3647 matches found
CVE-2025-1721 BM Concert Software Improper Clearing of Heap Memory Before Release.
IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory...
IBM Concert 安全漏洞
IBM Concert is a generative artificial intelligence-driven automated application management and monitoring tool based on the watsonx platform, announced by IBM in May 2024 at the IBMThink conference in Boston, USA. IBM Concert suffers from an improper heap memory cleanup vulnerability that can be...
CVE-2025-68617
FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From versions 2.5.0 to before 2.5.2, a race condition during unloading of a DLS file can trigger a heap-based use-after-free. A concurrently running thread may be pending to unload a DLS file, leading to use of freed...
CVE-2025-68118
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.20.0, a vulnerability exists in FreeRDP’s certificate handling code on Windows platforms. The function freerdpcertificatedatahash uses the Microsoft-specific snprintf function to format certificate cache filenames...
SUSE CVE-2025-40345
In the Linux kernel, the following vulnerability has been resolved: usb: storage: sddr55: Reject out-of-bound newpba Discovered by Atuin - Automated Vulnerability Discovery Engine. newpba comes from the status packet returned after each write. A bogus device could report values beyond the block...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the sddr55 driver rejecting an out-of-range newpba, which could lead to heap memory corruption...
TencentOS Server 4: gdk-pixbuf2 (TSSA-2024:0598)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0598 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
TencentOS Server 3: yajl (TSSA-2022:0235)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2022:0235 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
UBUNTU-CVE-2025-45663
An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a domevent structure...
CVE-2025-45663
NetSurf v3.11 is affected by CVE-2025-45663 due to a vulnerability in dom_event structure creation that reads uninitialized heap memory. The Red Hat, Debian, Ubuntu, and OSV entries corroborate the issue in NetSurf 3.11; however, the provided documents do not specify a fix or patched version. The...
NetSurf 安全漏洞
NetSurf is a lightweight browser from the NetSurf organization. A security vulnerability exists in NetSurf version v3.11 that originates from reading uninitialized heap memory when creating a domevent structure...
CVE-2025-45663
An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a domevent structure...
CVE-2025-45663
An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a domevent structure...
EUVD-2025-37484
An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a domevent structure...
Astra Linux – Vulnerability in catdoc
There is an integer underflow vulnerability in the OLE Document DIFAT Parser functionality of catdoc 0.95. A specially crafted, malformed file can lead to heap-based memory corruption. An attacker can provide a malicious file to exploit this vulnerability...
Astra Linux – Vulnerability in catdoc
There is an integer overflow vulnerability in the OLE Document File Allocation Table Parser functionality of catdoc 0.95. A specially crafted, malformed file can lead to heap-based memory corruption. An attacker can provide a malicious file to exploit this vulnerability...
IBM Concert Software Information Disclosure Vulnerability (CNVD-2025-29673)
IBM Concert Software is a generative AI-driven automated application management and monitoring tool based on the watsonx platform from IBM. An information disclosure vulnerability exists in IBM Concert Software that stems from not properly clearing sensitive information before freeing heap memory...
CVE-2025-62786 Wazuh Vulnerable to Heap-based Buffer Out-Of-Bounds WRITE in decode_win_permissions
Wazuh is a free and open source platform used for threat prevention, detection, and response. A heap-based out-of-bounds WRITE occurs in decodewinpermissions, resulting in writing a NULL byte 2 bytes before the start of the buffer allocated to decodedit. A compromised agent can potentially levera...