BIT-LIBPYTHON-2025-4516 Use-after-free in "unicode_escape" decoder with error handler

There is an issue in CPython when using bytes.decode"unicodeescape", error="ignore|replace". If you are not using the "unicodeescape" encoding or an error handler your usage is not affected. To work-around this issue you may stop using the error= handler and instead wrap the bytes.decode call in ...

OESA-2025-1973 iperf3 security update

Iperf is a tool for active measurements of the maximum achievable bandwidth on IP networks. It supports tuning of various parameters related to timing, protocols, and buffers. Security Fixes: iperf is an open source tool for ESnet to actively measure the maximum bandwidth that can be achieved on ...

CVE-2025-54650

Improper array index verification vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect the audio decoding function...

opencv:imdecode_fuzzer: Heap-buffer-overflow in png_combine_row

Project: https://github.com/opencv/opencv.git Detailed Report: https://oss-fuzz.com/testcase?key=5559053918208000 Project: opencv Fuzzing Engine: afl Fuzz Target: imdecodefuzzer Job Type: aflasanopencv Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 5 Crash Address: 0x515000020c82 Crash...

CVE-2025-54650

Improper array index verification vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect the audio decoding function...

CVE-2025-54650

Improper array index verification vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect the audio decoding function...

CVE-2025-54650

The CVE-2025-54650 entry describes an improper array index verification vulnerability in Huawei HarmonyOS’s audio codec module. The flaw affects the audio decoding function; exploitation could impact decoding behavior as stated by multiple sources. Public assessments show a MEDIUM base score (NVD...

CVE-2025-54650

Improper array index verification vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect the audio decoding function...

CVE-2025-54650

Improper array index verification vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect the audio decoding function...

CVE-2025-54650: Improper Validation of Array Index

Improper array index verification vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect the audio decoding function...

PT-2025-32094 · Huawei · Harmonyos

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: An improper array index verification issue exists in the audio codec module. Successful exploitation may affect the audio decoding function. Recommendations: ...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An improper array index validation vulnerability exists in the Huawei HarmonyOS audio codec module, which can be exploited by an attacker to cause audio...

OSV-2025-597 Heap-buffer-overflow in generic_unpack

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=435779241 Crash type: Heap-buffer-overflow READ 2 Crash state: genericunpack exrdecodingrun Imf34::ScanLineProcess::rundecode...

PT-2025-46085

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=435779241 Crash type: Heap-buffer-overflow READ 2 Crash state: generic unpack exr decoding run Imf 3 4::ScanLineProcess::run decode...

ALPINE-CVE-2025-54350

In iperf before 3.19.1, iperfauth.c has a Base64Decode assertion failure and application exit upon a malformed authentication attempt...

iperf 安全漏洞

iperf is an ESnet open source tool for actively measuring the maximum bandwidth achievable on an IP network. A security vulnerability exists in iperf versions prior to 3.19.1, which stems from the existence of a Base64 decoding assertion failure in iperfauth.c that could cause the application to...

OSV-2025-584 Heap-buffer-overflow in isvcd_mark_err_slice_skip

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=434978682 Crash type: Heap-buffer-overflow READ 2 Crash state: isvcdmarkerrsliceskip isvcdvideodecode Codec::decodeFrame...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the GIF decoding process when handling malformed comment extension blocks lacking a block terminator. An attacker can cause the application to enter an infinite loop and exhaust...

Apple macOS MediaToolbox Framework Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the MediaToolbox framework is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

RLSA-2025:4049 Moderate: libtasn1 security update

A library that provides Abstract Syntax Notation One ASN.1, as specified by the X.680 ITU-T recommendation parsing and structures management, and Distinguished Encoding Rules DER, as per X.690 encoding and decoding functions. Security Fixes: libtasn1: Inefficient DER Decoding in libtasn1 Leading ...