Microsoft Excel 安全漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel that is caused by a heap buffer overflow when opening a specially crafted file. An attacker can exploit this vulnerability to execute arbitrary cod...

PT-2025-34326 · Git · Vlc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437731214 Crash type: Heap-buffer-overflow READ 3 Crash state: iTUNTripletCallback SetupMeta MP4 LoadMeta...

Microsoft Office 安全漏洞

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. A code execution vulnerability exists in Microsoft Office, which is caused due to a heap buffer overflow wh...

Adobe Substance3D Viewer 安全漏洞

Adobe Substance3D Viewer is a stand-alone desktop application for viewing and editing 3D files from Audobee Adobe USA. Adobe Substance3D Viewer suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to cause arbitrary code to be executed in the context of the curre...

Adobe InCopy 安全漏洞

Adobe InCopy is a text editing software for creative writing from the American company Audobee Adobe. Adobe InCopy suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to cause a buffer overflow that can be used to execute arbitrary code on the system or cause th...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a heap buffer overflow vulnerability due to improper boundary checking by libaom. An attacker can exploit the vulnerability to overflow a buffer, which can be used to execute arbitrary code on the system o...

BIT-LIBPHP-2022-4900 Potential buffer overflow in php_cli_server_startup_workers

A vulnerability was found in PHP where setting the environment variable PHPCLISERVERWORKERS to a large value leads to a heap buffer overflow...

OSV-2025-608 Heap-buffer-overflow in _dwarf_memcpy_noswap_bytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437060549 Crash type: Heap-buffer-overflow READ 4 Crash state: dwarfmemcpynoswapbytes dwarflengthofcuheader dwarfglobalnameoffsets...

PT-2025-33704 · Git · Libdwarf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437060549 Crash type: Heap-buffer-overflow READ 4 Crash state: dwarf memcpy noswap bytes dwarf length of cu header dwarf global name offsets...

GHSA-9M39-3MF3-XWCH ExecuTorch heap buffer overflow vulnerability

A heap buffer overflow vulnerability in the loading of ExecuTorch models can potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit ede82493dae6d2d43f8c424e7be4721abe5242be...

ExecuTorch heap buffer overflow vulnerability

A heap buffer overflow vulnerability in the loading of ExecuTorch models can potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit ede82493dae6d2d43f8c424e7be4721abe5242be...

CVE-2025-54949

A heap buffer overflow vulnerability in the loading of ExecuTorch models can potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit ede82493dae6d2d43f8c424e7be4721abe5242be...

CVE-2025-54949

CVE-2025-54949 describes a heap buffer overflow in ExecuTorch model loading, potentially enabling code execution or other destructive effects. Affected software: ExecuTorch prior to commit ede82493dae6d2d43f8c424e7be4721abe5242be. Public metrics list a CVSS v3.1 base score of 9.8 (CRITICAL) with ...

CVE-2025-54949

A heap buffer overflow vulnerability in the loading of ExecuTorch models can potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit ede82493dae6d2d43f8c424e7be4721abe5242be...

Moderate: Red Hat Security Advisory: gdk-pixbuf2 security update

An update for gdk-pixbuf2 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

CVE-2025-47183

CVE-2025-47183 affects GStreamer up to 1.26.1; isomp4 qtdemux_parse_tree may read past a heap buffer during MP4 parsing, leading to information disclosure. Public advisories from Debian (DLA-4419) fix in gst-plugins-good1.0 1.18.4-2+deb11u4; Amazon Linux 2 ALAS2-2025-3003 fixes to 1.18.4-6.amzn2....

RHEL 8 : gdk-pixbuf2 (RHSA-2025:13315)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:13315 advisory. The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits suc...

CVE-2025-47219

In GStreamer through 1.26.1, the isomp4 plugin's qtdemuxparsetrak function may read past the end of a heap buffer while parsing an MP4 file, possibly leading to information disclosure...

ALSA-2025:13315 Moderate: gdk-pixbuf2 security update

The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits such as GTK+ or clutter. Security Fixes: gdk?pixbuf: Heap?buffer?overflow in gdk?pixbuf CVE-2025-7345 For more details about the security issues,...

PT-2025-32321

Name of the Vulnerable Software and Affected Versions ExecuTorch versions prior to commit ede82493dae6d2d43f8c424e7be4721abe5242be Description A heap buffer overflow exists in the loading of ExecuTorch models, potentially leading to code execution or other adverse outcomes. Recommendations Update...