Adobe Substance3D Stager 输入验证错误漏洞

Adobe Substance3D Stager is a set and rendering software for 3D scenes from Audobee Adobe USA. An input validation error vulnerability exists in Adobe Substance3D Stager 3.1.4 and prior versions, which stems from an integer overflow or wrap-around error that could lead to the execution of arbitra...

ROS-20251014-07

Vulnerability in Perl JSON::XS data structure transformation module is related to integer overflow when parsing JSON data. Exploitation of the vulnerability could allow an attacker acting remotely, execute arbitrary code on the target system...

PT-2025-42053

Name of the Vulnerable Software and Affected Versions Microsoft Windows Speech affected versions not specified Description An integer overflow or wraparound exists in Microsoft Windows Speech. This flaw allows a local attacker to elevate privileges. An integer overflow happens when a calculation...

Linux Distros Unpatched Vulnerability : CVE-2025-53630

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - llama.cpp is an inference of several LLM models in C/C++. Integer Overflow in the ggufinitfromfileimpl function in ggml/src/gguf.cpp can lead to Heap...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets, which stems from an integer overflow that could result in an out-of-bounds read, which could lead to the disclosure of local information if a malicious attacker...

Dolby Digital Plus Audio Decoder 安全漏洞

Dolby Digital Plus Audio Decoder is an audio codec technology from Dolby Laboratories USA. A security vulnerability exists in Dolby Digital Plus Audio Decoder that stems from an integer overflow that could lead to remote code execution...

PT-2025-42192

Name of the Vulnerable Software and Affected Versions Substance3D - Stager versions 3.1.4 and earlier Description An Integer Overflow or Wraparound issue exists in Substance3D - Stager. Successful exploitation could lead to arbitrary code execution with the privileges of the current user. User...

ROS-20251014-09

A vulnerability in the SVG component of Mozilla Firefox, Firefox ESR and Thunderbird email client is related to an integer overflow. with integer overflow. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code. remotely to execute arbitrary code...

Security Bulletin: AIX/VIOS is vulnerable to a denial of service (CVE-2025-49175, CVE-2025-49178) and an integer overflow (CVE-2025-49176, CVE-2025-49179)

Summary Vulnerabilities in Xorg X Server could cause a denial of service CVE-2025-49175, CVE-2025-49178 or an integer overflow CVE-2025-49176, CVE-2025-49179. Vulnerability Details CVEID:CVE-2025-49175 DESCRIPTION: A flaw was found in the X Rendering extension's handling of animated cursors. If a...

[SECURITY] [DLA 4329-1] libfcgi security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4329-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz October 13, 2025 https://wiki.debian.org/LTS -...

AIX is vulnerable to a denial of service (CVE-2025-49175 CVE-2025-49178) and an integer overflow (CVE-2025-49176 CVE-2025-49179)

IBM SECURITY ADVISORY First Issued: Mon Oct 13 08:46:48 CDT 2025 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/xorgadvisory4.asc Security Bulletin: AIX is vulnerable to a denial of service CVE-2025-49175, CVE-2025-49178 and an integer...

The vulnerability of the Redis database management system, related to integer overflow, allows attackers to execute arbitrary code.

The vulnerability of the Redis database management system is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Debian dla-4329 : libfcgi-bin - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4329 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4329-1 [email protected] https://www.debian.org/lts/security/...

Fedora 42 : valkey (2025-3055a5b407)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-3055a5b407 advisory. Valkey 8.0.6 - Released Fri 03 October 2025 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possibl...

OESA-2025-2363 gimp security update

The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing...

OESA-2025-2362 gimp security update

The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing...

OESA-2025-2365 perl-JSON-XS security update

This module converts Perl data structures to JSON and vice versa. Its primary goal is to be correct and its secondary goal is to be fast. To reach the latter goal it was written in C. Security Fixes: JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when...

OESA-2025-2364 gimp security update

The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing...

OESA-2025-2366 perl-JSON-XS security update

This module converts Perl data structures to JSON and vice versa. Its primary goal is to be correct and its secondary goal is to be fast. To reach the latter goal it was written in C. Security Fixes: JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when...

GHSA-XC79-566C-J4QX Parallax is vulnerable to DoS via malicious p2p message

Impact A vulnerable node can be made to consume very large amounts of memory when handling specially crafted p2p messages sent from an attacker node. In order to carry out the attack, the attacker establishes a peer connections to the victim, and sends a malicious GetBlockHeadersRequest message...