2630 matches found
CVE-2025-59733
FFmpeg/OpenEXR dwa_uncompress vulnerability (CVE-2025-59733): OpenEXR DWAA/DWAB decoding incorrectly assumes all channels share the same pixel type/size and that four channels map to B, G, R, A. If the main color channels are 4-byte and there are duplicate/unknown channels with 2-byte EXR_HALF, c...
CVE-2025-59733 Heap-buffer-overflow write in FFmpeg EXR dwa_uncompress
When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that all image channels have the same pixel type and size, and that if there are four channels, the first four are "B", "G", "R" and "A". The channel parsing code can be found in decodeheader. The...
CVE-2025-59733 Heap-buffer-overflow write in FFmpeg EXR dwa_uncompress
When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that all image channels have the same pixel type and size, and that if there are four channels, the first four are "B", "G", "R" and "A". The channel parsing code can be found in decodeheader. The...
CVE-2025-59733
When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that all image channels have the same pixel type and size, and that if there are four channels, the first four are "B", "G", "R" and "A". The channel parsing code can be found in decodeheader. The...
CVE-2025-59733 Heap-buffer-overflow write in FFmpeg EXR dwa_uncompress
When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that all image channels have the same pixel type and size, and that if there are four channels, the first four are "B", "G", "R" and "A". The channel parsing code can be found in decodeheader. The...
CVE-2023-53589 wifi: iwlwifi: mvm: don't trust firmware n_channels
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't trust firmware nchannels If the firmware sends us a corrupted MCC response with nchannels much larger than the command response can be, we might copy far too much uninitialized memory and even crash if t...
CVE-2023-53589
CVE-2023-53589 affects the Linux kernel’s wireless stack: the iwlwifi mvm driver may mishandle a corrupted MCC response from firmware if n_channels is larger than the command response can contain. This can lead to copying excessive (uninitialized) memory and, in extreme cases, a crash due to memo...
EUVD-2024-0444
Malicious code in bioql PyPI...
EUVD-2024-2663
Malicious code in bioql PyPI...
EUVD-2025-25418
Malicious code in bioql PyPI...
EUVD-2024-2500
Malicious code in bioql PyPI...
EUVD-2023-2196
Malicious code in bioql PyPI...
EUVD-2024-2667
Malicious code in bioql PyPI...
EUVD-2024-2662
Malicious code in bioql PyPI...
EUVD-2024-53812
Malicious code in bioql PyPI...
EUVD-2025-7204
Malicious code in bioql PyPI...
EUVD-2024-2608
Malicious code in bioql PyPI...
EUVD-2025-18193
Malicious code in bioql PyPI...