JLSEC-2026-221 Integer Overflow in openssl-src

Calls to EVPCipherUpdate, EVPEncryptUpdate and EVPDecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 indicating succes...

CVE-2025-63433

Xtooltech Xtool AnyScan Android Application 4.40.40 and prior uses a hardcoded cryptographic key and IV to decrypt update metadata. The key is stored as a static value within the application's code. An attacker with the ability to intercept network traffic can use this hardcoded key to decrypt,...

Xtool AnyScan App 安全漏洞

Xtool AnyScan App is an automotive diagnostic mobile application from China-based Xtool. A security vulnerability exists in Xtool AnyScan App version 4.40.40 and earlier, which stems from the use of a hard-coded key to decrypt update metadata...

Santesoft Sante PACS Server 安全漏洞

Sante PACS Server is a medical image management software developed for doctors to view CT in their daily consultations and improve the diagnosis rate. A buffer overflow vulnerability exists in the Sante PACS Server WEB service's EVPDecryptUpdate function that handles usernames and passwords, whic...

openssl: integer overflow in CipherUpdate

Calls to EVPCipherUpdate, EVPEncryptUpdate and EVPDecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissible length for an integer on the platform. In such cases the return value from the function call will be 1 indicating succes...

OpenSSL Integer Overflow DoS

The vulnerability of the EVPCipherUpdate, EVPEncryptUpdate, and EVPDecryptUpdate functions in the OpenSSL library for TLS and SSL protocols is related to a numerical overflow condition. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

PT-2016-4061

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.0 Description The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds heap read and crash, by providing a crafted zip file. This is related to the reading of the password i...