Month: December 2025
CVE-2025-68114 Capstone doesn’t check vsnprintf return in SStream_concat, allows stack buffer underflow and overflow
CVE-2025-68161 Apache Log4j Core: Missing TLS hostname verification in Socket appender
CVE-2025-59529 simple protocol server ignores accepts unlimited connections and logs failures without limit
CVE-2025-38347 f2fs: fix to do sanity check on ino and xnid
Information published. Continue reading CVE-2025-38347 f2fs: fix to do sanity check on ino and xnid
CVE-2025-38331 net: ethernet: cortina: Use TOE/TSO on all TCP
Information published. Continue reading CVE-2025-38331 net: ethernet: cortina: Use TOE/TSO on all TCP
CVE-2025-38300 crypto: sun8i-ce-cipher – fix error handling in sun8i_ce_cipher_prepare()
CVE-2025-37938 tracing: Verify event formats that have “%*p..”
Information published. Continue reading CVE-2025-37938 tracing: Verify event formats that have “%*p..”