Threat database

A vulnerability identified as CVE-2025-66368 involves incorrect handling of SDP payloads, which can lead to a denial of service condition. No further technical details or affected versions are provided.

CVE-2025-66367 is a vulnerability involving improper handling of NAS DLTransport messages that may cause a baseband crash. No further technical details, affected versions, or exploit information are provided.

A remote OS command injection vulnerability exists in Purocean Yank Note version 3.93.0 within the checkPermission function of the Terminal Handler component. This flaw allows an attacker to execute arbitrary operating system commands remotely. The vulnerability is addressed by upgrading to version 3.93.1.

A vulnerability identified as CVE-2025-66364 causes the baseband component to crash when it continuously receives control-plane messages. This issue can lead to denial of service conditions affecting the baseband functionality.

A vulnerability identified as CVE-2025-66366 involves incorrect handling of unauthenticated downlink RRC Setup messages, which can cause the baseband to crash. This flaw affects the stability of the baseband component when processing certain network messages. No specific affected software versions or patches are currently documented.

A cross-site request forgery (CSRF) vulnerability exists in nliautaud pico-content-editor up to commit 02d5ad6c820c5050c542ab9505819b5e0a0ba1af. The vulnerability allows remote attackers to perform unauthorized actions via crafted requests. The product uses a rolling release model, and specific affected or fixed versions are not disclosed. The maintainer no longer supports this product, and no vendor response or patch is available. Public exploit code has been released.

An incorrect privilege assignment vulnerability exists in Hinemos that allows an attacker with access to the password change API and specific permissions (which can be assigned to non-administrative users) to change the password of an administrative user. This could lead to privilege escalation within the affected system.

A vulnerability in laspy up to version 2.7.0 affects the LAS File Handler component, specifically in laspy/lasreader.py. This flaw allows manipulation that leads to uncontrolled memory allocation. The vulnerability can be exploited remotely, potentially causing denial of service due to resource exhaustion. The CVSS score is 4.3, indicating medium severity.

A memory corruption vulnerability exists in the unzipSync function of the esm/index.mjs file in 101arrowz fflate up to version 0.8.3. This vulnerability can be exploited remotely and has publicly available exploit code. The vendor has not responded to the disclosure. The CVSS score is 7.3, indicating a high severity issue.

A vulnerability was determined in itsourcecode Airline Reservation System 1.0. This affects an unknown function of the file /admin/manage_booked.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.

A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file admin/add_category.php of the component Category Management. Performing a manipulation of the argument category_title results in cross site scripting. The attack may be initiated remotely. The exploit has been made public and could be used.

A vulnerability has been found in OpenPPL ppl.nn up to bb84dc9952809b3a5a0036858a3d9f68af1c83d5. The affected element is the function OptGraph::InitQuantization of the file src/ppl/nn/engines/cuda/optimizer/opt_graph.cc of the component CUDA Optimizer. Such manipulation of the argument per_channel/bit_width/tensor_max/tensor_min/scale leads to out-of-bounds read. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project was informed of the problem early through an issue report but has not responded yet.

A flaw has been found in DeepGraphLearning KnowledgeGraphEmbedding up to 2e440e0f9c687314d5ff67ead68ce985dc446e3a. Impacted is the function override_config of the file codes/run.py of the component Checkpoint Loading. This manipulation of the argument data_path causes path traversal. The attack can be initiated remotely. The exploit has been published and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.

CVE-2026-48173 is a classic buffer overflow vulnerability in the NAS message handler of the Samsung Semiconductor Exynos 850. It arises from improper validation of the length field in NAS messages, leading to memory corruption. The issue was fixed in September 2026. There are no known exploits in the wild and no CVSS score is provided.

CVE-2026-48174 is a vulnerability in the NR RRC component of the Samsung Semiconductor Exynos 1280 chipset. It involves improper handling of messages before authentication, which triggers a NULL pointer dereference leading to a data abort and causes a denial-of-service (DoS) condition. A fix was released in September 2026.

CVE-2026-35494 is an out-of-bounds write vulnerability (CWE-787) in the Samsung Semiconductor Exynos 1280 baseband. It occurs during NAS packet processing and can lead to memory corruption causing a denial of service. A fix for this vulnerability was released in October 2026.

Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.

CVE-2026-48178 is a vulnerability in the Samsung Semiconductor Exynos 2200 chipset involving improper resource locking (CWE-413). It results from a race condition causing out-of-bound access in the PPC due to concurrent access to a global variable. A fix was released in October 2026.

CVE-2026-48186 is a vulnerability in the Samsung Semiconductor Exynos 1280 chipset involving improper handling of messages before AS security activation, which can cause unexpected behavior. A fix was released in October 2026.

CVE-2026-68993 is a double free vulnerability in the NPU driver of Samsung Semiconductor's Exynos 1480 due to improper pointer management. This flaw can lead to memory corruption issues. A fix was released in October 2026.