Lucene search
+L

994 matches found

Packet Storm
Packet Storm
added 2025/12/19 12:0 a.m.195 views

📄 libtransmission 2.93 Integer Overflow

libtransmission versions 2.93 and below suffer from multiple integer overflows. A remote attacker could create a specially crafted .torrent file which may be small when compressed that exploits these overflows when a victim loads it via Transmission or its command-line interface transmission-cli...

9.8CVSS7AI score0.05609EPSS
Exploits6
Tenable Nessus
Tenable Nessus
added 2025/12/18 12:0 a.m.5 views

SUSE SLED15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2025:4427-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4427-1 advisory. - CVE-2025-65955: possible use-after-free/double-free in Options::fontFamily when clearing a family can lead t...

7.5CVSS5.9AI score0.00456EPSS
Exploits0References7
SUSE Linux
SUSE Linux
added 2025/12/17 11:26 a.m.3 views

Security update for ImageMagick

This update for ImageMagick fixes the following issues: CVE-2025-66628: possible integer overflow in the TIM image parser's ReadTIMImage function can lead to arbitrary memory disclosure on 32-bit systems bsc1254820. Patch Instructions: To install this SUSE update use the SUSE recommended...

8.2CVSS7.1AI score0.00456EPSS
Exploits0References4
OSV
OSV
added 2025/12/17 11:26 a.m.3 views

SUSE-SU-2025:4429-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2025-66628: possible integer overflow in the TIM image parser's ReadTIMImage function can lead to arbitrary memory disclosure on 32-bit systems bsc1254820...

7.5CVSS5.8AI score0.00456EPSS
Exploits0References3
SUSE Linux
SUSE Linux
added 2025/12/17 11:24 a.m.4 views

Security update for ImageMagick

This update for ImageMagick fixes the following issues: CVE-2025-65955: possible use-after-free/double-free in Options::fontFamily when clearing a family can lead to crashes or memory corruption bsc1254435. CVE-2025-66628: possible integer overflow in the TIM image parser's ReadTIMImage function...

8.2CVSS7.2AI score0.00456EPSS
Exploits0References8
Vulnrichment
Vulnrichment
added 2025/12/12 7:57 p.m.4 views

CVE-2024-58311 Dormakaba Saflok System 6000 Key Generation Cryptographic Weakness

Dormakaba Saflok System 6000 contains a predictable key generation algorithm that allows attackers to derive card access keys from a 32-bit unique identifier. Attackers can exploit the deterministic key generation process by calculating valid access keys using a simple mathematical transformation...

9.8CVSS6.5AI score0.00392EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/12/12 7:57 p.m.25 views

CVE-2024-58311 Dormakaba Saflok System 6000 Key Generation Cryptographic Weakness

Dormakaba Saflok System 6000 contains a predictable key generation algorithm that allows attackers to derive card access keys from a 32-bit unique identifier. Attackers can exploit the deterministic key generation process by calculating valid access keys using a simple mathematical transformation...

9.8CVSS0.00392EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2025/12/11 12:47 a.m.11 views

SUSE CVE-2025-7709

An integer overflow exists in the FTS5 https://sqlite.org/fts5.html extension. It occurs when the size of an array of tombstone pointers is calculated and truncated into a 32-bit integer. A pointer to partially controlled data can then be written out of bounds...

5.4CVSS6.8AI score0.00322EPSS
Exploits0References11
OSV
OSV
added 2025/12/10 10:16 p.m.5 views

UBUNTU-CVE-2025-66628

ImageMagick is a software suite to create, edit, compose, or convert bitmap images. In versions 7.1.2-9 and prior, the TIM PSX TIM image parser contains a critical integer overflow vulnerability in its ReadTIMImage function coders/tim.c. The code reads width and height 16-bit values from the file...

7.5CVSS6AI score0.00456EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/12/10 10:4 p.m.47 views

CVE-2025-66628 ImageMagick is vulnerable to an Integer Overflow in TIM decoder leading to out of bounds read (32-bit only)

ImageMagick is a software suite to create, edit, compose, or convert bitmap images. In versions 7.1.2-9 and prior, the TIM PSX TIM image parser contains a critical integer overflow vulnerability in its ReadTIMImage function coders/tim.c. The code reads width and height 16-bit values from the file...

