CVE-2025-53618

An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to an information leak. An attacker can provide a malicious file to trigger this vulnerability.The function grayscaleconvert is called base...

CVE-2025-48429

An out-of-bounds read vulnerability exists in the RLECodec::DecodeByStreams functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to leaking heap data. An attacker can provide a malicious file to trigger this vulnerability...

EUVD-2025-203691

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/hdmi: Fix breakage at probing nvhdmi-mcp driver After restructuring and splitting the HDMI codec driver code, each HDMI codec driver contains the own buildcontrols and buildpcms ops. A copy-n-paste error put the wrong...

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.telosforge:kimaira-util-webclient (1.2.6) +2844 more potentially affected by CVE-2025-67735 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.7.final)

io.netty:netty-codec-http MAVEN version =4.2.0.alpha1, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.10.6 and more Source cves: CVE-2025-67735 Source advisory: MEND:CVE-2025-67735...

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +42175 more potentially affected by CVE-2025-67735 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.128.final)

io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =0.0.1, =1.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.6.0 - ai.ancf.lmos:lmos-router-hybrid 0.1.0 - ai.ancf.lmos:lmos-router-hybrid-spring-boot-starter 0.1.0 and more Source cves: CVE-2025-67735...

PT-2025-51788

Name of the Vulnerable Software and Affected Versions Grassroot DICOM version 3.024 Description An out-of-bounds read issue exists in the JPEGBITSCodec::InternalCode functionality. A crafted DICOM file can cause an information leak. An attacker can trigger this by providing a malicious file. The...

PT-2025-51787

Name of the Vulnerable Software and Affected Versions Grassroot DICOM version 3.024 Description An out-of-bounds read issue exists in the JPEGBITSCodec::InternalCode functionality. A specially crafted DICOM file can cause an information leak. An attacker can trigger this by providing a malicious...

Grassroot DICOM JPEGBITSCodec::InternalCode out-of-bounds read vulnerability

Talos Vulnerability Report TALOS-2025-2210 Grassroot DICOM JPEGBITSCodec::InternalCode out-of-bounds read vulnerability December 16, 2025 CVE Number CVE-2025-53619,CVE-2025-53618 SUMMARY An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM...

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +42175 more potentially affected by CVE-2025-67735 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.128.final)

io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =0.0.1, =1.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.6.0 - ai.ancf.lmos:lmos-router-hybrid 0.1.0 - ai.ancf.lmos:lmos-router-hybrid-spring-boot-starter 0.1.0 and more Source cves: CVE-2025-67735...

CRLF Injection

Overview io.netty:netty-codec-http is a network application framework for rapid development of maintainable high performance protocol servers & clients. Affected versions of this package are vulnerable to CRLF Injection in HttpRequestEncoder, due to improper sanitization of a URI with line-breaks...

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +42175 more potentially affected by CVE-2025-67735 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.128.final)

io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =0.0.1, =1.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.6.0 - ai.ancf.lmos:lmos-router-hybrid 0.1.0 - ai.ancf.lmos:lmos-router-hybrid-spring-boot-starter 0.1.0 and more Source cves: CVE-2025-67735...

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.telosforge:kimaira-util-webclient (1.2.6) +2844 more potentially affected by CVE-2025-67735 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.7.final)

io.netty:netty-codec-http MAVEN version =4.2.0.alpha1, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.10.6 and more Source cves: CVE-2025-67735 Source advisory: SNYK:JAVA-IONETTY-14423947...

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.telosforge:kimaira-util-webclient (1.2.6) +2844 more potentially affected by CVE-2025-67735 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.7.final)

io.netty:netty-codec-http MAVEN version =4.2.0.alpha1, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.10.6 and more Source cves: CVE-2025-67735 Source advisory: OSV:GHSA-84H7-RJJ3-6JX4...

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.telosforge:kimaira-util-webclient (1.2.6) +2844 more potentially affected by CVE-2025-67735 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.7.final)

io.netty:netty-codec-http MAVEN version =4.2.0.alpha1, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.10.6 and more Source cves: CVE-2025-67735 Source advisory: GHSA-84H7-RJJ3-6JX4...

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +42175 more potentially affected by CVE-2025-67735 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.128.final)

io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =0.0.1, =1.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.6.0 - ai.ancf.lmos:lmos-router-hybrid 0.1.0 - ai.ancf.lmos:lmos-router-hybrid-spring-boot-starter 0.1.0 and more Source cves: CVE-2025-67735...

DoS (Denial of Service) io.netty:netty-codec-http2 Dependency in Bamboo Data Center and Server

This High severity DoS Denial of Service vulnerability was introduced in versions 9.6.1, 10.2.0 of Bamboo Data Center and Server. This DoS Denial of Service vulnerability, with a CVSS Score of 8.2 and a CVSS Vector of: code:java...

[SECURITY] [DLA 4402-1] libsndfile security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4402-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès December 11, 2025 https://wiki.debian.org/LTS -...

CVE-2023-53842

A resource leak was found in the WCD MBHC v2 audio codec driver in the Linux kernel. MBHC resources are not properly released on component probe failure or removal, causing interrupt request failures and preventing successful reprobing of the codec component. This leads to sound card initializati...

Linux Distros Unpatched Vulnerability : CVE-2023-53842

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove The MBHC resources must be released on component probe failure and removal so can not be tied ...

Security Bulletin: IBM® Db2® federated Server is vulnerable to sensitive information disclosure under specific conditions (PRISMA-2021-0055)

Summary IBM® Db2® federated Server is affected by a vulnerability in Apache Commons Codec that could allow a remote attacker to obtain sensitive information, caused by the improper validation of input. An attacker could exploit this vulnerability using a method call to obtain sensitive informatio...