CVE-2025-48175

In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes...

CVE-2025-4745

creationtimestamp| type| source ---|---|--- 2025-05-16 04:33:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16615 2025-05-16 05:07:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpbb3tszwf2h...

CVE-2025-4740

creationtimestamp| type| source ---|---|--- 2025-05-16 03:34:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16613 2025-05-16 05:07:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpbb3tjfwz24...

CVE-2025-31219

creationtimestamp| type| source ---|---|--- 2025-05-16 03:18:35+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lpb2yg6yps2m 2025-05-19 03:23:01+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lpimn42o5k2k 2025-05-21 03:00:00+00:00| seen|...

CVE-2025-4734

creationtimestamp| type| source ---|---|--- 2025-05-16 01:34:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16591 2025-05-16 05:07:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpbb3ubmyb2h...

CVE-2025-4733

CVE-2025-4733 affects TOTOLINK A3002R/A3002RU (version 3.0.0-B20230809.1615). The vulnerability is a buffer overflow in the HTTP POST Request Handler caused by improper handling of the /boafrm/formIpQoS file where the mac argument is manipulated. This can be triggered remotely; exploitation detai...

CVE-2025-4730

TOTOLINK A3002R/A3002RU (version 3.0.0-B20230809.1615) is affected by a buffer overflow in the HTTP POST Request Handler, specifically in the /boafrm/formMapDel function when the devicemac1 argument is manipulated. The vulnerability can be exploited remotely and is described as critical in multip...

CVE-2025-48175

In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes...

CVE-2025-48175

In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes...

CVE-2025-48175

In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes...

CVE-2025-48174

In libavif offset+size (CVE-2025-48174). This is the primary CVE described; related advisories (e.g., SUSE security updates and Debian security advisory) indicate upgrading to libavif 1.3.0 or later mitigates the issue. Affected products include various Linux distributions; patches explicitly fix...

CVE-2025-48175

Summary (CVE-2025-48175) In libavif prior to 1.3.0, the function avifImageRGBToYUV in reformat.c contains integer overflows during multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes. This is documented across multiple vendor advisories (e.g., Debian, SUSE) updating to 1.3....

CVE-2025-48175

In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes...

CVE-2025-4727

A vulnerability was found in Meteor up to 3.2.1 and classified as problematic. This issue affects the function Object.assign of the file packages/ddp-server/livedataserver.js. The manipulation of the argument forwardedFor leads to inefficient regular expression complexity. The attack may be...

CVE-2025-4727 Meteor livedata_server.js Object.assign redos

A vulnerability was found in Meteor up to 3.2.1 and classified as problematic. This issue affects the function Object.assign of the file packages/ddp-server/livedataserver.js. The manipulation of the argument forwardedFor leads to inefficient regular expression complexity. The attack may be...

CVE-2025-47275

creationtimestamp| type| source ---|---|--- 2025-05-15 21:33:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16574 2025-05-15 21:55:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114514077067044674 2025-05-15 22:37:34+00:00| seen|...

CVE-2025-47287

creationtimestamp| type| source ---|---|--- 2025-05-15 21:33:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16573 2025-05-15 23:02:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpamomwuhf2n 2025-05-24 20:06:27+00:00| seen|...

CVE-2025-21100

Improper initialization in the UEFI firmware for the IntelR Server D50DNP and M50FCP boards may allow a privileged user to potentially enable information disclosure via local access...

CVE-2025-20031

Improper input validation for some IntelR Graphics Drivers may allow an authenticated user to potentially enable denial of service via local access...

CVE-2025-20022

Insufficient control flow management for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow a privileged user to potentially enable information disclosure via adjacent access...