Open Asset Import Library（assimp） 安全漏洞

Open Asset Import Library assimp is a library in the Open Asset Import Library open source. A security vulnerability exists in Open Asset Import Library assimp version 5.4.3, which stems from an incorrect manipulation of the parameter data that can cause a heap buffer overflow...

CVE-2025-2618

A vulnerability, which was classified as critical, has been found in D-Link DAP-1620 1.03. Affected by this issue is the function setwsaction of the file /dws/api/ of the component Path Handler. The manipulation leads to heap-based buffer overflow. The attack may be launched remotely. The exploit...

CVE-2025-2592

A flaw was found in the Open Asset Import Library assimp. In affected versions, a heap-based buffer overflow condition can be triggered when processing a malformed CSM file. This may lead to an application crash or other undefined behavior...

OSV-2025-230 Heap-buffer-overflow in wasm_loader_prepare_bytecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=404921047 Crash type: Heap-buffer-overflow WRITE 8 Crash state: wasmloaderpreparebytecode loadfromsections wasmloaderload...

CVE-2025-2584

CVE-2025-2584 affects WebAssembly wabt 1.0.36. The vulnerability targets BinaryReaderInterp::GetReturnCallDropKeepCount in wabt/src/interp/binary-reader-interp.cc, enabling a heap-based buffer overflow. It can be triggered remotely; exploitation is deemed high complexity, and user interaction is ...

WABT 安全漏洞

WABT is a WebAssembly binary toolkit open-sourced by WebAssembly. A security vulnerability exists in WABT version 1.0.36, which stems from a heap buffer overflow in the BinaryReaderInterp::GetReturnCallDropKeepCount function...

Google Android heap buffer overflow vulnerability (CNVD-2025-15179)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a heap buffer overflow vulnerability, which is caused due to a flaw in a system component. An attacker can exploit the vulnerability to execute arbitrary code on the system...

EulerOS 2.0 SP12 : openjpeg2 (EulerOS-SA-2025-1301)

According to the versions of the openjpeg2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the...

EulerOS 2.0 SP12 : openjpeg2 (EulerOS-SA-2025-1302)

According to the versions of the openjpeg2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the...

CBL Mariner 2.0 Security Update: freetype (CVE-2025-27363)

The version of freetype installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-27363 advisory. - An out of bounds write exists in FreeType versions 2.13.0 and below newer versions of FreeType are not...

CVE-2025-29911

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station. A critical heap buffer overflow vulnerability was identified in the...

CVE-2025-29913

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station. A critical heap buffer overflow vulnerability was identified in the...

CVE-2025-29912

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station. In versions 1.3.3 and prior, an unsigned integer underflow in the...

Huawei EulerOS: Security Advisory for openjpeg2 (EulerOS-SA-2025-1302)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for openjpeg2 (EulerOS-SA-2025-1301)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OSV-2025-219 Heap-buffer-overflow in opj_j2k_read_tile_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=403673832 Crash type: Heap-buffer-overflow WRITE 8 Crash state: opjj2kreadtileheader opjj2kdecodetiles opjj2kdecode...

CVE-2025-29911

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station. A critical heap buffer overflow vulnerability was identified in the...

CVE-2025-29913

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station. A critical heap buffer overflow vulnerability was identified in the...

CVE-2025-29913 CryptoLib's Crypto_TC_Prep_AAD Has Buffer Overflow Due to Integer Underflow

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station. A critical heap buffer overflow vulnerability was identified in the...

CVE-2025-29912

CryptoLib (SDLS-EP) vulnerability in versions ≤ 1.3.3 involves a heap buffer overflow caused by an unsigned underflow in Crypto_TC_ProcessSecurity when the TC frame length fl is 0, interpreted as 65535 and leading to out-of-bounds access. Reported as CVE-2025-29912, it can enable DoS or potential...