NVIDIA nvdisasm REL section header parsing heap-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2025-2191 NVIDIA nvdisasm REL section header parsing heap-based buffer overflow vulnerability September 24, 2025 CVE Number CVE-2025-23271 SUMMARY A heap-based buffer overflow vulnerability exists in the REL section header parsing functionality of NVIDIA nvdisasm...

Autodesk Revit 2024 < 2024.3.4 / 2025 < 2025.4.3 / 2026 < 2026.3 Multiple Vulnerabilities (adsk-sa-2025-0018)

The version of Autodesk Revit installed on the remote host is 2024 prior to 2024.3.4, 2025 prior to 2025.4.3, or 2026 prior to 2026.3. It is, therefore, affected by multiple vulnerabilities as referenced in the adsk-sa-2025-0014 advisory: - A maliciously crafted PDF file, when parsed through...

CVE-2025-54900

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2025-54910

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2025-54910

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2025-54907

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code locally...

CVE-2025-54900

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

Microsoft Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

PT-2025-36873

Name of the Vulnerable Software and Affected Versions: Microsoft Office Visio affected versions not specified Description: A heap-based buffer overflow exists in Microsoft Office Visio that could allow an unauthorized attacker to execute code locally. The issue requires user interaction and...

PT-2025-36974

Name of the Vulnerable Software and Affected Versions: Substance3D - Viewer versions 0.25.1 and earlier Description: Substance3D - Viewer is affected by a Heap-based Buffer Overflow that may lead to arbitrary code execution with current user privileges. Exploitation requires a user to open a...

PT-2025-36866

Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel affected versions not specified Description: A heap-based buffer overflow exists in Microsoft Office Excel. This issue allows a remote attacker to execute arbitrary code on the affected system. Recommendations: At the...

Grub2: udf: heap based buffer overflow in grub_udf_read_block() may lead to arbitrary code execution

...

HDF5 H5Ofsinfo.c H5O__fsinfo_encode heap-based overflow

...

HDF5 H5Ochunk.c H5O__chunk_protect heap-based overflow

...

HDF5 H5Faccum.c H5F__accum_free heap-based overflow

...

NASM Netwide Assember outmacho.c macho_no_dead_strip heap-based overflow

...

CVE-2025-8302

Realtek rtl81xx SDK Wi-Fi Driver rtwlanu Heap-based Buffer Overflow Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Realtek rtl81xx SDK Wi-Fi driver. An attacker must first obtain the ability to execute...

CVE-2025-57775

There is a heap-based Buffer Overflow vulnerability due to improper bounds checking when parsing a DSB file with Digilent DASYLab. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted DSB file. The...

CVE-2025-34164

NetSupport Manager 14.x before 14.12.0000 is vulnerable to a heap-based buffer overflow caused by a failure to enforce proper bounds checking when processing network packets before authentication. This can allow a remote, unauthenticated attacker to cause DoS or potentially execute arbitrary code...

CVE-2025-34164 NetSupport Manager < 14.12.0000 Heap-Based Buffer Overflow

A heap-based buffer overflow vulnerability in NetSupport Manager 14.x versions prior to 14.12.0000 allows a remote, unauthenticated attacker to cause a denial of service DoS or execute arbitrary code...