CVE-2025-70304

A buffer overflow in the vobsubgetsubpicduration function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted packet...

GPAC 安全漏洞

GPAC is an open source multimedia framework. GPAC has a buffer overflow vulnerability that stems from the vobsubgetsubpicduration function failing to properly validate the length size of the input data, which can be exploited by an attacker to cause a denial of service...

CVE-2025-70304

A buffer overflow in the vobsubgetsubpicduration function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted packet...

CVE-2025-70304

A buffer overflow in the vobsubgetsubpicduration function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted packet...

CVE-2025-70304

A buffer overflow in the vobsubgetsubpicduration function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted packet...

CVE-2025-70304

GPAC v2.4.0 contains a buffer overflow in vobsub_get_subpic_duration() due to insufficient validation of input data length, allowing a crafted packet to trigger a DoS. The issue is documented across multiple databases (CNVD, OSV, CVE catalogs) with the same description. A PoC appears to be publis...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993132)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993132 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: mac8021: fix possible oob access in ieee80211getrateduration Fix possible out-of-bound acce...

PT-2025-53137

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-rc1-yoctodev-standard+ Description The Linux kernel contains an issue where the rcu force quiescent state function uses this cpu read in preemptible code instead of raw cpu read. This can lead to a lockdep...

[SECURITY] Fedora 43 Update: rust-speedate-0.17.0-1.fc43

Fast and simple datetime, date, time and duration parsing...

The Long Tail of the AWS Outage

Experts say outages like the one that Amazon experienced this week are almost inevitable given the complexity and scale of cloud technology—but the duration serves as a warning...

USN-7813-1: FORT Validator vulnerabilities

Niklas Vogel and Haya Schulmann discovered that FORT Validator did not perform proper input validation when parsing certain RPKI repository data. A remote attacker could possibly use this issue to cause FORT Validator to crash, resulting in a denial of service. CVE-2024-45234, CVE-2024-45235,...

EUVD-2013-0305

Malware in sbrugna...

EUVD-2002-0450

Malware in sbrugna...

EUVD-2016-5033

Malware in sbrugna...

EUVD-2019-5263

Malware in sbrugna...

EUVD-2020-6112

Malware in sbrugna...

EUVD-2021-0986

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987318)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987318 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: mac8021: fix possible oob access in ieee80211getrateduration Fix possible out-of-bound acce...

CVE-2025-59729

When parsing the header for a DHAV file, there's an integer underflow in offset calculation that leads to reading the duration from before the start of the allocated buffer. If we load a DHAV file that is larger than MAXDURATIONBUFFERSIZE bytes 0x100000 for example 0x101000 bytes, then at 0 we ha...

CVE-2025-59729

CVE-2025-59729 affects FFmpeg’s DHAV handling. The provided technical description shows an integer underflow in the offset calculation when parsing a DHAV header, causing a 32-bit offset read to reference data outside the allocated buffer. In large DHAV files (e.g., > 0x100000 bytes), the end_...