PT-2025-40318

Name of the Vulnerable Software and Affected Versions VT Studio versions 8.53 and prior Description VT Studio versions 8.53 and earlier are susceptible to an issue where an uninitialized pointer can be accessed. Exploitation of this condition, through the use of a specially crafted file, may lead...

PT-2025-40320

Name of the Vulnerable Software and Affected Versions VT STUDIO versions 8.53 and prior Description VT STUDIO versions 8.53 and earlier are susceptible to an out-of-bounds read issue. Processing a specially crafted file may lead to arbitrary code execution on the affected product. Recommendations...

Integer overflow in modules/MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.

...

Heap-based buffer overflow in the decodeBlock in MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file.

...

Vulnerability in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service via a crafted file.

...

Heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 and 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file.

...

The decodeSample function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.

...

The theme editor in Bolt allows remote authenticated users to execute arbitrary code by renaming a crafted file

...

CVE-2025-6033

There is a memory corruption vulnerability due to an out of bounds write in XMLSerialize when using SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a...

K000156709: Multiple ImageMagick vulnerabilities

Security Advisory Description CVE-2016-7532 coders/psd.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds read via a crafted PSD file. CVE-2016-7533 The ReadWPGImage function in coders/wpg.c in ImageMagick allows remote attackers to cause a denial of service...

CVE-2025-6033

There is a memory corruption vulnerability due to an out of bounds write in XMLSerialize when using SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a...

CVE-2025-6033

The CVE-2025-6033 entry concerns NI Circuit Design Suite. A memory corruption due to an out-of-bounds write in XML_Serialize() when using the SymbolEditor can lead to information disclosure or arbitrary code execution. Exploitation requires a user to open a specially crafted .sym file, and affect...

K000156687: Multiple ImageMagick vulnerabilities

Security Advisory Description CVE-2014-9818 ImageMagick allows remote attackers to cause a denial of service out-of-bounds access via a malformed sun file. CVE-2014-9819 Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted palm file, a differe...

CVE-2025-20314

CVE-2025-20314 describes a vulnerability in Cisco IOS XE Software where an authenticated local user with level-15 privileges or a physically proximate unauthenticated attacker can cause the device to execute persistent code at boot, effectively breaking the chain of trust. The root cause is impro...

Cisco IOS XE Software Secure Boot Bypass Vulnerabilities

Multiple vulnerabilities in Cisco IOS XE Software could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to an affected device to execute persistent code at boot time and break the chain of trust. These vulnerabilities are due...

PT-2025-39312

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description A flaw in Cisco IOS XE Software may allow an attacker with level-15 privileges or physical access to a device to execute persistent code during boot and compromise the system’s...

CVE-2025-51006

Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the dltlinuxsll2cleanup function in plugins/dltlinuxsll2/linuxsll2.c. This vulnerability is triggered when tcpeditdltcleanup indirectly invokes the cleanup routine multiple times on the same memory region. By...

CVE-2025-9449

A Use After Free vulnerability affecting the PAR file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 could allow an attacker to execute arbitrary code while opening a specially crafted PAR file...

CVE-2025-7988

CVE-2025-7988 affects Ashlar-Vellum Graphite, specifically the VC6 file parser. The vulnerability is a parsing error causing a buffer overrun (out-of-bounds write) in VC6 file processing, leading to remote code execution . Exploitation requires user interaction (visiting a malicious page or openi...

CVE-2025-9450 Use of Uninitialized Variable vulnerability affecting the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025

A Use of Uninitialized Variable vulnerability affecting the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 could allow an attacker to execute arbitrary code while opening a specially crafted JT file...