640 matches found
MAL-2025-15341 Malicious code in balance-chi-decompress-chi-code (npm)
The package balance-chi-decompress-chi-code was found to contain malicious code...
MAL-2025-17248 Malicious code in code-file-decompress-decompress-byte (npm)
The package code-file-decompress-decompress-byte was found to contain malicious code...
MAL-2025-15611 Malicious code in beta-decompress-daemon-minify-simple (npm)
The package beta-decompress-daemon-minify-simple was found to contain malicious code...
Malicious code in try-refactor-yaml-decompress-phi (npm)
The package try-refactor-yaml-decompress-phi was found to contain malicious code...
Malicious code in balance-chi-decompress-chi-code (npm)
The package balance-chi-decompress-chi-code was found to contain malicious code...
Malicious code in code-file-decompress-decompress-byte (npm)
The package code-file-decompress-decompress-byte was found to contain malicious code...
Malicious code in simple-zero-shell-zeta-decompress (npm)
The package simple-zero-shell-zeta-decompress was found to contain malicious code...
MAL-2025-23083 Malicious code in import-cron-test-decompress-log (npm)
The package import-cron-test-decompress-log was found to contain malicious code...
CVE-2025-55197
pypdf is a free and open-source pure-python PDF library. Prior to version 6.0.0, an attacker can craft a PDF which leads to the RAM being exhausted. This requires just reading the file if a series of FlateDecode filters is used on a malicious cross-reference stream. Other content streams are...
CVE-2025-55197 pypdf's Manipulated FlateDecode streams can exhaust RAM
pypdf is a free and open-source pure-python PDF library. Prior to version 6.0.0, an attacker can craft a PDF which leads to the RAM being exhausted. This requires just reading the file if a series of FlateDecode filters is used on a malicious cross-reference stream. Other content streams are...
CVE-2025-55197
The CVE-2025-55197 issue affects pypdf prior to version 6.0.0, where a crafted PDF using a sequence of FlateDecode filters in a malicious cross-reference stream can exhaust RAM (DoS). Other content streams may be affected on explicit access. The vulnerability has been fixed in 6.0.0. A workaround...
PyPDF's Manipulated FlateDecode streams can exhaust RAM
Impact An attacker who uses this vulnerability can craft a PDF which leads to the RAM being exhausted. This requires just reading the file if a series of FlateDecode filters is used on a malicious cross-reference stream. Other content streams are affected on explicit access. Patches This has been...
GHSA-7HFW-26VP-JP8M PyPDF's Manipulated FlateDecode streams can exhaust RAM
Impact An attacker who uses this vulnerability can craft a PDF which leads to the RAM being exhausted. This requires just reading the file if a series of FlateDecode filters is used on a malicious cross-reference stream. Other content streams are affected on explicit access. Patches This has been...
SUSE CVE-2025-48172
CHMLib through 2bef8d0, as used in SumatraPDF and other products, has a chmlib.c chmdecompressblock integer overflow. There is a resultant heap-based buffer overflow in chmfetchbytes...
UBUNTU-CVE-2025-48172
CHMLib through 2bef8d0, as used in SumatraPDF and other products, has a chmlib.c chmdecompressblock integer overflow. There is a resultant heap-based buffer overflow in chmfetchbytes...
The vulnerability of the decompress_chunk() function in the fs/ntfs3/lznt.c file of the Linux kernel’s file system ntfs3 allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the decompresschunk function in the fs/ntfs3/lznt.c file of the Linux kernel’s file system ntfs3 is related to reading memory beyond the bounds of the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
DEBIAN-CVE-2022-50193
In the Linux kernel, the following vulnerability has been resolved: erofs: wake up all waiters after zerofslzmahead ready When the user mounts the erofs second times, the decompression thread may hung. The problem happens due to a sequence of steps like the following: 1 Task A called...
The vulnerability of the jffs2_rtime_decompress() function in the fs/jffs2/compr_rtime.c module of the Linux kernel file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the jffs2rtimedecompress function in the fs/jffs2/comprrtime.c module of the Linux kernel operating system is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...
