12794 matches found
CVE-2025-13631
Inappropriate implementation in Google Updater in Google Chrome on Mac prior to 143.0.7499.41 allowed a remote attacker to perform privilege escalation via a crafted file. Chromium security severity: High...
CVE-2025-13631
Inappropriate implementation in Google Updater in Google Chrome on Mac prior to 143.0.7499.41 allowed a remote attacker to perform privilege escalation via a crafted file. Chromium security severity: High...
CVE-2025-13631
Inappropriate implementation in Google Updater in Google Chrome on Mac prior to 143.0.7499.41 allowed a remote attacker to perform privilege escalation via a crafted file. Chromium security severity: High...
CVE-2025-13631
CVE-2025-13631 affects Google Chrome on macOS due to an inappropriate implementation in Google Updater, allowing a remote attacker to escalate privileges via a crafted file. Affected version set is Chrome/Chromium prior to 143.0.7499.41; the issue is mitigated by updating to 143.0.7499.41 or late...
PT-2025-48756
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 143.0.7499.41 Description An improper implementation in Google Updater within Google Chrome on Mac could allow a remote attacker to escalate privileges through a specially crafted file. Recommendations Update...
PT-2025-48705
Name of the Vulnerable Software and Affected Versions PDF-XChange Editor version 10.7.3.401 Description An out-of-bounds read issue exists in the EMF functionality. Exploitation involves a specially crafted EMF file. This could allow an attacker to perform an out-of-bounds read, potentially leadi...
gimp: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
A heap-based buffer overflow vulnerability was discovered in GIMP’s DICOM DCM file parser. The flaw occurs because the application fails to properly validate the length of user-supplied data before copying it to a heap buffer. This can lead to arbitrary code execution when a user opens a speciall...
DEBIAN-CVE-2025-13837
When loading a plist file, the plistlib module reads data in size specified by the file itself, meaning a malicious file can cause OOM and DoS issues...
CVE-2025-65406
A heap overflow in the MatroskaFile::createRTPSinkForTrackNumber function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service DoS via supplying a crafted MKV file...
gimp: GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
A remote code execution RCE vulnerability exists in GIMP due to improper bounds checking during the parsing of ICNS image files. When a user opens a specially crafted ICNS file, it can trigger an out-of-bounds write, allowing attackers to execute arbitrary code within the context of the GIMP...
gimp: GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
A stack-based buffer overflow vulnerability exists in the ILBM file parsing functionality of GIMP. When processing a specially crafted ILBM image file, improper validation of user-supplied data length before copying to a stack buffer can lead to memory corruption. Successful exploitation allows a...
CVE-2025-65405
The CVE-2025-65405 entry concerns Live555 Streaming Media (v2018.09.02). A use-after-free in ADTSAudioFileSource::samplingFrequency() can be triggered by a crafted ADTS/AAC file, leading to Denial of Service. Multiple sources (NVD, CNVD, EUVD, OSV Ubuntu, CIRCL) corroborate the same issue. Connec...
SUSE CVE-2025-66382
In libexpat through 2.7.3, a crafted file with an approximate size of 2 MiB can lead to dozens of seconds of processing time...
EUVD-2025-199862
In libexpat through 2.7.3, a crafted file with an approximate size of 2 MiB can lead to dozens of seconds of processing time...
CVE-2025-66382
A flaw was found in libexpat. This vulnerability allows a denial of service DoS by processing a crafted file with an approximate size of 2 MiB, leading to dozens of seconds of processing time...
AZL-71054 CVE-2025-66382 affecting package expat 2.6.4-4
In libexpat through 2.7.3, a crafted file with an approximate size of 2 MiB can lead to dozens of seconds of processing time...
CVE-2025-66382
In libexpat through 2.7.3, a crafted file with an approximate size of 2 MiB can lead to dozens of seconds of processing time...
UBUNTU-CVE-2025-66382
In libexpat through 2.7.3, a crafted file with an approximate size of 2 MiB can lead to dozens of seconds of processing time...
Inefficient Algorithmic Complexity
Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity through the processing of a specially crafted file of approximately 2 MiB in size. An attacker can cause significant delays in processing by submitting such a file. Remediation There is no fixed versio...