JLSEC-2025-114 `dwa_uncompress` in `libavcodec/exr.c` in FFmpeg 4.4 allows an out-of-bounds array access because...

dwauncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because dccount is not strictly checked...

envoy:h2_capture_direct_response_persistent_fuzz_test: Heap-use-after-free in Envoy::Http::ConnectionManagerImpl::resetAllStreams

Detailed Report: https://oss-fuzz.com/testcase?key=5145983787794432 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: h2capturedirectresponsepersistentfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x51500009d2c8 Crash State:...

ClickHouse Security Breach

ClickHouse is ClickHouse's fastest and most resource-efficient open source database for real-time applications and analytics. A security vulnerability exists in ClickHouse that originates from an attacker being able to send a specially crafted payload to the publicly available native interface on...

Microsoft Windows Multiple Vulnerabilities (KB5001347)

This host is missing a critical security update according to Microsoft KB5001347 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

wild copy-exploits-vulnerability warning-the black bar safety net

0x00 Preface This is Project Zero on the articles, the original text of the Taming the wild copy: Parallel Thread Corruption of Links: http://googleprojectzero.blogspot.com/2015/03/taming-wild-copy-parallel-thread.html 2 0 0 2 year, Apache Web serverfound and fixed a very fun bug. The server...