Eclipse Kura downloads deployment packages (DPs) from a remote URL without any limit on the size of the data it receives. A malicious or compromised HTTP(S) server, or an attacker able to tamper with a plain-HTTP download, can stream an arbitrarily large (or endless) response. Kura writes the response to local storage until the filesystem is full. On gateways the temporary directory is often a RAM-backed tmpfs, so this can also exhaust memory. The result is denial of service of the device: failed configuration persistence, failed logging and possible crashes of the framework or other services. The same missing size limit is present in the REST upload endpoint `POST /deploy/v2/_upload`, which copies the request body to the temporary directory with no limit. Workarounds: only install DPs from trusted HTTPS sources, restrict who can install packages (Web UI `kura.packages.admin` permission, REST `kura.permission.rest.deploy`, cloud DEPLOY-V2 access).

Out-of-bounds Write in Wi-Fi NPU

In the Wi-Fi NPU FW, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local denial of service with user execution privileges needed. User interaction is not needed for exploitation.

Cross-site scripting in Integrated Publishing Toolkit

Multiple injection issues in resource metadata fields in GBIF Integrated Publishing Toolkit versions before 3.3.5 allows authenticated remote attackers to execute code in another user's session after user interaction via stored cross-site scripting

Kernel memory corruption in GNSS firmware loader due to insufficient length validation

Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory.

GPU Driver Memory Corruption via VMID Reservation Validation Failure

Memory corruption in GPU driver due to improper validation of VMID reservation.

Out-of-bounds Memory Access in Samsung Exynos Device Drivers

Out-of-bounds memory access in a device driver due to improper resource state tracking.

Samsung GPU Driver Improper Reference Count Causes Memory Corruption

In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption.

Samsung Exynos GPU Driver Memory Corruption Vulnerability

In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption

Exynos NPU Driver Out-of-Bounds Write Leading to Denial of Service

In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service

Kernel Memory Corruption via Malformed GNSS Firmware Length Validation in Samsung Exynos SoCs

Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.

Integer Overflow in Exynos NPU Driver Parameter Processing

Integer overflow in NPU driver parameter processing due to insufficient bounds checking.

Authorization Bypass in Samsung Exynos Framework Services

Incorrect authorization in Samsung framework services due to missing permission checks

Double Free Vulnerability in Samsung Exynos NPU Driver

A double free vulnerability in NPU driver due to improper pointer management (941)

Memory Corruption via Improper Input Validation in Exynos ENN NeuralNetworks HAL Leading to Denial of Service

In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to a denial of service condition.

Improper Input Validation in Samsung Exynos H‑Arx DRM Plugin Causes Memory Corruption

In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially leading to denial of service or privilege escalation.

Improper Validation in Exynos NPU Driver Causes Out-of-Bounds Write and Denial of Service

In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service.

kernel: kernel: Memory corruption via integer overflow in Samsung Exynos NPU driver

In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption.

Subnet Solutions PowerSYSTEM Center SQL Injection

Insufficient input validation in the PowerSYSTEM Center report designer allows an authenticated user to execute unauthorized SQL commands.

Subnet Solutions PowerSYSTEM Center Incorrect Authorization

Incorrect authorization in PowerSYSTEM Center allows a low-privileged, authenticated user to access resources normally limited to administrators.

Improper Permission Handling in Buffer Operations Enables Unauthorized Memory Mappings

Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions