Security Vulnerabilities - CVEs Published In October 2025
Memory corruption while performing SCM call.
CVSS Score
8.8
EPSS Score
0.001
Published
2025-10-09
Memory corruption during PlayReady APP usecase while processing TA commands.
CVSS Score
7.8
EPSS Score
0.001
Published
2025-10-09
Transient DOS while processing IOCTL call for image encoding.
CVSS Score
5.5
EPSS Score
0.001
Published
2025-10-09
Memory corruption while processing camera platform driver IOCTL calls.
CVSS Score
7.8
EPSS Score
0.001
Published
2025-10-09
Information disclosure while processing batch command execution in Video driver.
CVSS Score
6.1
EPSS Score
0.001
Published
2025-10-09
Transient DOS while processing video packets received from video firmware.
CVSS Score
5.5
EPSS Score
0.001
Published
2025-10-09
Information disclosure may occur while processing the hypervisor log.
CVSS Score
6.5
EPSS Score
0.001
Published
2025-10-09
Memory corruption may occur while processing IOCTL call for DMM/WARPNCC CONFIG request.
CVSS Score
6.6
EPSS Score
0.001
Published
2025-10-09
A weakness has been identified in code-projects Online Complaint Site 1.0. Affected is an unknown function of the file /cms/admin/state.php. This manipulation of the argument state causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.
CVSS Score
2.1
EPSS Score
0.004
Published
2025-10-09
A vulnerability was determined in Tenda AC7 15.03.06.44. The impacted element is an unknown function of the file /goform/fast_setting_pppoe_set. Executing a manipulation of the argument Password can lead to stack-based buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
CVSS Score
7.4
EPSS Score
0.008
Published
2025-10-09