EUVD-2025-4635

Malicious code in bioql PyPI...

CVE-2025-24947

A hash collision vulnerability in the hash table used to manage connections in LSQUIC aka LiteSpeed QUIC before 4.2.0 allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections with colliding Source Connection IDs SCIDs. This is caused by...

CVE-2025-24947

A hash collision vulnerability in the hash table used to manage connections in LSQUIC aka LiteSpeed QUIC before 4.2.0 allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections with colliding Source Connection IDs SCIDs. This is caused by...

CVE-2025-24947: Inefficient Algorithmic Complexity

A hash collision vulnerability in the hash table used to manage connections in LSQUIC aka LiteSpeed QUIC before 4.2.0 allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections with colliding Source Connection IDs SCIDs. This is caused by...

php:php-fuzz-unserializehash: Heap-buffer-overflow in XXH_memcpy

Detailed Report: https://oss-fuzz.com/testcase?key=5110736479191040 Project: php Fuzzing Engine: afl Fuzz Target: php-fuzz-unserializehash Job Type: aflasanphp Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x603000014d30 Crash State: XXHmemcpy XXHINLINEXXH32update...

php:php-fuzz-unserializehash: Crash in XXH_memcpy

Detailed Report: https://oss-fuzz.com/testcase?key=4922677364129792 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-unserializehash Job Type: libfuzzermsanphp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x70210000c354 Crash State: XXHmemcpy XXHINLINEXXH32update...