CVE-2025-68280

The Apache SIS library (versions 0.4 through 1.5 inclusive) is vulnerable to an XML External Entity (XXE) Injection (CWE-611) vulnerability. Specifically, the org.apache.sis.core:sis-metadata module fails to properly restrict XML external entity references. An attacker can submit a malicious XML ...

igraph:read_gml_fuzzer: Heap-buffer-overflow in igraph_gml_tree_get_integer

Project: https://github.com/igraph/igraph.git Detailed Report: https://oss-fuzz.com/testcase?key=4946586667450368 Project: igraph Fuzzing Engine: afl Fuzz Target: readgmlfuzzer Job Type: aflasanigraph Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x6040000e9a18 Crash...

igraph:read_gml_fuzzer: Heap-use-after-free in igraph_vector_ptr_size

Project: https://github.com/igraph/igraph.git Detailed Report: https://oss-fuzz.com/testcase?key=4855254405480448 Project: igraph Fuzzing Engine: honggfuzz Fuzz Target: readgmlfuzzer Job Type: honggfuzzasanigraph Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

igraph:read_gml_fuzzer: Heap-use-after-free in igraph_read_graph_gml

Project: https://github.com/igraph/igraph.git Detailed Report: https://oss-fuzz.com/testcase?key=4664686297612288 Project: igraph Fuzzing Engine: honggfuzz Fuzz Target: readgmlfuzzer Job Type: honggfuzzasanigraph Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...