RHEL 8 : glib2 (RHSA-2025:14991)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:14991 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in...

RHEL 8 : glib2 (RHSA-2025:14990)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:14990 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in...

Glib: glib: buffer underflow in gvariant parser leads to heap corruption

...

SUSE CVE-2025-14087

A flaw was found in GLib Gnome Lib. This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings...

AZL-72283 CVE-2025-14087 affecting package glib for versions less than 2.78.6-6

A flaw was found in GLib Gnome Lib. This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings...

CVE-2025-14087 Glib: glib: buffer underflow in gvariant parser leads to heap corruption

A flaw was found in GLib Gnome Lib. This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings...

CVE-2025-14087 Glib: glib: buffer underflow in gvariant parser leads to heap corruption

A flaw was found in GLib Gnome Lib. This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings...

CVE-2025-14087

A flaw was found in GLib Gnome Lib. This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings...

CVE-2025-14087

CVE-2025-14087 describes a buffer-underflow in GLib’s GVariant parser that can cause heap corruption, potentially leading to denial of service or remote code execution when processing crafted input strings. The connected advisories pin the vulnerability to GLib (glib2) across multiple packages an...

CVE-2025-14087 Glib: glib: buffer underflow in gvariant parser leads to heap corruption

A flaw was found in GLib Gnome Lib. This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings...

CVE-2025-14087

A flaw was found in GLib Gnome Lib. This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings...

CVE-2025-14087: Integer Overflow or Wraparound

A flaw was found in GLib Gnome Lib. This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings...

Oracle Linux 10 : libtiff (ELSA-2025-20998)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-20998 advisory. 4.6.0-6.1 - Fix buffer underflow in TIFFReadRGBAImageOriented. - Resolves: RHEL-112524 Tenable has extracted the preceding description block directly from the...

libtiff security update

4.0.3-35.0.1 - fix CVE-2025-8176: prevent skipping first line in tiffdither and tiffmedian tools Orabug: 38658716 - fix CVE-2025-8177: buffer overflow thumbnail setrow Orabug: 38658716 - fix CVE-2025-9900: buffer underflow crash in TIFFReadRGBAImageOriented Orabug: 38658716...

PT-2025-52898

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s wifi subsystem, specifically within the rtl818x and rtl8187 drivers. The rtl8187 rx cb function calculates the receive descriptor header address by...

PT-2025-48527

Mbed TLS before 3.6.4 has a PEM parsing one-byte heap-based buffer underflow, in mbedtls pem read buffer and two mbedtls pk parse functions, via untrusted PEM input...

Siemens SIMATIC and SCALANCE Buffer Underflow (CVE-2025-4373)

GLib is vulnerable to an integer overflow in the gstringinsertunichar function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot...

compat-libtiff3 security update

3.9.4-12.0.1 - Fixes CVE-2025-9900 buffer underflow Orabug: 38523840...

libtiff security update

4.0.9-35 - fix CVE-2025-9900: buffer underflow crash in TIFFReadRGBAImageOriented RHEL-112533...

Oracle Linux 7 : compat-libtiff3 (ELSA-2025-17710)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-17710 advisory. 3.9.4-12.0.1 - Fixes CVE-2025-9900 buffer underflow Orabug: 38523840 Tenable has extracted the preceding description block directly from the Oracle Linux...