CLSA-2025-1759420505 Fix CVE(s): CVE-2025-55212

SECURITY UPDATE: denial of Service vulnerability due to zero dimensions crash - debian/patches/CVE-2025-55212.patch: Fix invalid width or height checks in ThumbnailImage method and add safe reciprocal function to avoid division by zero - CVE-2025-55212...

Medium: GraphicsMagick

Issue Overview: ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits. CVE-2025-27795 ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation, resulting in out-of-bounds access to heap memory in ReadBlob. CVE-2025-27796...

Incorrect Calculation

Overview tensorflow is a machine learning framework. Affected versions of this package are vulnerable to Incorrect Calculation via the Embedding operator that always outputs 0 without XLA when inputdim=1 is set. An attacker can cause the application to produce unpredictable or incorrect outputs b...

Linux Distros Unpatched Vulnerability : CVE-2020-8226

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability exists in phpBB v3.2.10 and v3.3.1 which allowed remote image dimensions check to be used to SSRF. CVE-2020-8226 Note that Nessus relies on the...

PT-2025-35578

Name of the Vulnerable Software and Affected Versions: rust-ffmpeg versions 0.3.0 and later Description: An integer overflow and invalid input issue exists in the cached method, potentially leading to a denial of service or arbitrary code execution. The issue occurs when dimension parameters are...

Adobe Dimension Out-of-Bounds Read Vulnerability (CNVD-2025-24436)

Adobe Dimension is the United States of America Odo than Adobe company is a set of 2D and 3D composite design tools. Adobe Dimension suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to cause a sensitive memory leak...

Linux Distros Unpatched Vulnerability : CVE-2020-6851

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenJPEG through 2.3.1 has a heap-based buffer overflow in opjt1clbldecodeprocessor in openjp2/t1.c because of lack of opjj2kupdateimagedimensions validation...

CVE-2025-54238

Dimension versions 4.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54238

Dimension versions 4.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54238

Dimension versions 4.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54238

Adobe Dimension is affected on versions 4.1.3 and earlier by an out-of-bounds read (CWE-125) that could disclose sensitive memory. The vulnerability requires user interaction (victim opens a malicious file). The issue is addressed by the APSB25-84 security update, which states to upgrade to versi...

CVE-2025-54238 Dimension | Out-of-bounds Read (CWE-125)

Dimension versions 4.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54238 Dimension | Out-of-bounds Read (CWE-125)

Dimension versions 4.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Adobe Dimension < 4.1.4 Memory leak (APSB25-84) (macOS)

The version of Adobe Dimension installed on the remote macOS host is prior to 4.1.4. It is, therefore, affected by a vulnerability as referenced in the APSB25-84 advisory. - Out-of-bounds Read CWE-125 potentially leading to Memory leak CVE-2025-54238 Note that Nessus has not tested for this issue...

Adobe Dimension < 4.1.4 Memory leak (APSB25-84)

The version of Adobe Dimension installed on the remote Windows host is prior to 4.1.4. It is, therefore, affected by a vulnerability as referenced in the APSB25-84 advisory. - Out-of-bounds Read CWE-125 potentially leading to Memory leak CVE-2025-54238 Note that Nessus has not tested for this iss...

Adobe Dimension 缓冲区错误漏洞

Adobe Dimension is the United States of America Odo than Adobe company is a set of 2D and 3D composite design tools. Adobe Dimension suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to cause a sensitive memory leak...

CVE-2025-54238: Out-of-bounds Read

Dimension versions 4.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2025-32953 · Dimension · Dimension

Name of the Vulnerable Software and Affected Versions: Dimension versions 4.1.3 and earlier Description: Dimension versions 4.1.3 and earlier are affected by an out-of-bounds read issue that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction,...

APSB25-84 : Security update available for Adobe Dimension

Adobe has released an update for Adobe Dimension that addresses an important vulnerability that could lead to memory leak...

SUSE CVE-2025-38440

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix race between DIM disable and netdim There's a race between disabling DIM and NAPI callbacks using the dim pointer on the RQ or SQ. If NAPI checks the DIM state bit and sees it still set, it assumes rq-dim or sq-dim...