31077 matches found
NewStart CGSL MAIN 7.02 : libvpx Multiple Vulnerabilities (NS-SA-2025-0182)
The remote NewStart CGSL host, running version MAIN 7.02, has libvpx packages installed that are affected by multiple vulnerabilities: - There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpximgalloc with a large value of the dw, dh, or align parameter may result in...
CBL Mariner 2.0 Security Update: gnutls (CVE-2025-32990)
The version of gnutls installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32990 advisory. - A heap-buffer-overflow off-by-one flaw was found in the GnuTLS software in the template parsing logic within...
gdk-pixbuf2 -- a heap buffer overflow
[email protected] reports: A flaw exists in gdk-pixbuf within the gdkpixbufjpegimageloadincrement function io-jpeg.c and in glib’s gbase64encodestep glib/gbase64.c. When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads...
pyodbc:fuzz_curs_exec: Heap-buffer-overflow in libodbc.so.2
Project: https://github.com/mkleehammer/pyodbc.git Detailed Report: https://oss-fuzz.com/testcase?key=5228169928179712 Project: pyodbc Fuzzing Engine: libFuzzer Fuzz Target: fuzzcursexec Job Type: libfuzzerasanpyodbc Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...
FreeBSD : 7-Zip -- Multi-byte write heap buffer overflow in NCompress::NRar5::CDecoder (80411ba2-6729-11f0-a5cb-8c164580114f)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 80411ba2-6729-11f0-a5cb-8c164580114f advisory. [email protected] reports: 7-Zip is a file archiver with a high compression ratio. Zeroes...
OSV-2025-564 Heap-buffer-overflow in ndpi_match_host_subprotocol
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=432880859 Crash type: Heap-buffer-overflow READ 2 Crash state: ndpimatchhostsubprotocol checkcontenttypeandchangeprotocol processrequest...
PT-2025-42915
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=432892652 Crash type: Heap-buffer-overflow READ 16 Crash state: pcpp::IPv6Address::IPv6Address pcpp::SomeIpSdIPv6Option::getIpAddress readParsedPacket...
Huawei EulerOS: Security Advisory for perl (EulerOS-SA-2025-1834)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP12 : perl (EulerOS-SA-2025-1834)
According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions...
EulerOS 2.0 SP12 : perl (EulerOS-SA-2025-1835)
According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions...
arrow:parquet-arrow-fuzz: Heap-buffer-overflow in parquet::DeltaByteArrayDecoderImpl<parquet::PhysicalType<
Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5504019512754176 Project: arrow Fuzzing Engine: afl Fuzz Target: parquet-arrow-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x50a000000240 Crash...
pcapplusplus:FuzzTarget: Heap-buffer-overflow in pcpp::IPv6Address::IPv6Address
Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5415471581298688 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash...
ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_match_host_subprotocol
Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=4687656288321536 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzprocesspacket Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x5040000000bc Crash State...
Azure Linux 3.0 Security Update: gdk-pixbuf2 (CVE-2025-7345)
The version of gdk-pixbuf2 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-7345 advisory. - A flaw exists in gdkpixbuf within the gdkpixbufjpegimageloadincrement function io-jpeg.c and in glib's...
ImageMagick < 6.9.13-26 / 7.1.0 < 7.1.2 Multiple Vulnerabilities
The remote Windows host has a version of ImageMagick installed that prior to 6.9.13-26 or 7.1 prior to 7.1.2. It is, therefore, affected by multiple vulnerabilites: - filename template issues can cause a stack overflow through vsnprintf CVE-2025-53101 - heap buffer overflow in the...
CVE-2025-53816
CVE-2025-53816: 7-Zip vulnerability in the RAR5 handler (NRar5::CDecoder) allows zeroes to be written outside the heap buffer, causing memory corruption and denial of service in versions prior to 25.0.0. The issue is fixed in 7-Zip v25.0.0. Remediation: upgrade to 25.0.0 or newer; affected compon...
libjxl:streaming_fuzzer: Heap-buffer-overflow in jxl::FindBestPatchDictionary
Project: https://github.com/libjxl/libjxl.git Detailed Report: https://oss-fuzz.com/testcase?key=5409468861186048 Project: libjxl Fuzzing Engine: libFuzzer Fuzz Target: streamingfuzzer Job Type: libfuzzerasanlibjxl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...
SUSE SLES15 Security Update : gnuplot (SUSE-SU-2025:01811-2)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01811-2 advisory. - CVE-2025-31176: invalid read leads to segmentation fault on plot3dpoints bsc1240325. - CVE-2025-31177: improper bounds check lea...
