CVE-2025-61662

creationtimestamp| type| source ---|---|--- 2025-11-18 17:55:54+00:00| seen| https://seclists.org/oss-sec/2025/q4/195 2025-11-18 21:26:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5woirq7232a 2026-03-19 00:00:00+00:00| seen|...

CVE-2025-54770

creationtimestamp| type| source ---|---|--- 2025-11-18 17:41:26+00:00| seen| https://seclists.org/oss-sec/2025/q4/194 2025-11-18 21:36:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5wp3nxw772n 2026-03-19 00:00:00+00:00| seen|...

OSV-2025-900 Heap-buffer-overflow in DecodeFrame

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=460575093 Crash type: Heap-buffer-overflow READ Crash state: DecodeFrame testdecoderprocess EsOutSend...

CVE-2016-7420

creationtimestamp| type| source ---|---|--- 2025-11-14 16:40:35+00:00| seen| https://seclists.org/oss-sec/2025/q4/180...

EUVD-2025-145211

Malicious code in my-oss-project-extensions npm...

EUVD-2025-145212

Malicious code in my-oss-project npm...

EUVD-2025-150116

Malicious code in tea-oss-mirt npm...

EUVD-2025-150115

Malicious code in tea-oss-tean npm...

kernel: Fix of 6 CVEs

fix: virtio-net: Add validation for used length CVE-2021-47352 - xen/netfront: don't use gnttabqueryforeignaccess for mapped status CVE-2022-23037 - net/sched: schqfq: Fix race condition on qfqaggregate CVE-2025-38477 - net: fix information leakage in /proc/net/ptype CVE-2022-48757 - net: atm:...

CLSA-2025-1762454401 kernel: Fix of 6 CVEs

fix: virtio-net: Add validation for used length CVE-2021-47352 - xen/netfront: don't use gnttabqueryforeignaccess for mapped status CVE-2022-23037 - net/sched: schqfq: Fix race condition on qfqaggregate CVE-2025-38477 - net: fix information leakage in /proc/net/ptype CVE-2022-48757 - net: atm:...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990631)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990631 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: oss: Fix PCM OSS buffer allocation overflow We've got syzbot reports hitting INTMAX overflo...

CVE-2025-10966

creationtimestamp| type| source ---|---|--- 2025-11-05 06:16:22+00:00| seen| https://seclists.org/oss-sec/2025/q4/137 2025-11-05 22:12:33+00:00| seen| https://bsky.app/profile/securitycipher.bsky.social/post/3m4w2zfmwdt2w 2025-11-07 05:53:31+00:00| seen|...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988892)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988892 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix negative period/buffer sizes The period size calculation in OSS layer may...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-989916)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989916 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: oss: Fix PCM OSS buffer allocation overflow We've got syzbot reports hitting INTMAX overflo...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989296)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989296 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Limit the period size to 16MB Set the practical limit to the period size the...

Astra Linux – Vulnerability in jq

jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-bufferoverflow error occurs in the jvstringvfmt function within the jqfuzzexecute harness from oss-fuzz. This error happens at line 1456 of the jv.c file: void p = mallocsz;. As of the time of publication, no patch...

OSV-2025-865 Heap-buffer-overflow in generic_unpack

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=456158449 Crash type: Heap-buffer-overflow READ 4 Crash state: genericunpack Imf34::ScanLineInputFile::Data::readPixels Imf34::InputFile::readPixels...

CVE-2025-54941

creationtimestamp| type| source ---|---|--- 2025-10-29 17:52:25+00:00| seen| https://seclists.org/oss-sec/2025/q4/99 2025-10-30 11:38:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4fusqi4yo2k...

CVE-2025-12206

creationtimestamp| type| source ---|---|--- 2025-10-27 19:03:44+00:00| seen| https://seclists.org/oss-sec/2025/q4/79...

CVE-2025-59023

creationtimestamp| type| source ---|---|--- 2025-10-23 14:04:54+00:00| seen| https://seclists.org/oss-sec/2025/q4/69 2026-02-09 15:21:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3megqth3wtf23...