7.5CVSS0.00456EPSS
Exploits0References2
EUVD
EUVD
added 2025/12/10 10:4 p.m.6 views

EUVD-2025-202428

ImageMagick is a software suite to create, edit, compose, or convert bitmap images. In versions 7.1.2-9 and prior, the TIM PSX TIM image parser contains a critical integer overflow vulnerability in its ReadTIMImage function coders/tim.c. The code reads width and height 16-bit values from the file...

7.5CVSS6.8AI score0.00456EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/12/10 10:4 p.m.3 views

CVE-2025-66628 ImageMagick is vulnerable to an Integer Overflow in TIM decoder leading to out of bounds read (32-bit only)

ImageMagick is a software suite to create, edit, compose, or convert bitmap images. In versions 7.1.2-9 and prior, the TIM PSX TIM image parser contains a critical integer overflow vulnerability in its ReadTIMImage function coders/tim.c. The code reads width and height 16-bit values from the file...

7.5CVSS7AI score0.00456EPSS
Exploits0References2
Snyk
Snyk
added 2025/12/10 3:47 p.m.5 views

Out-of-bounds Read

Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.7CVSS6.7AI score0.00456EPSS
Exploits0References2
Microsoft Security Update
Microsoft Security Update
added 2025/12/09 6:0 p.m.32 views

2025-12 Cumulative Update for Windows 10 Version 1809 for x86-based Systems (KB5071544)

2025-12 Cumulative Update for Windows 10 Version 1809 for x86-based Systems KB5071544...

7AI score
Exploits0
OSV
OSV
added 2025/12/09 1:16 a.m.8 views

UBUNTU-CVE-2023-53778

In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Clean up integer overflow checking in mapuserpages The encodedma function has some validation on intrans-size but it would be more clear to move those checks to findandmapuserpages. The encodedma had two checks: if...

5.7AI score0.00162EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2025/12/08 1:16 a.m.9 views

CVE-2022-50623

In the Linux kernel, the following vulnerability has been resolved: fpga: prevent integer overflow in dflfeatureioctlsetirq The "hdr.count sizeofs32" multiplication can overflow on 32 bit systems leading to memory corruption. Use arraysize to fix that...

5.4AI score0.00174EPSS
Exploits0
OSV
OSV
added 2025/12/03 2:53 p.m.7 views

CLSA-2025-1764773600 Fix CVE(s): CVE-2025-62171

SECURITY UPDATE: integer overflow vulnerability in BMP decoder on 32-bit systems - debian/patches/CVE-2025-62171.patch: add extra check to resolve issue on 32-bit systems caused by memory allocation failure - CVE-2025-62171...

7.5CVSS5.9AI score0.00755EPSS
Exploits1References1
SUSE CVE
SUSE CVE
added 2025/12/03 12:24 a.m.4 views

SUSE CVE-2025-34297

KissFFT versions prior to the fix commit 1b083165 contain an integer overflow in kissfftalloc in kissfft.c on platforms where sizet is 32-bit. The nfft parameter is not validated before being used in a size calculation sizeofkissfftcpx nfft - 1, which can wrap to a small value when nfft is large...

8.6CVSS7.5AI score0.00147EPSS
Exploits0References3
OSV
OSV
added 2025/12/01 7:15 p.m.4 views

DEBIAN-CVE-2025-34297

KissFFT versions prior to the fix commit 1b083165 contain an integer overflow in kissfftalloc in kissfft.c on platforms where sizet is 32-bit. The nfft parameter is not validated before being used in a size calculation sizeofkissfftcpx nfft - 1, which can wrap to a small value when nfft is large...

8.6CVSS5.7AI score0.00147EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/01 6:18 p.m.3 views

CVE-2025-34297 KissFFT Integer Overflow Heap Buffer Overflow via kiss_fft_alloc

KissFFT versions prior to the fix commit 1b083165 contain an integer overflow in kissfftalloc in kissfft.c on platforms where sizet is 32-bit. The nfft parameter is not validated before being used in a size calculation sizeofkissfftcpx nfft - 1, which can wrap to a small value when nfft is large...

8.6CVSS7.1AI score0.00147EPSS
Exploits0References3
Rows per page
Query Builder