Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the parseFAR function when processing a PFCP Session Establishment Request containing a CreateFAR with an empty or truncated IPv4 address field. An attacker can cause the service to crash and disrupt user-plane...

CVE-2025-65565

A denial-of-service vulnerability exists in the omec-project UPF pfcpiface component in version upf-epc-pfcpiface:2.1.3-dev. After PFCP association is established, a PFCP Session Establishment Request that is missing the mandatory F-SEID CPF-SEID Information Element is not properly validated. The...

CVE-2025-40892

A Stored Cross-Site Scripting vulnerability was discovered in the Reports functionality due to improper validation of an input parameter. An authenticated user with report privileges can define a malicious report containing a JavaScript payload, or a victim can be socially engineered to import a...

CVE-2025-40892

A Stored Cross-Site Scripting vulnerability was discovered in the Reports functionality due to improper validation of an input parameter. An authenticated user with report privileges can define a malicious report containing a JavaScript payload, or a victim can be socially engineered to import a...

PT-2025-52220

A Stored Cross-Site Scripting vulnerability was discovered in the Reports functionality due to improper validation of an input parameter. An authenticated user with report privileges can define a malicious report containing a JavaScript payload, or a victim can be socially engineered to import a...

PT-2025-52287

Name of the Vulnerable Software and Affected Versions omec-project UPF versions up to 2.1.3-dev Description A denial-of-service issue exists in the UPF component upf-epc/pfcpiface. When the UPF receives a PFCP Association Setup Request lacking the mandatory NodeID Information Element, the...

PT-2025-52313

Name of the Vulnerable Software and Affected Versions Kentico Xperience affected versions not specified Description A denial of service issue exists in Kentico Xperience. Attackers can leverage this to disrupt service availability by sending specially crafted requests to the GetResource handler...

The vulnerability in the cstecgi.cgi script of the Totolink N600R router’s software allows a hacker to induce a service failure.

The vulnerability in the cstecgi.cgi microprogramming software of the Totolink N600R router lies in the handling of pointers. Exploiting this vulnerability allows a malicious actor to trigger a service failure through a specially crafted HTTP request...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows a perpetrator to gain unauthorized access to protected information and cause service failures.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type conversion errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and cause service failures through a specially created HTML page...

CVE-2025-65566

A denial-of-service vulnerability exists in the omec-project UPF pfcpiface component in version upf-epc-pfcpiface:2.1.3-dev. When the UPF receives a PFCP Session Report Response that is missing the mandatory Cause Information Element, the session report handler dereferences a nil pointer instead ...

CVE-2025-65563

A denial-of-service vulnerability exists in the omec-project UPF component upf-epc/pfcpiface up to at least version upf-epc-pfcpiface:2.1.3-dev. When the UPF receives a PFCP Association Setup Request that is missing the mandatory NodeID Information Element, the association setup handler...

The vulnerability of the DcmQueryRetrieveConfig::readPeerList function in the dcmqrscp component, a library for working with DICOM format, allows a malicious actor to cause a service failure.

The vulnerability of the DcmQueryRetrieveConfig::readPeerList function in the dcmqrscp component, which is used for working with DICOM format data, is related to errors during resource release. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the parseQuota function in the dcmqrscp component of the DICOM processing library allows a malicious actor to gain unauthorized access to protected information and cause service failures.

The vulnerability of the parseQuota function in the dcmqrscp component of the DICOM format processing library in the DICOM DCMT library is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized...

The vulnerability of the PdfParserObject::ParseFileComplete() function in the PdfParserObject.cpp component of the PDF processing software library allows a malicious individual to gain unauthorized access to protected information and cause service failures.

The vulnerability of the PdfParserObject::ParseFileComplete function in the PdfParserObject.cpp component of the PDF processing software library involves executing a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to gain unauthorized access to...

The vulnerability of the _bfd_x86_elf_late_size_sections function in the bfd/elfxx-x86.c component of the GNU Binutils development environment allows a attacker to cause a service failure.

The vulnerability of the bfdx86elflatesizesections function in the bfd/elfxx-x86.c component of the GNU Binutils development environment is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failu...

The vulnerability of the GEGL image processing library, related to the occurrence of operations outside the buffer boundaries in memory, allows an intruder to gain unauthorized access to protected information and cause a service failure.

The vulnerability of the GEGL image processing library relates to the occurrence of operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information and cause service failures...

CVE-2025-8872

On affected platforms running Arista EOS with OSPFv3 configured, a specially crafted packet can cause the OSFPv3 process to have high CPU utilization which may result in the OSFPv3 process being restarted. This may cause disruption in the OSFPv3 routes on the switch. This issue was discovered...

EUVD-2025-203841

On affected platforms running Arista EOS with OSPFv3 configured, a specially crafted packet can cause the OSFPv3 process to have high CPU utilization which may result in the OSFPv3 process being restarted. This may cause disruption in the OSFPv3 routes on the switch. This issue was discovered...

CVE-2025-8872

On affected platforms running Arista EOS with OSPFv3 configured, a specially crafted packet can cause the OSFPv3 process to have high CPU utilization which may result in the OSFPv3 process being restarted. This may cause disruption in the OSFPv3 routes on the switch. This issue was discovered...

CVE-2025-8872 A specially crafted packet can cause the OSFPv3 process to have high CPU utilization which may result in the OSFPv3 process being restarted

On affected platforms running Arista EOS with OSPFv3 configured, a specially crafted packet can cause the OSFPv3 process to have high CPU utilization which may result in the OSFPv3 process being restarted. This may cause disruption in the OSFPv3 routes on the switch. This issue was discovered...