GHSA-JV72-59WQ-8RXM libxmljs has segmentation fault, potentially leading to a denial-of-service (DoS)

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal ref property on entityref and entitydecl nodes causes a segmentation fault, potentially leading to a denial-of-service DoS...

NULL Pointer Dereference

Overview libxmljs is a libxml bindings for v8 javascript engine Affected versions of this package are vulnerable to NULL Pointer Dereference in the parsing process of specially crafted XML documents when accessing the ref property on entityref and entitydecl nodes. An attacker can cause a...

libxmljs has segmentation fault, potentially leading to a denial-of-service (DoS)

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal ref property on entityref and entitydecl nodes causes a segmentation fault, potentially leading to a denial-of-service DoS...

CVE-2025-25341

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal ref property on entityref and entitydecl nodes causes a segmentation fault, potentially leading to a denial-of-service DoS...

boost:boost_regex_pattern_fuzzer: Segv on unknown address in boost::re_detail_600::basic_regex_creator<char, boost::regex_traits<char, boost:

Detailed Report: https://oss-fuzz.com/testcase?key=4900718306983936 Project: boost Fuzzing Engine: honggfuzz Fuzz Target: boostregexpatternfuzzer Job Type: honggfuzzasanboost Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

CVE-2025-25341

The libxmljs library (specifically version 1.0.11 ) contains a NULL Pointer Dereference vulnerability during the parsing of specially crafted XML documents. The root cause is improper handling of the internal _ref property on entity_ref and entity_decl nodes, which can trigger a segmentation faul...

PT-2025-53592

Name of the Vulnerable Software and Affected Versions libxmljs version 1.0.11 Description A flaw exists in libxmljs when processing a specifically designed XML document. Accessing the internal ref property on entity ref and entity decl nodes can result in a segmentation fault, potentially causing...

CVE-2025-25341: Uncontrolled Resource Consumption

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal ref property on entityref and entitydecl nodes causes a segmentation fault, potentially leading to a denial-of-service DoS...

EUVD-2025-205443

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal ref property on entityref and entitydecl nodes causes a segmentation fault, potentially leading to a denial-of-service DoS...

CVE-2025-25341

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal ref property on entityref and entitydecl nodes causes a segmentation fault, potentially leading to a denial-of-service DoS...

CVE-2025-25341

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal ref property on entityref and entitydecl nodes causes a segmentation fault, potentially leading to a denial-of-service DoS...

CVE-2025-25341

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal ref property on entityref and entitydecl nodes causes a segmentation fault, potentially leading to a denial-of-service DoS...

shaderc:glslc_fuzzer: Segv on unknown address in glslang::TIntermediate::getOffset

Project: https://github.com/google/shaderc.git Detailed Report: https://oss-fuzz.com/testcase?key=6612748441288704 Project: shaderc Fuzzing Engine: libFuzzer Fuzz Target: glslcfuzzer Job Type: libfuzzerasanshaderc Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

hoextdown:hoedown_fuzzer: Segv on unknown address in hoedown_autolink__url

Project: https://github.com/kjdev/hoextdown.git Detailed Report: https://oss-fuzz.com/testcase?key=6536491968036864 Project: hoextdown Fuzzing Engine: afl Fuzz Target: hoedownfuzzer Job Type: aflasanhoextdown Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

shaderc:shaderc_fuzzer: Segv on unknown address in glslang::TPpContext::tokenPaste

Project: https://github.com/google/shaderc.git Detailed Report: https://oss-fuzz.com/testcase?key=6557868020269056 Project: shaderc Fuzzing Engine: libFuzzer Fuzz Target: shadercfuzzer Job Type: libfuzzerasanshaderc Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State...

CVE-2025-68229

In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcmloop: Fix segfault in tcmlooptpgaddressshow If the allocation of tlhba-sh fails in tcmloopdriverprobe and we attempt to dereference it in tcmlooptpgaddressshow we will get a segfault, see below for an example. So...

CVE-2025-67901

openrsync through 0.5.0, as used in OpenBSD through 7.8 and on other platforms, allows a client to cause a server SIGSEGV by specifying a length of zero for block data, because the relationship between p-rem and p-len is not checked...

PT-2025-51180

openrsync through 0.5.0, as used in OpenBSD through 7.8 and on other platforms, allows a client to cause a server SIGSEGV by specifying a length of zero for block data, because the relationship between p-rem and p-len is not checked...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the parsing process of DICOM files containing encapsulated PixelData fragments. An attacker can cause a segmentation fault and an application crash by supplying a crafted malicious DICOM file. Remediation Upgrade...

CVE-2025-11266

An out-of-bounds write vulnerability exists in the Grassroots DICOM library GDCM. The issue is triggered during parsing of a malformed DICOM file containing encapsulated PixelData fragments compressed image data stored as multiple fragments. This vulnerability leads to a segmentation fault caused...