ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +32579 more potentially affected by CVE-2025-58057 via io.netty:netty-codec-http2 (>=4.1.0.beta4, <=4.1.124.final)

io.netty:netty-codec-http2 MAVEN version =4.1.0.beta4, =0.0.1, =1.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.6.0 - ai.ancf.lmos:lmos-router-hybrid 0.1.0 - ai.ancf.lmos:lmos-router-hybrid-spring-boot-starter 0.1.0 and more Source cves: CVE-2025-58057...

app.fmgp:did-framework_3 (>=0.1.0-m26, <=0.1.0-m35), app.fmgp:did-method-prism_3 (>=0.1.0-m26, <=0.1.0-m35) +2021 more potentially affected by CVE-2025-58057 via io.netty:netty-codec-compression (>=4.2.0.alpha3, <=4.2.4.final)

io.netty:netty-codec-compression MAVEN version =4.2.0.alpha3, =0.1.0-m26, =0.1.0-m26, =1.0.5, =25.4.0, =25.4.0, =4.0.0-beta.1, =4.0.0-beta.5 - cn.hserver:hserver-plugin-beetlsql 3.7.0 - cn.hserver:hserver-plugin-cloud 3.7.0 - cn.hserver:hserver-plugin-druid 3.7.0 - cn.hserver:hserver-plugin-fores...

media: mtk-vcodec: potential null pointer deference in SCP

...

app.fmgp:did-framework_3 (>=0.1.0-m26, <=0.1.0-m35), app.fmgp:did-method-prism_3 (>=0.1.0-m26, <=0.1.0-m35) +1460 more potentially affected by CVE-2025-58057 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.4.final)

io.netty:netty-codec-http MAVEN version =4.2.0.alpha1, =0.1.0-m26, =0.1.0-m26, =1.0.5, =25.4.0, =25.4.0, =4.0.0-beta.1, =4.0.0-beta.5 - cn.hserver:hserver-plugin-beetlsql 3.7.0 - cn.hserver:hserver-plugin-cloud 3.7.0 - cn.hserver:hserver-plugin-druid 3.7.0 - cn.hserver:hserver-plugin-forest 3.7.0...

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +32579 more potentially affected by CVE-2025-58057 via io.netty:netty-codec-http2 (>=4.1.0.beta4, <=4.1.124.final)

io.netty:netty-codec-http2 MAVEN version =4.1.0.beta4, =0.0.1, =1.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.6.0 - ai.ancf.lmos:lmos-router-hybrid 0.1.0 - ai.ancf.lmos:lmos-router-hybrid-spring-boot-starter 0.1.0 and more Source cves: CVE-2025-58057...

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +41443 more potentially affected by CVE-2025-58057 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.124.final)

io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =0.0.1, =1.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.6.0 - ai.ancf.lmos:lmos-router-hybrid 0.1.0 - ai.ancf.lmos:lmos-router-hybrid-spring-boot-starter 0.1.0 and more Source cves: CVE-2025-58057...

CVE-2025-58057

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In netty-codec-compression versions 4.1.124.Final and below, and netty-codec versions 4.2.4.Final and below, when supplied with specially crafted...

app.fmgp:did-framework_3 (>=0.1.0-m26, <=0.1.0-m35), app.fmgp:did-method-prism_3 (>=0.1.0-m26, <=0.1.0-m35) +2021 more potentially affected by CVE-2025-58057 via io.netty:netty-codec-compression (>=4.2.0.alpha3, <=4.2.4.final)

io.netty:netty-codec-compression MAVEN version =4.2.0.alpha3, =0.1.0-m26, =0.1.0-m26, =1.0.5, =25.4.0, =25.4.0, =4.0.0-beta.1, =4.0.0-beta.5 - cn.hserver:hserver-plugin-beetlsql 3.7.0 - cn.hserver:hserver-plugin-cloud 3.7.0 - cn.hserver:hserver-plugin-druid 3.7.0 - cn.hserver:hserver-plugin-fores...

at.aimit.mariella:persistence-kotlin (>=1.0.5, <=1.0.15), cloud.piranha.http:piranha-http-netty (>=25.4.0, <=25.6.0) +1248 more potentially affected by CVE-2025-58057 via io.netty:netty-codec-http2 (>=4.2.0.alpha1, <=4.2.4.final)

io.netty:netty-codec-http2 MAVEN version =4.2.0.alpha1, =1.0.5, =25.4.0, =25.4.0, =25.6.0 - cn.hserver:hserver 3.7.0 - cn.hserver:hserver-netty-web 4.0.0-beta.3 - cn.hserver:hserver-plugin-beetlsql 3.7.0 - cn.hserver:hserver-plugin-cloud 3.7.0 - cn.hserver:hserver-plugin-druid 3.7.0 -...

