PT-2025-11483

🗓️ 17 Mar 2025 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 2 Views

Expr versions before 1.17.0 have a memory vulnerability caused by unbounded input strings.

Reporter	Title	Published	Views	Family All 459
IBM Security Bulletins	Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization	5 Jun 202512:51	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in Go affects IBM Robotic Process Automation for Cloud Pak	9 Jun 202519:01	–	ibm
IBM Security Bulletins	Security Bulletin: The Expr expression parser is given an unbounded input string, it will attempt to compile the entire string and generate an Abstract Syntax Tree (AST) node for each part of the expression, affects watsonx.data	13 Jun 202510:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images	16 Oct 202513:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an interger overflow in containerd [CVE-2024-40635]	1 May 202520:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	18 Aug 202504:29	–	ibm
IBM Security Bulletins	Security Bulletin: Containerd can cause an overflow condition where the container ultimately runs as root, which affects IBM watsonx.data	25 Jul 202512:33	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities that can affect IBM Fusion	19 Dec 202520:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable to service disruption due to memory exhaustion vulnerability in expression parser	30 Jan 202614:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a containerd security vulnerability (CVE-2024-40635)	28 Apr 202520:41	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2025-29786
github	www.github.com/advisories/GHSA-93mq-9ffx-83m2
ubuntu	www.ubuntu.com/security/CVE-2025-29786
t	www.t.me/cvetracker/19282
twitter	www.twitter.com/gcpweekly/status/2031875756553343217
twitter	www.twitter.com/thevilledev/status/1901916571729043742
github	www.github.com/expr-lang/expr/pull/762
osv	www.osv.dev/vulnerability/openSUSE-SU-2025:15006-1
suse	www.suse.com/security/cve/CVE-2024-40635
osv	www.osv.dev/vulnerability/openSUSE-SU-2025:14910-1

11 Mar 2026 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 27.8

CVSS 3.17.8 - 8.2

CVSS 44.1

EPSS0.00095

SSVC