CVE-2025-10922: Heap-based Buffer Overflow

GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page o...

PT-2025-44314

Name of the Vulnerable Software and Affected Versions Wazuh versions prior to 4.10.2 Description Wazuh, a free and open source platform for threat prevention, detection, and response, contains a heap-based out-of-bounds write issue in the decode win permissions function. This flaw allows a...

CVE-2025-62786: Buffer Underwrite

Wazuh is a free and open source platform used for threat prevention, detection, and response. A heap-based out-of-bounds WRITE occurs in decodewinpermissions, resulting in writing a NULL byte 2 bytes before the start of the buffer allocated to decodedit. A compromised agent can potentially levera...

CVE-2025-10921: Heap-based Buffer Overflow

GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page o...

Siemens SIMATIC Devices Heap-based Buffer Overflow (CVE-2023-7104)

A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a...

CVE-2025-53814: Use After Free

A use-after-free vulnerability exists in the XML parser functionality of GCC Productions Inc. Fade In 4.2.0. A specially crafted .xml file can lead to heap-based memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2025-12204: Heap-based Buffer Overflow

A security vulnerability has been detected in Kamailio 5.5. Impacted is the function rvedestroy of the file src/core/rvalue.c of the component Configuration File Handler. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit has been disclosed...

Krita TGA File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Krita. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TGA files. Th...

PT-2025-43862

Name of the Vulnerable Software and Affected Versions Kamailio version 5.5 Description A security issue exists in Kamailio 5.5 related to a heap-based buffer overflow. The issue is located in the rve destroy function within the src/core/rvalue.c file of the Configuration File Handler component...

PT-2025-45970

The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench...

PT-2025-45973

The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the get word rgb row function in rdppm.c...

PT-2025-45969

libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the put pixel rows function in wrbmp.c, as demonstrated by djpeg...

CVE-2025-5517: Heap-based Buffer Overflow

Heap-based Buffer Overflow vulnerability in ABB Terra AC wallbox UL40/80A, ABB Terra AC wallbox UL32A, ABB Terra AC wallbox MID/ CE -Terra AC MID, ABB Terra AC wallbox MID/ CE -Terra AC Juno CE, ABB Terra AC wallbox MID/ CE -Terra AC PTB, ABB Terra AC wallbox JP.This issue affects Terra AC wallbo...

PT-2025-45963

A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi cap rtl to unicode function of the fribidi-char-sets-cap-rtl.c file. This flaw allows an attacker to pass a specially crafted file to the Fribidi application with the '--caprtl' option, leading to a crash a...

PT-2025-45922

FFmpeg v.n6.1-3-g466799d4f5 allows a heap-based buffer overflow via the ff gaussian blur 8 function in libavfilter/edge template.c:116:5 component...

PT-2025-45896

FFmpeg before 4.2 has a heap-based buffer overflow in vqa decode chunk because of an out-of-array access in vqa decode init in libavcodec/vqavideo.c...

PT-2025-45925

A vulnerability, which was classified as critical, was found in FFmpeg up to 5.1.5. This affects the function fill audiodata of the file /libswresample/swresample.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. This issue was fixed in versi...

PT-2025-45898

FFmpeg through 4.3 has a heap-based buffer overflow in avio get str in libavformat/aviobuf.c because dnn backend native.c calls ff dnn load model native and a certain index check is omitted...

CVE-2025-11947: Heap-based Buffer Overflow

A weakness has been identified in bftpd up to 6.2. Impacted is the function expandgroups of the file options.c of the component Configuration File Handler. Executing a manipulation can lead to heap-based buffer overflow. It is possible to launch the attack on the local host. Attacks of this natur...

PT-2025-45924

A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects the function pnm decode frame in the library /libavcodec/pnmdec.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed...