FreeBSD : Mozilla -- stack memory read (2fc74cae-13c8-11f0-a5bd-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 2fc74cae-13c8-11f0-a5bd-b42e991fc52e advisory. [email protected] reports: An attacker could read 32 bits of values spilled onto the stack in a JIT...

OESA-2025-1382 giflib security update

giflib is a library of gif images and provides utilities for processing images. Security Fixes: openeuler社区开源软件giflib存在堆缓冲区溢出漏洞，通过未gif2rgb构造异常输入，造成内存越界读CVE-2025-31344...

OESA-2025-1381 giflib security update

giflib is a library of gif images and provides utilities for processing images. Security Fixes: openeuler社区开源软件giflib存在堆缓冲区溢出漏洞，通过未gif2rgb构造异常输入，造成内存越界读CVE-2025-31344...

CVE-2025-20944

Out-of-bounds read in parsing audio data in libsavsac.so prior to SMR Apr-2025 Release 1 allows local attackers to read out-of-bounds memory...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read due to the stbhwbuildtilesetfromimage function. An attacker can read memory locations that should be inaccessible by manipulating the w argument. Remediation There is no fixed version for stb. References - GitHub Issu...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from South Korea's Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Apr-2025 Release 1, which originates from an out-of-bounds read when parsing audi...

KLA82886 DoS vulnerability in Apache Tomcat

Out of bounds memory read vulnerability was found in Apache Tomcat. Malicious users can exploit this vulnerability to cause denial of service. Original advisories Denial of Service via invalid HTTP priority header Exploitation Public exploits exist for this vulnerability. Related products...

Adobe XMP Toolkit 缓冲区错误漏洞

Adobe XMP Toolkit is a toolkit from the American company Audobee Adobe. Adobe XMP Toolkit suffers from a buffer overflow vulnerability that originates from mishandling a malicious user-supplied file, causing the program to read memory data outside of boundaries, which can be exploited by an...

Adobe After Effects 缓冲区错误漏洞

Adobe After Effects is a set of visual effects and motion graphics production software from the American company Audobee Adobe. A buffer overflow vulnerability exists in Adobe After Effects, which stems from a failure to properly handle read operations at memory boundaries and can be exploited by...

CVE-2025-20948: Undefined Security Weakness

Out-of-bounds read in enrollment with cdsp frame secfr trustlet prior to SMR Apr-2025 Release 1 allows local privileged attackers to read out-of-bounds memory...

K000150746: PostgreSQL vulnerabilities CVE-2021-32028 and CVE-2021-32029

Security Advisory Description CVE-2021-32028 A flaw was found in postgresql. Using an INSERT ... ON CONFLICT ... DO UPDATE command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data...

USN-7422-1 fis-gtm vulnerabilities

It was discovered that FIS-GT.M could incorrectly dereference memory in certain instances. An attacker could possibly use this issue to cause FIS-GT.M to crash, resulting in a denial of service. CVE-2021-44492, CVE-2021-44498, CVE-2021-44508 It was discovered that FIS-GT.M could perform a divisio...

UBUNTU-CVE-2025-3031

An attacker could read 32 bits of values spilled onto the stack in a JIT compiled function. This vulnerability was fixed in Firefox 137 and Thunderbird 137...

PT-2026-54675

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.46 Description An uninitialized use in Dawn allows a remote attacker to obtain potentially sensitive information from process memory by using a crafted HTML page. Recommendations Update Google Chrome ...

OESA-2025-1335 postgresql-13 security update

PostgreSQL is an advanced Object-Relational database management system DBMS. The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine a...

Linux kernel WiFi DoS

The vulnerability of the mt7996mcustabfertlv function in the Linux kernel’s Wi-Fi component is related to memory-read errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

CVE-2024-44199

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.6. An app may be able to cause unexpected system termination or read kernel memory...

Adobe Substance 3D Modeler Heap Buffer Overflow Info Disclosure

The vulnerability of the Adobe Substance 3D Modeler software-related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow an attacker to bypass ASLR protection and disclose confidential information...

librsvg:render_document: Crash in _blit_xrgb32_lerp_spans

Detailed Report: https://oss-fuzz.com/testcase?key=4774130042077184 Project: librsvg Fuzzing Engine: libFuzzer Fuzz Target: renderdocument Job Type: libfuzzerasanlibrsvg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7ff010e196b0 Crash State: blitxrgb32lerpspans...

SAMSUNG Notes out-of-bounds read vulnerability (CNVD-2025-24718)

SAMSUNG Notes is a software application from Samsung South Korea. It is used to provide a record function. SAMSUNG Notes suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to read out-of-bounds memory...