CVE-2025-39787Medium· 6.0▾ SunlitA flaw was found in the Linux kernel's soc: qcom: mdt_loader component. This vulnerability allows a local attacker to cause a Denial of Service (DoS) by providing a specially crafted firmware buffer. The flaw occurs because the MDT loader …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 33 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 15.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
0.2%
Last analysed / modified upstream
7.8 → 6
high → medium
A flaw was found in the Linux kernel's soc: qcom: mdt_loader component. This vulnerability allows a local attacker to cause a Denial of Service (DoS) by providing a specially crafted firmware buffer. The flaw occurs because the MDT loader does not sufficiently validate the size of the ELF header and its section entry sizes (e_phentsize and e_shentsize), leading to a read past the end of the buffer.
kernel: Linux kernel: Denial of Service in MDT loader due to improper ELF header validation — rated Moderate by Red Hat. Released 2025-09-11, updated 2026-10-16.
Affected:
No fix planned:
Not affected:
Fix deferred
Workarounds / mitigations:
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-46471Medium· 5.5An issue was discovered in GStreamer gst-plugins-good before 1.28.2
CVE-2026-46472Low· 3.3gstreamer1-plugins-good: gstreamer1-plugins-good: Information disclosure via out-of-bounds read in qtdemux_parse_chnl (CVE-2026-46472)
CVE-2026-111375Medium· 4.8freerdp: FreeRDP: Denial of Service via out-of-bounds read in RAIL window title (CVE-2026-111375)
CVE-2026-109253Medium· 5.3FreeRDP from 3.9.0 before 3.32.0 contains an out-of-bounds read vulnerability in the RDPEAR NDR scalar readers, which check value length before consuming alignment padding
CVE-2026-109249Medium· 5.5FreeRDP 3.0.0 before 3.32.0 contains a heap out-of-bounds read in freerdp_assistance_parse_all_elements_of() because it advances its parsing cursor without reducing the remaining length, letting the scan window exceed the decrypted Conne…
CVE-2026-59189High· 7.1OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry