Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc USA. A security vulnerability exists in Google Chrome that stems from vulnerability to heap buffer overflow attacks...

PT-2025-42416

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=447958064 Crash type: Heap-buffer-overflow WRITE Crash state: AddGreenToBlueAndRed AVX2 VP8LInverseTransform ProcessRows...

Google Chrome 安全漏洞

Google Chrome is a web browser developed by Google Inc. Google Chrome suffers from a heap buffer overflow vulnerability that stems from a heap buffer overflow issue in the WebGPU component. An attacker can exploit this vulnerability to execute arbitrary code on the system or cause denial of heap...

PT-2025-42417

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=447845730 Crash type: Heap-buffer-overflow WRITE Crash state: ProcessRows DecodeImageData VP8LDecodeImage...

CVE-2025-10504

Heap-based Buffer Overflow vulnerability in ABB Terra AC wallbox.This issue affects Terra AC wallbox: through 1.8.33...

libwebp:[email protected]: Heap-buffer-overflow in ProcessRows

Project: https://chromium.googlesource.com/webm/libwebp Detailed Report: https://oss-fuzz.com/testcase?key=5345813414084608 Project: libwebp Fuzzing Engine: libFuzzer Fuzz Target: [email protected] Job Type: libfuzzerasanlibwebp Platform Id: linux Crash Type:...

libwebp:[email protected]: Heap-buffer-overflow in AddGreenToBlueAndRed_AVX2

Project: https://chromium.googlesource.com/webm/libwebp Detailed Report: https://oss-fuzz.com/testcase?key=5210650793279488 Project: libwebp Fuzzing Engine: libFuzzer Fuzz Target: [email protected] Job Type: libfuzzerasanlibwebp Platform Id: linux Crash Type:...

wireshark:fuzzshark_ip: Heap-buffer-overflow in Dot11DecryptDecryptPacket

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=5590445456687104 Project: wireshark Fuzzing Engine: libFuzzer Fuzz Target: fuzzsharkip Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type:...

opencv:core_fuzzer: Heap-buffer-overflow in png_combine_row

Project: https://github.com/opencv/opencv.git Detailed Report: https://oss-fuzz.com/testcase?key=4764649309667328 Project: opencv Fuzzing Engine: afl Fuzz Target: corefuzzer Job Type: aflasanopencv Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x75b3e66e2cc8 Crash State...

OSV-2025-788 Heap-buffer-overflow in int arrow::bit_util::BitReader::GetBatch<int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=447480433 Crash type: Heap-buffer-overflow READ 8 Crash state: int arrow::bitutil::BitReader::GetBatch auto arrow::util::RleBitPackedDecoder::GetBatch std::1::pair arrow::util::R...

PT-2025-42414

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=447480433 Crash type: Heap-buffer-overflow READ 8 Crash state: int arrow::bit util::BitReader::GetBatch auto arrow::util::RleBitPackedDecoder::GetBatch std:: 1::pair arrow::util::R...

PT-2025-39808

Name of the Vulnerable Software and Affected Versions ABB Terra AC wallbox versions through 1.8.33 Description A heap-based buffer overflow exists in ABB Terra AC wallbox. This issue could potentially allow for unexpected behavior or compromise of the device. Recommendations Update to a version...

NVIDIA CUDA Toolkit Heap Buffer Overflow Vulnerability (CNVD-2025-23250)

NVIDIA CUDA Toolkit is a development software application for creating high-performance GPU-accelerated applications from NVIDIA. NVIDIA CUDA Toolkit suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to cause arbitrary code execution...

AZL-85527 CVE-2025-11083 affecting package crash for versions less than 9.0.0-3

A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elfswapshdr in the library bfd/elfcode.h of the component Linker. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit has been disclosed to the public an...

AZL-85533 CVE-2025-11083 affecting package gdb for versions less than 13.2-10

A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elfswapshdr in the library bfd/elfcode.h of the component Linker. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit has been disclosed to the public an...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the bfdelfparseehframe function. An attacker can execute arbitrary code or cause a denial of service by providing specially crafted input to the process. Remediation A fix was pushed into the master branch...

[SECURITY] [DLA 4312-1] squid security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4312-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès September 27, 2025 https://wiki.debian.org/LTS -...

OSV-2025-787 Heap-buffer-overflow in DwaCompressor_uncompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=447429458 Crash type: Heap-buffer-overflow WRITE Crash state: DwaCompressoruncompress internalexrundodwaa exruncompresschunk...

fwupd:efi-volume_fuzzer: Heap-buffer-overflow in fu_byte_array_set_size

Project: https://github.com/fwupd/fwupd.git Detailed Report: https://oss-fuzz.com/testcase?key=6697581892927488 Project: fwupd Fuzzing Engine: libFuzzer Fuzz Target: efi-volumefuzzer Job Type: libfuzzerasanfwupd Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x7ac3ebbe20...

CVE-2025-59938: Heap-based Buffer Overflow

Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions starting from 3.8.0 to before 4.11.0, wazuh-analysisd is vulnerable to a heap buffer overflow when parsing XML elements from Windows EventChannel messages. This issue has been patched in...