Archive
24 September 2025
Vulnerabilities first published on this day (UTC), newest first.
125 results · Feed
-
High 8.8
Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap cor…
KEV Sep 23, 2025 -
Medium 6.9
Insufficiently Protected Credentials in Puppet Enterprise 2025.4 and 2025.5
In Puppet Enterprise versions 2025.4.0 and 2025.5, the encryption key used for encrypting content in the Infra Assistant database was not excluded from the files gathered by Puppet backup. The key is only present on the system if the user has a Puppet Enterpr…
-
High 7.8
Release of Invalid Pointer or Reference in Android Core
Memory corruption while handling invalid inputs in application info setup.
-
High 7.5
Buffer Over-read in WLAN HAL
Transient DOS while processing power control requests with invalid antenna or stream values.
-
High 7.8
Use After Free in Camera
Memory corruption while encoding the image data.
-
High 7.5
Buffer Over-read in WLAN HAL
Transient DOS while handling command data during power control processing.
-
High 7.5
Buffer Over-read in BT Controller
Transient DOS while parsing the EPTM test control message to get the test pattern.
-
High 7.8
Buffer Over-read in BT Controller
Memory corruption due to global buffer overflow when a test command uses an invalid payload type.
-
High 7.8
Double Free in Video
Memory corruption due to double free when multiple threads race to set the timestamp store.
-
High 7.8
Use After Free in Automotive Software platform based on QNX
Memory corruption while handling repeated memory unmap requests from guest VM.
-
High 7.8
Improper Input Validation in Automotive Software platform based on QNX
Memory corruption while processing data sent by FE driver.
-
High 7.8
Use After Free in Automotive Software platform based on QNX
Memory corruption while processing message in guest VM.
-
High 7.8
Use After Free in Camera Driver
Memory corruption while processing config_dev IOCTL when camera kernel driver drops its reference to CPU buffers.
-
Medium 6.1
Buffer Over-read in Video
Information disclosure when Video engine escape input data is less than expected minimum size.
-
Critical 9.8
Improper Validation of Array Index in Multi-Mode Call Processor
Memory corruption while selecting the PLMN from SOR failed list.
-
Medium 6.1
Buffer Over-read in Video
Information disclosure while running video usecase having rogue firmware.
-
High 7.8
Improper Access Control Applied to Mirrored or Aliased Memory Regions in Hypervisor
memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.
-
Medium 6.1
Buffer Over-read in Audio
information disclosure while invoking calibration data from user space to update firmware size.
-
High 8.2
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.
-
High 8.2
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.
-
High 8.2
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.
-
Critical 9.8
Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & Connectivity
Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.
-
High 7.1
Cryptographic Issues in Core
Cryptographic issue while performing RSA PKCS padding decoding.
-
High 7.8
Buffer Copy Without Checking Size of Input in HLOS
Memory corruption while performing private key encryption in trusted application.
-
High 7.8
Buffer Copy Without Checking Size of Input in Computer Vision
Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake.
-
Medium 5.9
Fallback tar extraction in pip doesn't check symbolic links point to extraction directory
When extracting a tar archive pip may not check symbolic links point into the extraction directory if the tarfile module doesn't implement PEP 706. Note that upgrading pip to a "fixed" version for this vulnerability doesn't fix all known vulnerabilities that …
-
High 7.2CVE-2025-48868 Public exploit
Horilla vulnerable to authenticated RCE via eval() in project_bulk_archive
Horilla is a free and open source Human Resource Management System (HRMS). An authenticated Remote Code Execution (RCE) vulnerability exists in Horilla 1.3.0 due to the unsafe use of Python’s eval() function on a user-controlled query parameter in the project…
-
High 7.8
NVIDIA Megatron-LM for all platforms contains a vulnerability in the ensemble_classifer script where malicious data cre…
-
High 7.8
NVIDIA Megatron-LM for all platforms contains a vulnerability in the msdp preprocessing script where malicious data cre…
-
High 7.8
NVIDIA Megatron-LM for all platforms contains a vulnerability in the tasks/orqa/unsupervised/nq.py component, where an …
-
High 7.8
NVIDIA Megatron-LM for all platforms contains a vulnerability in the pretrain_gpt script, where malicious data created …
-
Low 3.3
NVIDIA CUDA Toolkit contains a vulnerability in cuobjdump, where an unprivileged user can cause a NULL pointer derefere…
-
Low 3.3
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-…
-
Low 3.3CVE-2025-23339 Public exploit
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in cuobjdump where an attacker may cause a stack-based b…
-
Low 3.3
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where a user may cause an out-of-bounds writ…
-
Low 3.3
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where an attacker may cause a heap-based buf…
-
Medium 4.2
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvJPEG where a local authenticated user may cause a G…
-
Medium 4.5
NVIDIA nvJPEG contains a vulnerability in jpeg encoding where a user may cause an out-of-bounds read by providing a mal…
-
Low 2.5
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvJPEG where a local authenticated user may cause a d…
-
Medium 5.7
NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a speciall…