MGASA-2025-0085 Updated ffmpeg packages fix security vulnerabilities

A reachable assertion in FFmpeg git-master commit N-113007-g8d24a28d06 allows attackers to cause a Denial of Service DoS via opening a crafted AAC file. CVE-2025-22919 A heap buffer overflow vulnerability in FFmpeg before commit 4bf784c allows attackers to trigger a memory corruption via supplyin...

CVE-2025-1788

CVE-2025-1788 affects rizin up to version 0.8.0, with the vulnerable code located in librz/util/utf8.c (rz_utf8_encode). The issue is a heap-based buffer overflow that requires local access to exploit. Publicly disclosed exploits exist; a patch/update is recommended to fix the vulnerability. Othe...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : tiff (SUSE-SU-2025:0753-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0753-1 advisory. - CVE-2023-25435: Heap-buffer-overflow in extractContigSamplesShifted8bits in tiffcrop.c...

Security update for tiff

This update for tiff fixes the following issues: CVE-2023-25435: Heap-buffer-overflow in extractContigSamplesShifted8bits in tiffcrop.c bsc1212607. CVE-2023-52356: Segment fault in libtiff in TIFFReadRGBATileExt leading to denial of service bsc1219213. Other bugfixes: Fixed tiff build issue on...

SUSE-SU-2025:0753-1 Security update for tiff

This update for tiff fixes the following issues: - CVE-2023-25435: Heap-buffer-overflow in extractContigSamplesShifted8bits in tiffcrop.c bsc1212607. - CVE-2023-52356: Segment fault in libtiff in TIFFReadRGBATileExt leading to denial of service bsc1219213. Other bugfixes: - Fixed tiff build issue...

AZL-57639 CVE-2025-1744 affecting package gdal 3.6.3-2

Out-of-bounds Write vulnerability in radareorg radare2 allows heap-based buffer over-read or buffer overflow.This issue affects radare2: before 5.9.9...

OSV-2025-178 Heap-buffer-overflow in usm_set_user_password

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=399458050 Crash type: Heap-buffer-overflow WRITE 9 Crash state: usmsetuserpassword usmsetpassword runconfighandler...

Heap Buffer Overflow

libexiv2.so is vulnerable to a Heap Buffer Overflow. The vulnerability is due to a heap buffer overflow triggered when writing metadata into a crafted image file, allows an attacker could exploit this to achieve code execution if a victim processes a malicious image with Exiv2...

Security update for vim

This update for vim fixes the following issues: Update to version 9.1.1101: CVE-2024-43790: possible out-of-bounds read when performing a search command bsc1229685. CVE-2024-43802: heap buffer overflow due to incorrect flushing of the typeahead buffer bsc1229822. CVE-2024-45306: heap buffer...

SUSE-SU-2025:0723-1 Security update for vim

This update for vim fixes the following issues: Update to version 9.1.1101: - CVE-2024-43790: possible out-of-bounds read when performing a search command bsc1229685. - CVE-2024-43802: heap buffer overflow due to incorrect flushing of the typeahead buffer bsc1229822. - CVE-2024-45306: heap buffer...

CVE-2025-22881

Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current...

Amazon Linux 2023 : zziplib, zziplib-devel, zziplib-utils (ALAS2023-2025-859)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-859 advisory. Heap Buffer Overflow vulnerability in zziplib v0.13.77 allows attackers to cause a denial of service via the zzipparserootdirectory function at /zzip/zip.c. CVE-2024-39133 A Stack Buffer Overfl...

CBL Mariner 2.0 Security Update: glib (CVE-2023-32643)

The version of glib installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-32643 advisory. - A flaw was found in GLib. The GVariant deserialization code is vulnerable to a heap buffer overflow introduced...

FreeBSD : exiv2 -- Use after free in TiffSubIfd (6ae77556-f31d-11ef-a695-4ccc6adda413)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 6ae77556-f31d-11ef-a695-4ccc6adda413 advisory. Kevin Backhouse reports: A heap buffer overflow was found in Exiv2 versions v0.28.0 to v0.28.4. Version...

SUSE SLES15 Security Update : qemu (SUSE-SU-2025:0692-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0692-1 advisory. - CVE-2024-8612: Fixed information leak in virtio devices bsc1230915. - CVE-2024-7409: Fixed denial of service via improper...

SUSE-SU-2025:0692-1 Security update for qemu

This update for qemu fixes the following issues: - CVE-2024-8612: Fixed information leak in virtio devices bsc1230915. - CVE-2024-7409: Fixed denial of service via improper synchronization in QEMU NBD Server during socket closure bsc1229007. - CVE-2024-3447: Fixed heap buffer overflow in...

CVE-2025-0690

GRUB2 contains a heap-based out-of-bounds write triggered by an integer overflow in the read module, allowing corruption of GRUB internals and potential secure-boot bypass. Affected: GRUB2; root cause: read path overflow in buffering logic; impact as stated is high for confidentiality/integrity/a...

OSV-2025-162 Heap-buffer-overflow in snmp_in_options

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=398067543 Crash type: Heap-buffer-overflow READ 8 Crash state: snmpinoptions netsnmpparseargs snmpparseargsfuzzer.c...

OSV-2025-161 Heap-buffer-overflow in se_add_pair

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=398356443 Crash type: Heap-buffer-overflow READ 8 Crash state: seaddpair sereadconf runconfighandler...

Fedora 41 : chromium (2025-acbfdd26a1)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-acbfdd26a1 advisory. Update to 133.0.6943.126 CVE-2025-0999: Heap buffer overflow in V8 CVE-2025-1426: Heap buffer overflow in GPU CVE-2025-1006: Use after free in Netwo...