415 matches found
CVE-2025-48429
An out-of-bounds read vulnerability exists in the RLECodec::DecodeByStreams functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to leaking heap data. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2025-48429
An out-of-bounds read vulnerability exists in the RLECodec::DecodeByStreams functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to leaking heap data. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2025-48429
An out-of-bounds read vulnerability exists in the RLECodec::DecodeByStreams functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to leaking heap data. An attacker can provide a malicious file to trigger this vulnerability...
Grassroot DICOM RLECodec::DecodeByStreams out-of-bounds read vulnerability
Talos Vulnerability Report TALOS-2025-2214 Grassroot DICOM RLECodec::DecodeByStreams out-of-bounds read vulnerability December 16, 2025 CVE Number CVE-2025-48429 SUMMARY An out-of-bounds read vulnerability exists in the RLECodec::DecodeByStreams functionality of Grassroot DICOM 3.024. A specially...
PT-2025-51785
Name of the Vulnerable Software and Affected Versions Grassroot DICOM version 3.024 Description A flaw exists in the RLECodec::DecodeByStreams functionality that can lead to a heap data leak. A specially crafted DICOM file can trigger this issue. An attacker can provide a malicious file to exploi...
Siemens SIMATIC and SCALANCE Improper Input Validation (CVE-2024-7264)
libcurl's ASN1 parser code has the GTime2str function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the time fraction, leading to a strlen getting performed on a pointer to a heap buffer area that i...
Siemens SIMATIC Devices Out-of-bounds Read (CVE-2023-3773)
A flaw was found in the Linux kernel's IP framework for transforming packets XFRM subsystem. This issue may allow a malicious user with CAPNETADMIN privileges to cause a 4 byte out-of-bounds read of XFRMAMTIMERTHRESH when parsing netlink attributes, leading to potential leakage of sensitive heap...
Linux Distros Unpatched Vulnerability : CVE-2025-62493
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability exists in the QuickJS engine's BigInt string conversion logic jsbiginttostring1 due to an incorrect calculation of the required number of digit...
UBUNTU-CVE-2025-62493
A vulnerability exists in the QuickJS engine's BigInt string conversion logic jsbiginttostring1 due to an incorrect calculation of the required number of digits, which in turn leads to reading memory past the allocated BigInt structure. The function determines the number of characters ndigits...
PT-2025-42490
Name of the Vulnerable Software and Affected Versions QuickJS affected versions not specified Description An issue exists in the QuickJS engine’s BigInt string conversion logic within the js bigint to string1 function. This is due to an incorrect calculation of the required number of digits,...
EUVD-2019-13099
Malware in sbrugna...
EUVD-2021-26037
Malware in sbrugna...
EUVD-2019-18309
Malware in sbrugna...
EUVD-2021-0381
Malware in sbrugna...
EUVD-2020-8199
Malware in sbrugna...
EUVD-2020-1647
Malware in sbrugna...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: curl (UTSA-2025-987460)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987460 advisory. libcurl's ASN1 parser code has the GTime2str function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might...
EUVD-2022-43746
Malicious code in bioql PyPI...