PT-2025-28740 · Adobe · Substance3D - Viewer

Name of the Vulnerable Software and Affected Versions: Substance3D Viewer versions 0.22 and earlier Description: The issue is related to a NULL Pointer Dereference that could lead to application denial-of-service. An attacker could exploit this to crash the application and cause disruption in...

LlamaIndex vulnerable to DoS attack through uncontrolled recursive JSON parsing

The JSONReader in run-llama/llamaindex versions 0.12.28 is vulnerable to a stack overflow due to uncontrolled recursive JSON parsing. This vulnerability allows attackers to trigger a Denial of Service DoS by submitting deeply nested JSON structures, leading to a RecursionError and crashing...

CVE-2025-5472

The JSONReader in run-llama/llamaindex versions 0.12.28 is vulnerable to a stack overflow due to uncontrolled recursive JSON parsing. This vulnerability allows attackers to trigger a Denial of Service DoS by submitting deeply nested JSON structures, leading to a RecursionError and crashing...

CVE-2025-5472 Denial of Service via Uncontrolled Recursive JSON Parsing in JSONReader in run-llama/llama_index

The JSONReader in run-llama/llamaindex versions 0.12.28 is vulnerable to a stack overflow due to uncontrolled recursive JSON parsing. This vulnerability allows attackers to trigger a Denial of Service DoS by submitting deeply nested JSON structures, leading to a RecursionError and crashing...

CVE-2025-5472 Denial of Service via Uncontrolled Recursive JSON Parsing in JSONReader in run-llama/llama_index

The JSONReader in run-llama/llamaindex versions 0.12.28 is vulnerable to a stack overflow due to uncontrolled recursive JSON parsing. This vulnerability allows attackers to trigger a Denial of Service DoS by submitting deeply nested JSON structures, leading to a RecursionError and crashing...

webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution

A flaw was found in webkitgtk. The vulnerability occurs due to improper state handling, which can lead to a race condition. An attacker with network access could pass specially crafted web content files causing an application to halt, crash, or may lead to arbitrary code execution...

FreeBSD : gstreamer1-plugins-bad -- stack buffer overflow in H.266 video parser (69bfe2a4-5a39-11f0-8792-4ccc6adda413)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 69bfe2a4-5a39-11f0-8792-4ccc6adda413 advisory. GStreamer Security Center reports: It is possible for a malicious third party to trigger a buffer...

SUSE-SU-2025:02222-1 Security update for libgepub

This update for libgepub fixes the following issues: - CVE-2025-6196: Fixed an integer overflow in the EPUB archive handling code that can leads to massive memory allocation and application crash. bsc1244704...

MongoDB 7.0.x < 7.0.16 / 8.0.x < 8.0.1 Buffer Overflow (SERVER-94461)

The version of MongoDB installed on the remote host is 7.0 prior to 7.0.16 and 8.0 prior to 8.0.1. It is, therefore, affected by a vulnerability as referenced in the SERVER-94461 advisory. - The various bsonappend functions in the MongoDB C driver library may be susceptible to buffer overflow whe...

AlmaLinux 9 : webkit2gtk3 (ALSA-2025:7995)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:7995 advisory. webkitgtk: A malicious website may exfiltrate data cross-origin CVE-2025-31205 webkitgtk: Processing maliciously crafted web content may lead to an...

SUSE SLES15 Security Update : libgepub (SUSE-SU-2025:02213-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:02213-1 advisory. - CVE-2025-6196: Fixed an integer overflow in the EPUB archive handling code that can leads to massive memory allocation and application crash...

SUSE-SU-2025:02213-1 Security update for libgepub

This update for libgepub fixes the following issues: - CVE-2025-6196: Fixed an integer overflow in the EPUB archive handling code that can leads to massive memory allocation and application crash. bsc1244704...

io.quarkus:quarkus-resteasy: Memory Leak in Quarkus RESTEasy Classic When Client Requests Timeout

A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError...

D-Link DIR-619L /formAutoDetecWAN_wizard4 File Stack Buffer Overflow Vulnerability

The D-Link DIR-619L is a wireless router from China-based AUO D-Link. A stack buffer overflow vulnerability exists in the D-Link DIR-619L /formAutoDetecWANwizard4 file due to incorrect boundary checking in the function formAutoDetecWANwizard4 of the file /goform/formAutoDetecWANwizard4 caused. An...

D-Link DIR-619L /formAdvanceSetup File Stack Buffer Overflow Vulnerability

The D-Link DIR-619L is a wireless router from China's AUO D-Link. A stack buffer overflow vulnerability exists in the D-Link DIR-619L /formAdvanceSetup file, which is caused by improper boundary checking. An attacker could exploit this vulnerability to cause a buffer overflow, execute arbitrary...

D-Link DIR-619L Stack Buffer Overflow Vulnerability

The D-Link DIR-619L is a wireless router from China-based AUO D-Link. The D-Link DIR-619L suffers from a stack buffer overflow vulnerability caused by incorrect boundary checking in function formSetWANWisard51 in file /goform/formSetWANWizard51. An attacker could exploit this vulnerability to cau...

gstreamer1-plugins-bad -- stack buffer overflow in H.266 video parser

GStreamer Security Center reports: It is possible for a malicious third party to trigger a buffer overflow that can result in a crash of the application and possibly also allow code execution through stack manipulation...

D-Link DIR-619L 安全漏洞

The D-Link DIR-619L is a wireless router from China-based AUO D-Link. A stack buffer overflow vulnerability exists in the D-Link DIR-619L /formAutoDetecWANwizard4 file due to incorrect boundary checking in the function formAutoDetecWANwizard4 of the file /goform/formAutoDetecWANwizard4 caused. An...

Google Chrome Integer Overflow Vulnerability

Google Chrome is a popular web browser. Google Chrome suffers from an integer overflow vulnerability that stems from improper handling of integer values, which can be exploited by an attacker to submit a special WEB request that can be tricked into being parsed by the user, crashing the applicati...

CVE-2025-49014

A flaw was found in jq. The fstrflocaltime function in builtin.c contains a heap use-after-free vulnerability, which can allow a local attacker to trigger a crash by providing a specially crafted input. This condition arises from the use of freed memory, leading to unpredictable program behavior...