app.fmgp:did-framework_3 (>=0.1.0-m26, <=0.1.0-m35), app.fmgp:did-method-prism_3 (>=0.1.0-m26, <=0.1.0-m35) +1460 more potentially affected by CVE-2025-58056 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.4.final)

io.netty:netty-codec-http MAVEN version =4.2.0.alpha1, =0.1.0-m26, =0.1.0-m26, =1.0.5, =25.4.0, =25.4.0, =4.0.0-beta.1, =4.0.0-beta.5 - cn.hserver:hserver-plugin-beetlsql 3.7.0 - cn.hserver:hserver-plugin-cloud 3.7.0 - cn.hserver:hserver-plugin-druid 3.7.0 - cn.hserver:hserver-plugin-forest 3.7.0...

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +41443 more potentially affected by CVE-2025-58056 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.124.final)

io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =0.0.1, =1.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.6.0 - ai.ancf.lmos:lmos-router-hybrid 0.1.0 - ai.ancf.lmos:lmos-router-hybrid-spring-boot-starter 0.1.0 and more Source cves: CVE-2025-58056...

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +41443 more potentially affected by CVE-2025-58056 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.124.final)

io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =0.0.1, =1.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.6.0 - ai.ancf.lmos:lmos-router-hybrid 0.1.0 - ai.ancf.lmos:lmos-router-hybrid-spring-boot-starter 0.1.0 and more Source cves: CVE-2025-58056...

app.fmgp:did-framework_3 (>=0.1.0-m26, <=0.1.0-m35), app.fmgp:did-method-prism_3 (>=0.1.0-m26, <=0.1.0-m35) +1460 more potentially affected by CVE-2025-58056 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.4.final)

io.netty:netty-codec-http MAVEN version =4.2.0.alpha1, =0.1.0-m26, =0.1.0-m26, =1.0.5, =25.4.0, =25.4.0, =4.0.0-beta.1, =4.0.0-beta.5 - cn.hserver:hserver-plugin-beetlsql 3.7.0 - cn.hserver:hserver-plugin-cloud 3.7.0 - cn.hserver:hserver-plugin-druid 3.7.0 - cn.hserver:hserver-plugin-forest 3.7.0...

app.fmgp:did-framework_3 (>=0.1.0-m26, <=0.1.0-m35), app.fmgp:did-method-prism_3 (>=0.1.0-m26, <=0.1.0-m35) +2021 more potentially affected by CVE-2025-58057 via io.netty:netty-codec-compression (>=4.2.0.alpha3, <=4.2.4.final)

io.netty:netty-codec-compression MAVEN version =4.2.0.alpha3, =0.1.0-m26, =0.1.0-m26, =1.0.5, =25.4.0, =25.4.0, =4.0.0-beta.1, =4.0.0-beta.5 - cn.hserver:hserver-plugin-beetlsql 3.7.0 - cn.hserver:hserver-plugin-cloud 3.7.0 - cn.hserver:hserver-plugin-druid 3.7.0 - cn.hserver:hserver-plugin-fores...

app.fmgp:did-framework_3 (>=0.1.0-m26, <=0.1.0-m35), app.fmgp:did-method-prism_3 (>=0.1.0-m26, <=0.1.0-m35) +2021 more potentially affected by CVE-2025-58057 via io.netty:netty-codec-compression (>=4.2.0.alpha3, <=4.2.4.final)

io.netty:netty-codec-compression MAVEN version =4.2.0.alpha3, =0.1.0-m26, =0.1.0-m26, =1.0.5, =25.4.0, =25.4.0, =4.0.0-beta.1, =4.0.0-beta.5 - cn.hserver:hserver-plugin-beetlsql 3.7.0 - cn.hserver:hserver-plugin-cloud 3.7.0 - cn.hserver:hserver-plugin-druid 3.7.0 - cn.hserver:hserver-plugin-fores...

CVE-2025-26416

In initializeSwizzler of SkBmpStandardCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-26416

A heap buffer overflow exists in the initializeSwizzler function of SkBmpStandardCodec.cpp within the Skia graphics library. This vulnerability allows for an out of bounds write , which could lead to remote escalation of privilege without requiring additional execution privileges or user interact...

CVE-2025-26416

In initializeSwizzler of SkBmpStandardCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-26416

In initializeSwizzler of SkBmpStandardCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ffmpeg:ffmpeg_AV_CODEC_ID_THP_fuzzer: Heap-buffer-overflow in av_vbprintf

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6106885091819520 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDTHPfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow...