EUVD-2014-2139

Malware in sbrugna...

EUVD-2016-1243

Malware in sbrugna...

EUVD-2017-2981

Malware in sbrugna...

EUVD-2014-9658

Malware in sbrugna...

EUVD-2017-2377

Malware in sbrugna...

EUVD-2021-16002

Malware in sbrugna...

EUVD-2006-3457

Malware in sbrugna...

EUVD-2017-18082

Malware in sbrugna...

EUVD-2017-2385

Malware in sbrugna...

EUVD-2021-15996

Malware in sbrugna...

EUVD-2017-2387

Malware in sbrugna...

EUVD-2021-15998

Malware in sbrugna...

EUVD-2021-0182

Malware in sbrugna...

EUVD-2017-2393

Malware in sbrugna...

EUVD-2017-2408

Malware in sbrugna...

EUVD-2021-15999

Malware in sbrugna...

OSV-2025-818 Heap-buffer-overflow in std::__1::pair<int, arrow::util::RleBitPackedParser::ControlFlow> arrow::util::R

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=449498800 Crash type: Heap-buffer-overflow READ 1 Crash state: std::1::pair arrow::util::R arrow::util::RleBitPackedDecoder::GetBatch auto parquet::DictByteArrayDecoderImpl::DecodeArrowDense...

UBUNTU-CVE-2025-59731

When decoding an OpenEXR file that uses DWAA or DWAB compression, the specified raw length of run-length-encoded data is not checked when using it to calculate the output data. We read rlerawsize from the input file at 0, we decompress and decode into the buffer td-rlerawdata of size rlerawsize a...

EUVD-2025-32516

When decoding an OpenEXR file that uses DWAA or DWAB compression, the specified raw length of run-length-encoded data is not checked when using it to calculate the output data. We read rlerawsize from the input file at 0, we decompress and decode into the buffer td-rlerawdata of size rlerawsize a...

CVE-2025-59731

OpenEXR/FFmpeg CVE-2025-59731 describes a vulnerability in DWAA/DWAB run-length decoding where the rle_raw_size is not checked when calculating output data. The decoder reads rle_raw_size, decompresses into td-&gt;rle_raw_data, and may access entries up to (td-&gt;xsize-1)*(td-&gt;ysize-1) + rle_...