Moderate: php:8.1 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: Leak partial content of the heap through heap buffer over-read in mysqlnd CVE-2024-8929 php: Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 php: Configuring ...

CVE-2025-46687

quickjs-ng through 0.9.0 has a missing length check in JSReadString for a string, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is also affected...

CVE-2025-46688

CVE-2025-46688 affects quickjs-ng up to 0.9.0, with an incorrect size calculation in JS_ReadBigInt for a BigInt that leads to a heap-based buffer overflow. The vulnerability also affects QuickJS prior to 2025-04-26. Connected sources consistently describe the faulty size computation as the root c...

CVE-2025-3619

Heap buffer overflow in Codecs in Google Chrome on Windows prior to 135.0.7049.95 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

OSV-2025-298 Heap-buffer-overflow in i18n::phonenumbers::UnicodeText::const_iterator::operator--

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=413161357 Crash type: Heap-buffer-overflow READ 1 Crash state: i18n::phonenumbers::UnicodeText::constiterator::operator-- i18n::phonenumbers::UnicodeString::tempSubString...

PT-2025-30688 · Unknown · Libphonenumber

Name of the Vulnerable Software and Affected Versions: libphonenumber affected versions not specified Description: The libphonenumber library contains a heap-buffer-overflow issue. The issue occurs in the i18n::phonenumbers::UnicodeText::const iterator::operator--,...

[SECURITY] [DLA 4135-1] haproxy security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4135-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk April 23, 2025 https://wiki.debian.org/LTS -...

Fedora 40 : chromium (2025-7827e4feac)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-7827e4feac advisory. Update to 135.0.7049.95 CVE-2025-3619: Heap buffer overflow in Codecs CVE-2025-3620: Use after free in USB Tenable has extracted the preceding...

Fedora 41 : chromium (2025-9c1d536035)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-9c1d536035 advisory. Update to 135.0.7049.95 CVE-2025-3619: Heap buffer overflow in Codecs CVE-2025-3620: Use after free in USB Tenable has extracted the preceding...

Debian dla-4135 : haproxy - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4135 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4135-1 [email protected] https://www.debian.org/lts/security/...

Google Chrome heap buffer overflow vulnerability (CNVD-2025-09156)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to submit a special Web request that can be tricked into being parsed by the user, crashing the application or executing arbitrary...

openSUSE 15 Security Update : chromium (openSUSE-SU-2025:0133-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025:0133-1 advisory. This update for chromium fixes the following issue: chromium 135.0.7049.95 stable release 2025-04-15 boo1241288: CVE-2025-3619: Heap buffer...

OPENSUSE-SU-2025:0133-1 Security update for chromium

This update for chromium fixes the following issue: chromium 135.0.7049.95 stable release 2025-04-15 boo1241288: CVE-2025-3619: Heap buffer overflow in Codecs CVE-2025-3620: Use after free in USB...

Azure Linux 3.0 Security Update: perl (CVE-2024-56406)

The version of perl installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56406 advisory. - A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are...

CBL Mariner 2.0 Security Update: perl (CVE-2024-56406)

The version of perl installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56406 advisory. - A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are...

Perl is vulnerable to a heap buffer overflow when transliterating non-ASCII bytes

...

OSV-2025-290 Heap-buffer-overflow in pcpp::TelnetLayer::toString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=411460531 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::TelnetLayer::toString pcpp::Packet::toStringList pcpp::Packet::toString...

PT-2025-30076 · Git +1 · Pcapplusplus

Name of the Vulnerable Software and Affected Versions: cppc affected versions not specified Description: The software contains a heap-buffer-overflow read issue. The crash occurs within the toString function of the TelnetLayer class, triggered through toStringList and toString functions of the...

[slackware-security] libxml2

New libxml2 packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libxml2-2.11.9-i586-3slack15.0.txz: Rebuilt. This update fixes security issues: schemas: Fix heap buffer overflow in...

unqlite 安全漏洞

unqlite is an embedded NoSQL transactional database engine open-sourced by Symisc. A security vulnerability exists in unqlite, which stems from a heap buffer overflow caused by function jx9MemObjStore in file /data/src/benchmarks/unqlite/unqlite.c. The vulnerability is caused by the use of the...