USN-7913-1 mame vulnerabilities

It was discovered that the stb library, included in MAME, had a heap-based buffer overflow. An attacker could possibly use this issue to crash the program or execute arbitrary code. CVE-2018-16981 It was discovered that the tinyexr library, included in MAME, had a heap- based buffer over-read in...

MongoDB 7.0.x < 7.0.22 / 8.0.x < 8.0.10 / 8.2.0-rc0 (SERVER-101230)

The version of MongoDB installed on the remote host is 7.0 prior to 7.0.22, 8.0 prior to 8.0.10 and 8.2.0-rc0. It is, therefore, affected by a vulnerability as referenced in the SERVER-101230 advisory. - An authorized user may crash the MongoDB server by causing buffer over-read. This can be done...

BIT-NGINX-GATEWAY-2024-7347 NGINX MP4 module vulnerability

NGINX Open Source and NGINX Plus have a vulnerability in the ngxhttpmp4module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with the ngxhttpmp4module and the mp4 directi...

SUSE CVE-2025-12106

Insufficient argument validation in OpenVPN 2.7alpha1 through 2.7rc1 allows an attacker to trigger a heap buffer over-read when parsing IP addresses...

PDF viewer Buffer Overflow Information Disclosure

The vulnerability of PDF viewing and editing software products such as Acrobat DC, Acrobat Reader DC, Acrobat 2024, Acrobat 2020, and Acrobat Reader 2020 is related to reading data beyond the buffer memory. Exploiting this vulnerability can allow attackers to disclose protected information...

Linux SMB2 Read Buffer Overflow DoS

The vulnerability of the smb2read function in the fs/smb/server/smb2pdu.c module of the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

lz4-java Heap Buffer Overflow Information Disclosure

The vulnerability of the LZ4decompressfast function in the lz4-java data compression library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions and expose sensitive information...

Advisory ROSA-SA-2025-3088

Software: udisks2 2.8.4 OS: rosa-server79 unaffected versions = udisks2-2.8.4-1.0.1.res7 affected versions udisks2-2.8.4-1.0.1.res7 CVE-ID: CVE-2025-8067 BDU-ID: 2025-11284 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the fdindex fknction of the Udisks storage device query and management program...

Linux Module Heap Buffer Overflow DoS

The vulnerability in the sound/soc/intel/boards/bytcrrt5640.c kernel of the Linux operating system is related to reading data outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

ROS-20251202-04

A vulnerability in the V8 JavaScript script handler of Google Chrome browser is related to reading outside the boundaries of the buffer. Exploitation of the vulnerability could allow an attacker acting remotely to impact the availability of protected information Vulnerability in the WebApp Instal...

JLSEC-2025-328 LIBPNG is a reference library for use in applications that read, create, and manipulate PNG...

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability exists in libpng's pngdoquantize function when processing PNG files with malformed palette...

Updated libpng packages fix security vulnerabilities

LIBPNG is vulnerable to a heap buffer overflow in pngdoquantize via malformed palette index. CVE-2025-64505 LIBPNG is vulnerable to a heap buffer over-read in pngwriteimage8bit with grayscale+alpha or RGB/RGBA images. CVE-2025-64506 LIBPNG is vulnerable to a buffer overflow in pngimagereadcomposi...

CVE-2025-12106

Insufficient argument validation in OpenVPN 2.7alpha1 through 2.7rc1 allows an attacker to trigger a heap buffer over-read when parsing IP addresses...

CVE-2025-12106

Insufficient argument validation in OpenVPN 2.7alpha1 through 2.7rc1 allows an attacker to trigger a heap buffer over-read when parsing IP addresses...

CVE-2025-12106

Insufficient argument validation in OpenVPN 2.7alpha1 through 2.7rc1 allows an attacker to trigger a heap buffer over-read when parsing IP addresses...

CVE-2025-12106

A heap buffer over-read vulnerability exists in OpenVPN versions 2.7_alpha1 through 2.7_rc1 due to insufficient argument validation during IP address parsing. Specifically, a flaw in the get_addr_generic() function allows an attacker to escape operations beyond the memory buffer. Practical conseq...

CVE-2025-12106

Insufficient argument validation in OpenVPN 2.7alpha1 through 2.7rc1 allows an attacker to trigger a heap buffer over-read when parsing IP addresses...

CVE-2025-12106

Insufficient argument validation in OpenVPN 2.7alpha1 through 2.7rc1 allows an attacker to trigger a heap buffer over-read when parsing IP addresses...

PT-2025-48441

Name of the Vulnerable Software and Affected Versions OpenVPN versions 2.7 alpha1 through 2.7 rc1 Description A flaw exists in OpenVPN due to inadequate argument validation. This issue allows an attacker to potentially cause a heap buffer over-read when processing IP addresses. Recommendations...

Google Chrome V8 Engine Data Compromise

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to reading beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to exploit the accessibility of protected information...