59345 Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, The /api/v1/jobs and /preheats endpoints in Ma… Dragonfly 2.1.10+ Fix from $2,3002025-09-17 HIGH 7.8 CVE-2025-20705 In monitor_hang, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor h… Yocto Mitigation only Fix from $1,9502025-09-01 MEDIUM 6.8 CVE-2025-20696 In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has ph… Yocto Mitigation only Fix from $1,6002025-08-04 HIGH 7.5 CVE-2025-53009 MaterialX is an open standard for the exchange of rich material and look-development content across applications and renderers. In versions 1.39.2 an… Materialx Patch available Fix from $1,9502025-08-01 HIGH 7.5 CVE-2025-53010 MaterialX is an open standard for the exchange of rich material and look-development content across applications and renderers. In version 1.39.2, wh… Materialx Patch available Fix from $1,9502025-08-01 HIGH 7.5 CVE-2025-53011 MaterialX is an open standard for the exchange of rich material and look-development content across applications and renderers. In version 1.39.2, wh… Materialx Patch available Fix from $1,9502025-08-01 HIGH 7.5 CVE-2025-53012 MaterialX is an open standard for the exchange of rich material and look-development content across applications and renderers. In version 1.39.2, ne… Materialx Patch available Fix from $1,9502025-08-01