PT-2025-9097 · Git +1 · Net-Snmp

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A heap buffer overflow issue was identified, which can cause a crash. The crash occurs during the setup engineID, init snmpv3 post premib config, and snmp call callbacks functions...

OSV-2025-145 Heap-buffer-overflow in ___interceptor_strncat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=397731139 Crash type: Heap-buffer-overflow READ 1 Crash state: interceptorstrncat processndpicollectedinfo nodecleanupwalker...

PT-2025-7664 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the interceptor strncat function, process ndpi collected info, and node cleanup...

openSUSE 15 Security Update : chromium (openSUSE-SU-2025:0070-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025:0070-1 advisory. Chromium 133.0.6943.126 boo1237343 - CVE-2025-0999: Heap buffer overflow in V8 - CVE-2025-1426: Heap buffer overflow in GPU - CVE-2025-1006: Use...

Fedora 40 : chromium (2025-c0c371a0b6)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-c0c371a0b6 advisory. Update to 133.0.6943.126 CVE-2025-0999: Heap buffer overflow in V8 CVE-2025-1426: Heap buffer overflow in GPU CVE-2025-1006: Use after free in Netwo...

Exiv2 allows Use After Free

Impact A heap buffer overflow was found in Exiv2 versions v0.28.0 to v0.28.4. Versions prior to v0.28.0, such as v0.27.7, are not affected. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The heap overflow is triggered whe...

GHSA-38H4-FX85-QCX7 Exiv2 allows Use After Free

Impact A heap buffer overflow was found in Exiv2 versions v0.28.0 to v0.28.4. Versions prior to v0.28.0, such as v0.27.7, are not affected. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The heap overflow is triggered whe...

CVE-2025-0838

There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve, and rehash methods of absl::flat,nodehashset,map did not impose an upper bound on their size argument. As a result, it was possible for a caller to pass a very large size that would cause an integer...

CVE-2025-0838

CVE-2025-0838 describes a heap buffer overflow in Abseil-cpp triggered by oversized args in sized constructors, reserve(), and rehash() for absl::{flat,node}hash{set,map}. This can cause integer overflow when computing the container backing store size and lead to out-of-bounds memory writes. Publ...

CVE-2025-0838 Heap Buffer overflow in Abseil

There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve, and rehash methods of absl::flat,nodehashset,map did not impose an upper bound on their size argument. As a result, it was possible for a caller to pass a very large size that would cause an integer...

CVE-2025-0838

There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve, and rehash methods of absl::flat,nodehashset,map did not impose an upper bound on their size argument. As a result, it was possible for a caller to pass a very large size that would cause an integer...

Chromium: CVE-2025-1426 Heap buffer overflow in GPU

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2025-0999 Heap buffer overflow in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

OPENSUSE-SU-2025:0070-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 133.0.6943.126 boo1237343 - CVE-2025-0999: Heap buffer overflow in V8 - CVE-2025-1426: Heap buffer overflow in GPU - CVE-2025-1006: Use after free in Network...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2025:0070-1 Rating: important References: 1237071 1237343 Cross-References: CVE-2025-0999 CVE-2025-1006 CVE-2025-1426 Affected Products: openSUSE Backports SLE-15-SP6 An update that fixes three vulnerabilities is...

Azure Linux 3.0 Security Update: libtiff (CVE-2023-3164)

The version of libtiff installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-3164 advisory. - A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection at tools/tiffcrop.c:7916 a...

CBL Mariner 2.0 Security Update: libtiff (CVE-2023-3164)

The version of libtiff installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-3164 advisory. - A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection at tools/tiffcrop.c:7916 a...

Microsoft Edge (Chromium) < 133.0.3065.82 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 133.0.3065.82. It is, therefore, affected by multiple vulnerabilities as referenced in the February 21, 2025 advisory. - Heap buffer overflow in GPU in Google Chrome on Android prior to 133.0.6943.126 allowed a remote...

PT-2025-7471

Name of the Vulnerable Software and Affected Versions Abseil-cpp versions prior to commit 5a0e2cb5e3958dd90bb8569a2766622cb74d90c1 Description A heap buffer overflow issue exists due to the lack of an upper bound on size arguments in the sized constructors, reserve, and rehash methods of...

Medium: zziplib

Issue Overview: Heap Buffer Overflow vulnerability in zziplib v0.13.77 allows attackers to cause a denial of service via the zzipparserootdirectory function at /zzip/zip.c. CVE-2024-39133 A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via t...