Chromium: CVE-2025-10502 Heap buffer overflow in ANGLE

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

vlc:vlc-demux-dec-libfuzzer-ty: Heap-buffer-overflow in Open

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=6348819089653760 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-dec-libfuzzer-ty Job Type: aflasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x76d31c6fe82f...

imagemagick:encoder_png_fuzzer: Heap-buffer-overflow in LocaleNCompare

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5175729538269184 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpngfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

KLA88206 Mutltiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability in ANGLE can be exploited to to cause denial of service. 2...

Huawei EulerOS: Security Advisory for abseil-cpp (EulerOS-SA-2025-2152)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Autodesk Revit 安全漏洞

Autodesk Revit is a suite of building information modeling software from the American company Autodesk. A security vulnerability exists in Autodesk Revit that originates from a heap buffer overflow when parsing specially crafted PDF files, which could lead to a crash, read sensitive data, or...

imagemagick:encoder_ept3_fuzzer: Heap-buffer-overflow in ImportPixelChannel

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4962738855280640 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderept3fuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4...

openexr:openexr_exrcheck_fuzzer: Heap-buffer-overflow in ojph::mem_infile::read

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5747129672073216 Project: openexr Fuzzing Engine: libFuzzer Fuzz Target: openexrexrcheckfuzzer Job Type: libfuzzerasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflow...

vlc:vlc-demux-dec-libfuzzer: Heap-buffer-overflow in Demux

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=5281076958527488 Project: vlc Fuzzing Engine: libFuzzer Fuzz Target: vlc-demux-dec-libfuzzer Job Type: libfuzzerasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

envoy:rbac_filter_fuzz_test: Heap-buffer-overflow in re2::RE2::Rewrite

Detailed Report: https://oss-fuzz.com/testcase?key=5583271099695104 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: rbacfilterfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x51d00008a028 Crash State: re2::RE2::Rewrite...

mruby:mruby_fuzzer: Heap-buffer-overflow in uadd

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5701176541904896 Project: mruby Fuzzing Engine: afl Fuzz Target: mrubyfuzzer Job Type: aflasanmruby Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x7b84ec3e0354 Crash State:...

opencv:core_fuzzer: Heap-buffer-overflow in png_combine_row

Project: https://github.com/opencv/opencv.git Detailed Report: https://oss-fuzz.com/testcase?key=6096791281139712 Project: opencv Fuzzing Engine: afl Fuzz Target: corefuzzer Job Type: aflasanopencv Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x7c194d0e0a08 Crash State...

PT-2025-39097

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=444547710 Crash type: Heap-buffer-overflow READ 2 Crash state: processClientServerHello process tls fuzz quic get crypto data.c...

CVE-2025-9086

A cookie is set using the "secure" keyword for "https://target" 2. curl is redirected to or otherwise made to speak with "http://target" same hostname, but using clear text HTTP using the same cookie set 3. The same cookie name is set - but with only a slash as path "path="/"". Since this site...

ndpi:fuzz_quic_get_crypto_data: Heap-buffer-overflow in processClientServerHello

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=4663656190377984 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzquicgetcryptodata Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x77d8f7be00b9 Crash...

FFmpeg < 8.0 Heap-Buffer-Overflow

The version of FFmpeg installed on the remote host is prior to 8.0. It is, therefore, affected by a vulnerability: - A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the channel definition...

CLSA-2025-1757523459 php: Fix of 4 CVEs

Fix multiple vulnerabilities in oniguruma: - CVE-2017-9224: out-of-bounds read in matchat - CVE-2017-9226: heap buffer overflow in nextstateval - CVE-2017-9227: out-of-bounds read in mbcenclen - CVE-2017-9228: out-of-bounds heap write in bitsetsetrange...

Linux Distros Unpatched Vulnerability : CVE-2023-29950

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - swfrender v0.9.2 was discovered to contain a heap buffer overflow in the function enumerateUsedIDsfillstyle at modules/swftools.c CVE-2023-29950 Note that Nessu...

Linux Distros Unpatched Vulnerability : CVE-2022-35105

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via /bin/png2swf+0x552cea. CVE-2022-35105 Note that Nessus relies on the presence of t...

Linux Distros Unpatched Vulnerability : CVE-2020-21066

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Bento4 v1.5.1.0. There is a heap-buffer-overflow in AP4Dec3Atom::AP4Dec3Atom at Ap4Dec3Atom.cpp, leading to a denial of service progr...