CVE-2025-36923

In NrmmDecoder::DecodeSORTransparentContext of cnNrmmDecoder.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

EUVD-2025-202851

In NrmmDecoder::DecodeSORTransparentContext of cnNrmmDecoder.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

radare2:ia_fuzz: Heap-buffer-overflow in dotnet_parse_version_info

Project: https://github.com/radare/radare2.git https://github.com/radareorg/radare2.git Detailed Report: https://oss-fuzz.com/testcase?key=6530590062215168 Project: radare2 Fuzzing Engine: libFuzzer Fuzz Target: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type:...

CVE-2025-14512

CVE-2025-14512 affects GLib2 (glib2) in IBM Netezza Appliance. The IBM security bulletin confirms a vulnerability in GLib’s GIO escape_byte_string() that can cause a heap-based buffer overflow leading to DoS when processing certain file or remote filesystem attribute values. Remediation: upgrade ...

CVE-2025-14512

A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service DoS via an integer overflow in GLib's GIO GLib Input/Output escapebytestring function when processing malicious file or remote filesystem attribute values...

CVE-2025-14512: Integer Overflow or Wraparound

A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service DoS via an integer overflow in GLib's GIO GLib Input/Output escapebytestring function when processing malicious file or remote filesystem attribute values...

libplist:bplist_fuzzer: Heap-buffer-overflow in parse_bin_node_at_index

Project: https://github.com/libimobiledevice/libplist.git Detailed Report: https://oss-fuzz.com/testcase?key=5529817627033600 Project: libplist Fuzzing Engine: libFuzzer Fuzz Target: bplistfuzzer Job Type: libfuzzerasanlibplist Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

CVE-2025-62456

Heap-based buffer overflow in Windows Resilient File System ReFS allows an authorized attacker to execute code over a network...

CVE-2025-48592

In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CLSA-2025-1765286037 Fix CVE(s): CVE-2025-22134

SECURITY UPDATE: Heap-buffer overflow when switching buffers in visual mode - debian/patches/CVE-2025-22134.patch: fix visual mode heap-buffer-overflow by resetting VIsual mode on :all - CVE-2025-22134...

CVE-2025-48592: Out-of-bounds Read

In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. Google Android suffers from a buffer error vulnerability that stems from a heap buffer overflow that could lead to remote information disclosure...

kea:fuzz_dhcpsrv: Heap-buffer-overflow in void std::__1::allocator<unsigned char>::construct

Project: https://gitlab.isc.org/isc-projects/kea.git Detailed Report: https://oss-fuzz.com/testcase?key=5217696607436800 Project: kea Fuzzing Engine: libFuzzer Fuzz Target: fuzzdhcpsrv Job Type: libfuzzerasankea Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

ruby:fuzz_json: Heap-buffer-overflow in raise_parse_error

Detailed Report: https://oss-fuzz.com/testcase?key=5248084482523136 Project: ruby Fuzzing Engine: libFuzzer Fuzz Target: fuzzjson Job Type: libfuzzerasanruby Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7d6f36204a8e Crash State: raiseparseerror jsonparseescapedstrin...

CVE-2025-14104

A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the setpwnam function, affecting SUID Set User ID login-utils utilities writing to the password database...

Alibaba Cloud Linux 3 : 0191: gimp:2.8 (ALINUX3-SA-2025:0191)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2025:0191 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-10920: GIMP ICNS File Parsing...

EUVD-2025-201096

A heap buffer overflow in compiler.c and compiler.h in Pepper language 0.1.1commit 961a5d9988c5986d563310275adad3fd181b2bb7. Malicious execution of a pepper source file.pr could lead to arbitrary code execution or Denial of Service...

vlc:vlc-demux-dec-libfuzzer-ty: Heap-buffer-overflow in check_sync_pes

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=6618299413889024 Project: vlc Fuzzing Engine: honggfuzz Fuzz Target: vlc-demux-dec-libfuzzer-ty Job Type: honggfuzzasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

CVE-2025-50360

A heap buffer overflow in compiler.c and compiler.h in Pepper language 0.1.1commit 961a5d9988c5986d563310275adad3fd181b2bb7. Malicious execution of a pepper source file.pr could lead to arbitrary code execution or Denial of Service...

Pepper Programming Language 安全漏洞

Pepper Programming Language is an interpreted programming language from the Dutch individual developer Danny van Kooten. A security vulnerability exists in Pepper Programming Language version 0.1.1commit, which originates from a heap buffer overflow and could lead to the execution of arbitrary co...