AZL-73195 CVE-2025-14177 affecting package php for versions less than 8.3.29-1

In PHP versions:8.1. before 8.1.34, 8.2. before 8.2.30, 8.3. before 8.3.29, 8.4. before 8.4.16, 8.5. before 8.5.1, the getimagesize function may leak uninitialized heap memory into the APPn segments e.g., APP1 when reading images in multi-chunk mode such as via php://filter. This occurs due to a...

CVE-2025-14177 Information Leak of Memory in getimagesize

In PHP versions:8.1. before 8.1.34, 8.2. before 8.2.30, 8.3. before 8.3.29, 8.4. before 8.4.16, 8.5. before 8.5.1, the getimagesize function may leak uninitialized heap memory into the APPn segments e.g., APP1 when reading images in multi-chunk mode such as via php://filter. This occurs due to a...

CVE-2025-14177

Summary: CVE-2025-14177 affects PHP’s getimagesize() when reading multi-chunk images (e.g., via php://filter). Root cause is in php_read_stream_all_chunks() which overwrites the buffer without advancing the pointer, leaking uninitialized heap data and potentially exposing confidential information...

openSUSE 15: libpython3_9-1_0 / libpython3_9-1_0-32bit / python39 / etc (SUSE-SU-2025:4522-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4522-1 advisory. - CVE-2025-12084: quadratic complexity when building nested elements using xml.dom.minidom methods that depend on clearidcache can lead to availabili...

CVE-2023-54156

In the Linux kernel, the following vulnerability has been resolved: sfc: fix crash when reading stats while NIC is resetting efxnetstats .ndogetstats64 can be called during an ethtool selftest, during which time nicdata-mcstats is NULL as the NIC has been fini'd. In this case do not attempt to...

CVE-2025-26379: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Use of a weak pseudo-random number generator, which may allow an attacker to read or inject encrypted PowerG packets...

Takes 安全漏洞

Takes is an object-oriented Java web development framework by the individual developer Yegor Bugayenko. A security vulnerability exists in Takes 2.0-SNAPSHOT and earlier versions, which stems from an un-normalized HTTP request path that could lead to arbitrary file reading...

PT-2025-52223

Use of Hard-coded Credentials vulnerability in Utarit Information Services Inc. SoliClub allows Read Sensitive Constants Within an Executable.This issue affects SoliClub: from 5.2.4 before 5.3.7...

The vulnerability of the Adobe DNG Software Development Kit’s file reading and writing software lies in buffer overflow attacks in dynamic memory, allowing attackers to compromise the confidentiality and accessibility of protected information.

The vulnerability of the Adobe DNG Software Development Kit’s file reading and writing software lies in buffer overflow attacks in dynamic memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and accessibility of protected information...

The vulnerability of the Adobe DNG Software Development Kit’s file reading and writing software lies in its integer overflow vulnerabilities, which allow attackers to execute arbitrary code.

The vulnerability of the Adobe DNG Software Development Kit’s file reading and writing software is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the server’s kernel in Oracle WebLogic Server allows a hacker to gain read access to data.

The vulnerability of the Oracle WebLogic Server application’s kernel is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to gain read access to data...

The vulnerability of the efivarfs component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the efivarfs component in the Linux operating system is related to reading data beyond the allowed limits of the data buffer. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the fs/f2fs/f2fs.h component in the Linux operating system allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the fs/f2fs/f2fs.h component in the Linux operating system is related to reading data from buffer files beyond the allowed limits. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

Component vulnerability warning. Include the Linux operating system kernels, allowing the attacker to trigger a service failure.

Vulnerability of the component warning. The kernels of the Linux operating system are vulnerable due to excessive data buffer reading. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the Linux operating system’s kernel, related to reading beyond the buffer data boundary, allows an attacker to access confidential data and also cause a service failure.

The vulnerability of the Linux operating system’s kernel is related to reading data from beyond the allowed buffer limits. Exploiting this vulnerability allows an attacker to access confidential data and also cause service failures...

The vulnerability of the Linux operating system’s kernel tracing component, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s kernel trace component is related to reading data beyond the acceptable buffer size. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the uvcvideo component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the uvcvideo component in the Linux operating system is related to reading data from beyond the allowed buffer limits. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the iio/imu/bno055/bno055.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the iio/imu/bno055/bno055.c component in the Linux operating system is related to reading data from beyond the allowed buffer size. Exploiting this vulnerability allows an attacker to cause a service failure...

PT-2025-51175

Name of the Vulnerable Software and Affected Versions MJML versions through 4.18.0 Description The software contains a directory traversal flaw within the mj-include functionality. This allows an attacker to check for the existence of files and, in cases where the type is set to "css", read files...

The vulnerability of the ext4_ext_binsearch_idx function in the lwext4 library allows a hacker to cause a service failure.

The vulnerability of the ext4extbinsearchidx function in the lwext4 library, related to reading beyond the array when processing damaged metadata of extent trees, occurs during the analysis of a specially crafted ext4 image. Exploitation of this vulnerability could allow an attacker to cause...