Browse CVEs

HIGH 8.8 CVE-2025-51480 Path Traversal vulnerability in onnx.external_data_helper.save_external_data in ONNX 1.17.0 allows attackers to overwrite arbitrary files by supplyin… Onnx Patch available Fix from $1,9502025-07-22 MEDIUM 6.5 CVE-2025-20693 In wlan STA driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote (proximal/adjacent) informatio… Yocto after 3.7 Fix from $1,6002025-07-08 HIGH 8.8 CVE-2025-5150 A vulnerability was found in docarray up to 0.40.1. It has been rated as critical. Affected by this issue is the function __getitem__ of the file /do… Docarray after 0.40.1 Fix from $1,9502025-05-25 HIGH 7.5 CVE-2025-47291 containerd is an open-source container runtime. A bug was found in the containerd's CRI implementation where containerd, starting in version 2.0.1 an… Containerd 2.0.5+ Fix from $1,9502025-05-21 MEDIUM 5.9 CVE-2025-47290 containerd is a container runtime. A time-of-check to time-of-use (TOCTOU) vulnerability was found in containerd v2.1.0. While unpacking an image dur… Containerd Patch available Fix from $1,6002025-05-20 CRITICAL 9.8 CVE-2025-32434 PyTorch is a Python package that provides tensor computation with strong GPU acceleration and deep neural networks built on a tape-based autograd sys… Pytorch 2.6.0+ Fix from $2,3002025-04-18 MEDIUM 5.5 CVE-2025-3730 A vulnerability, which was classified as problematic, was found in PyTorch 2.6.0. Affected is the function torch.nn.functional.ctc_loss of the file a… Pytorch Patch available Fix from $1,6002025-04-16 MEDIUM 6.8 CVE-2025-20656 In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has ph… Yocto Mitigation only Fix from $1,6002025-04-07 MEDIUM 5.5 CVE-2025-3121 A vulnerability classified as problematic has been found in PyTorch 2.6.0. Affected is the function torch.jit.jit_module_from_flatbuffer. The manipul… Pytorch No fix yet Fix from $1,6002025-04-02 MEDIUM 5.3 CVE-2025-3001 A vulnerability classified as critical was found in PyTorch 2.6.0. This vulnerability affects the function torch.lstm_cell. The manipulation leads to… Pytorch Mitigation only Fix from $1,6002025-03-31 MEDIUM 5.3 CVE-2025-3000 A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function torch.jit.script. The manipulation leads to memory … Pytorch Mitigation only Fix from $1,6002025-03-31 MEDIUM 5.3 CVE-2025-2999 A vulnerability was found in PyTorch 2.6.0. It has been rated as critical. Affected by this issue is the function torch.nn.utils.rnn.unpack_sequence.… Pytorch Mitigation only Fix from $1,6002025-03-31 MEDIUM 5.3 CVE-2025-2998 A vulnerability was found in PyTorch 2.6.0. It has been declared as critical. Affected by this vulnerability is the function torch.nn.utils.rnn.pad_p… Pytorch Mitigation only Fix from $1,6002025-03-31 MEDIUM 5.5 CVE-2025-2953 A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0+cu124. Affected by this issue is the function torch.mkldnn_max_… Pytorch No fix yet Fix from $1,6002025-03-30 CRITICAL 9.8 CVE-2024-53351 Insecure permissions in pipecd v0.49 allow attackers to gain access to the service account's token, leading to escalation of privileges. Pipecd after 0.49.3 Fix from $2,3002025-03-21 HIGH 7.4 CVE-2024-53349 Insecure permissions in kuadrant v0.11.3 allow attackers to gain access to the service account's token, leading to escalation of privileges via the s… Kuadrant after 0.11.3 Fix from $1,9502025-03-21 HIGH 7.5 CVE-2025-2148 A vulnerability was found in PyTorch 2.6.0+cu124. It has been declared as critical. Affected by this vulnerability is the function torch.ops.profiler… Pytorch Mitigation only Fix from $1,9502025-03-10 MEDIUM 6.8 CVE-2025-20650 In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has ph… Yocto Mitigation only Fix from $1,6002025-03-03 MEDIUM 6.6 CVE-2025-20635 In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has… Yocto Mitigation only Fix from $1,6002025-02-03 MEDIUM 5.3 CVE-2024-20147 In Bluetooth FW, there is a possible reachable assertion due to improper exception handling. This could lead to remote denial of service with no addi… Yocto after 3.5 Fix from $1,6002025-02-03 CRITICAL 9.8 CVE-2024-24421 A type confusion in the nas_message_decode function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows attacker… Magma after 1.8.0 Fix from $2,3002025-01-21 HIGH 7.5 CVE-2024-24420 A reachable assertion in the decode_linked_ti_ie function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows at… Magma after 1.8.0 Fix from $1,9502025-01-21 HIGH 7.5 CVE-2024-24422 The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a stack overflow in the… Magma after 1.8.0 Fix from $1,9502025-01-21 HIGH 7.5 CVE-2024-24423 The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in th… Magma after 1.8.0 Fix from $1,9502025-01-21 HIGH 7.5 CVE-2024-24416 The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in th… Magma after 1.8.0 Fix from $1,9502025-01-21 HIGH 7.5 CVE-2024-24417 The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in th… Magma after 1.8.0 Fix from $1,9502025-01-21 HIGH 7.5 CVE-2024-24418 The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in th… Magma after 1.8.0 Fix from $1,9502025-01-21 HIGH 7.5 CVE-2024-24419 The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in th… Magma after 1.8.0 Fix from $1,9502025-01-21 MEDIUM 6.5 CVE-2023-37037 A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90… Magma after 1.8.0 Fix from $1,6002025-01-21 MEDIUM 6.5 CVE-2023-37038 A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90… Magma after 1.8.0 Fix from $1,6002025-01-21