19048 matches found
PT-2025-15290 · Libvips +1 · Libvips +1
Name of the Vulnerable Software and Affected Versions: libvips versions prior to 8.16.1 Description: The issue arises from the heifsave operation in libvips, which can incorrectly determine the presence of an alpha channel in a "multiband" input. This can occur with a well-crafted TIFF image,...
libvips 安全漏洞
libvips is a fast image processing library with low memory requirements from the libvips open source. A security vulnerability exists in versions of libvips prior to 8.16.1, which stems from misjudging the alpha channel when processing multiband inputs, and may result in a heap buffer overflow...
OSV-2025-260 Heap-buffer-overflow in bfd_getb16
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=408254000 Crash type: Heap-buffer-overflow READ 1 Crash state: bfdgetb16 nds32elfdo9pcrelreloc nds32elf9pcrelreloc...
[SECURITY] [DLA 4116-1] abseil security update
Debian LTS Advisory DLA-4116-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost April 05, 2025 https://wiki.debian.org/LTS Package : abseil Version : 020200923.3-2+deb11u1 CVE ID : CVE-2025-0838 Debian Bug : 1098903 A vulnerability has been found in abseil, a collecti...
Debian dla-4116 : libabsl-dev - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4116 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4116-1 [email protected] https://www.debian.org/lts/security/...
CVE-2025-30356
CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station. In 1.3.3 and earlier, a heap buffer overflow vulnerability persists in...
CVE-2025-32053 Libsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()
A flaw was found in libsoup. A vulnerability in snifffeedorhtml and skipinsignificantspace functions may lead to a heap buffer over-read...
CVE-2025-32053 Libsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()
A flaw was found in libsoup. A vulnerability in snifffeedorhtml and skipinsignificantspace functions may lead to a heap buffer over-read...
CVE-2025-32052 Libsoup: heap buffer overflow in sniff_unknown()
A flaw was found in libsoup. A vulnerability in the sniffunknown function may lead to heap buffer over-read...
CVE-2025-32052 Libsoup: heap buffer overflow in sniff_unknown()
A flaw was found in libsoup. A vulnerability in the sniffunknown function may lead to heap buffer over-read...
OESA-2025-1367 transfig security update
The transfig utility creates a makefile which translates FIG created by xfig or PIC figures into a specified LaTeX graphics language for example, PostScriptTM. Transfig is used to create TeX documents which are portable i.e., they can be printed in a wide variety of environments. Security Fixes:...
CVE-2025-29070
A heap buffer overflow vulnerability has been identified in thesmooth2 in cmsgamma.c in lcms2-2.16 which allows a remote attacker to cause a denial of service. NOTE: the Supplier disputes this because "this is not exploitable as this function is never called on normal color management, is there...
CVE-2025-29069
A heap buffer overflow vulnerability has been identified in the lcms2-2.16. The vulnerability exists in the UnrollChunkyBytes function in cmspack.c, which is responsible for handling color space transformations. NOTE: this is disputed by the Supplier because the finding identified a bug in a...
PT-2025-14724
Name of the Vulnerable Software and Affected Versions Open Asset Import Library Assimp version 5.4.3 Description A critical issue has been found in the Open Asset Import Library Assimp, affecting the function Assimp::LWO::AnimResolver::UpdateAnimRangeSetup in the file...
Open Asset Import Library（assimp） 安全漏洞
Open Asset Import Library assimp is a library in the Open Asset Import Library open source. A security vulnerability exists in Open Asset Import Library assimp version 5.4.3, which stems from a heap buffer overflow in the LWO file handling component...
PT-2025-28458
Name of the Vulnerable Software and Affected Versions: gdk-pixbuf affected versions not specified glib affected versions not specified Description: A flaw exists in gdk-pixbuf and glib, specifically in the gdk pixbuf jpeg image load increment function and g base64 encode step, respectively. When...
OSV-2025-251 Heap-buffer-overflow in icu_78::RegexMatcher::MatchChunkAt
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=407590995 Crash type: Heap-buffer-overflow READ 2 Crash state: icu78::RegexMatcher::MatchChunkAt icu78::RegexMatcher::findUsingChunk uregexmatchfuzzer.cpp...
OSV-2025-248 Heap-buffer-overflow in cli_bm_addpatt
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=407448850 Crash type: Heap-buffer-overflow READ 1 Crash state: clibmaddpatt addhash loadregexmatcher...
PT-2025-23833 · Git +1 · Clamav
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The software suffers from a heap-buffer-overflow read issue. The crash state indicates involvement of the cli bm addpatt, add hash, and load regex matcher...
CVE-2025-30356
CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station. In 1.3.3 and earlier, a heap buffer overflow vulnerability persists in...