libheif Heap Buffer Overflow DoS

The vulnerability of the ImageItemGrid::getdecoder function in the image-items/grid.cc component, which is responsible for decoding and encoding file formats for the libheif library, stems from the use of a null pointer. Exploiting this vulnerability could allow an attacker to execute arbitrary...

Siemens SIMATIC S7-1500 Premature Release of Resource During Expected Lifetime (CVE-2025-31115)

The threaded .xz decoder in liblzma has a vulnerability that can at least result in a crash denial of service. The effects include heap use after free and writing to an address based on the null pointer plus an offset. This plugin only works with Tenable.ot. Please visit...

Siemens SIMATIC S7-1500 Inefficient Algorithmic Complexity (CVE-2022-45061)

An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA RFC 3490 decoder, such that a crafted, unreasonably long name being presented to the decoder could lead to a CPU denial of service. Hostnames are often...

EulerOS 2.0 SP12 : gdk-pixbuf2 (EulerOS-SA-2025-2322)

According to the versions of the gdk-pixbuf2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the GIF parser of GdkPixbufs LZW decoder. When an invalid symbol is encountered during decompression, the decoder sets th...

Huawei EulerOS: Security Advisory for gdk-pixbuf2 (EulerOS-SA-2025-2353)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CLSA-2025-1762868093 grafana-pcp: Fix of CVE-2024-34156

rebuild with golang = 1.22.5-1.el92.tuxcare.els7 - CVE-2024-34156: fix stack exhaustion in Decoder.Decode in golang...

graphicsmagick:coder_AVIF_fuzzer: Use-of-uninitialized-value in Decoder_VVC::get_coded_image_colorspace

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6097828293443584 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderAVIFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

PT-2026-25794

Name of the Vulnerable Software and Affected Versions FFmpeg versions 8.0 and 8.0.1 Description An out-of-bounds read issue exists in the RV60 video decoder libavcodec/rv60dec.c of FFmpeg versions 8.0 and 8.0.1. The issue stems from insufficient validation of the quantization parameter qp at line...

EUVD-2025-38295

A flaw was found in FFmpeg’s ALS audio decoder, where it does not properly check for memory allocation failures. This can cause the application to crash when processing certain malformed audio files. While it does not lead to data theft or system control, it can be used to disrupt services and...

CVE-2025-7700

A flaw was found in FFmpeg’s ALS audio decoder, where it does not properly check for memory allocation failures. This can cause the application to crash when processing certain malformed audio files. While it does not lead to data theft or system control, it can be used to disrupt services and...

CVE-2025-7700 Ffmpeg: null pointer dereference in ffmpeg als decoder (libavcodec/alsdec.c)

A flaw was found in FFmpeg’s ALS audio decoder, where it does not properly check for memory allocation failures. This can cause the application to crash when processing certain malformed audio files. While it does not lead to data theft or system control, it can be used to disrupt services and...

CVE-2025-7700

A flaw was found in FFmpeg’s ALS audio decoder, where it does not properly check for memory allocation failures. This can cause the application to crash when processing certain malformed audio files. While it does not lead to data theft or system control, it can be used to disrupt services and...

CVE-2025-7700 Ffmpeg: null pointer dereference in ffmpeg als decoder (libavcodec/alsdec.c)

A flaw was found in FFmpeg’s ALS audio decoder, where it does not properly check for memory allocation failures. This can cause the application to crash when processing certain malformed audio files. While it does not lead to data theft or system control, it can be used to disrupt services and...

CVE-2025-7700

CVE-2025-7700 is a vulnerability in FFmpeg’s ALS audio decoder (libavcodec/alsdec.c): a failure to properly check memory allocation can cause a crash when processing certain malformed audio files. This is described across multiple advisories (Debian DLA-4440, Ubuntu USN-7871-1, Mageia and SUSE ad...

CVE-2025-7700 Ffmpeg: null pointer dereference in ffmpeg als decoder (libavcodec/alsdec.c)

A flaw was found in FFmpeg’s ALS audio decoder, where it does not properly check for memory allocation failures. This can cause the application to crash when processing certain malformed audio files. While it does not lead to data theft or system control, it can be used to disrupt services and...

CVE-2025-7700

A flaw was found in FFmpeg’s ALS audio decoder, where it does not properly check for memory allocation failures. This can cause the application to crash when processing certain malformed audio files. While it does not lead to data theft or system control, it can be used to disrupt services and...

CVE-2025-7700: NULL Pointer Dereference

A flaw was found in FFmpeg’s ALS audio decoder, where it does not properly check for memory allocation failures. This can cause the application to crash when processing certain malformed audio files. While it does not lead to data theft or system control, it can be used to disrupt services and...

SUSE SLES12: ImageMagick-config-6-SUSE / ImageMagick-config-6-upstream / etc (SUSE-SU-2025:3918-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:3918-1 advisory. - CVE-2025-62171: Fixed incomplete fix for integer overflow in BMP Decoder bsc1252282. Tenable has extracted the preceding description block directly...

SUSE SLES15: libavcodec57 / libavformat57 / libavresample-devel / libavresample3 / etc (SUSE-SU-2025:2990-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:2990-1 advisory. - CVE-2025-7700: Fixed NULL Pointer Dereference in FFmpeg ALS Decoder libavcodec/alsdec.c bsc1246790. Tenable has extracted the preceding...

SUSE: Security Advisory (SUSE-SU-2025:2990-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...