JLSEC-2025-304 A vulnerability was found in the libtiff library

A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.c...

ruby:fuzz_prism: Heap-buffer-overflow in parse_pattern_primitives

Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6490606307442688 Project: ruby Fuzzing Engine: afl Fuzz Target: fuzzprism Job Type: aflasanruby Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7442892e00b5 Crash State:...

Mageia: Security Advisory (MGASA-2025-0312)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-55472

A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801. This flaw allows attackers to cause a denial of service via a crafted tiff file...

PT-2025-55462

A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.c...

PT-2025-55421

A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other...

PT-2025-55467

There exists one heap buffer overflow in TIFFmemcpy in tif unix.c in libtiff 4.0.10, which allows an attacker to cause a denial-of-service through a crafted tiff file...

PT-2025-55440

Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other context-dependent impact...

CVE-2025-65018: Out-of-bounds Write

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow vulnerability in the libpng simplified API function pngimagefinishread when processing...

Ashlar-Vellum多款产品 安全漏洞

Ashlar-Vellum Xenon and others are products of Ashlar-Vellum.Ashlar-Vellum Xenon is a CAD modeling software.Ashlar-Vellum Cobalt is a parametric-based computer-aided design and 3D modeling program.Ashlar-Vellum Argon is A 2D drafting and 3D modeling software. A security vulnerability exists in...

PT-2025-55460

A vulnerability was found in the libtiff library. This flaw causes a heap buffer overflow issue via the TIFFTAG INKNAMES and TIFFTAG NUMBEROFINKS values...

PT-2025-55438

A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped function. This flaw allows an attacker to pass a crafted TIFF file to the tiffinfo tool, triggering a heap buffer overflow issue and causing a crash that leads to a denial of service...

RockyLinux 9 : gimp (RLSA-2025:21968)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:21968 advisory. gimp: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2025-10922 gimp: GIMP ICNS File Parsing Out-Of-Bounds Wri...

CVE-2025-65018

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow vulnerability in the libpng simplified API function pngimagefinishread when processing...

sleuthkit:fls_ntfs_fuzzer: Heap-buffer-overflow in ntfs_make_data_run

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=4845446867779584 Project: sleuthkit Fuzzing Engine: afl Fuzz Target: flsntfsfuzzer Job Type: aflasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

ruby:fuzz_prism: Heap-buffer-overflow in parser_lex

Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4825645457932288 Project: ruby Fuzzing Engine: libFuzzer Fuzz Target: fuzzprism Job Type: libfuzzerasanruby Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x758605fe03c0 Crash...

ruby:fuzz_prism: Heap-buffer-overflow in parser_lex

Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4643146224173056 Project: ruby Fuzzing Engine: afl Fuzz Target: fuzzprism Job Type: aflasanruby Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7a57fd6e06cf Crash State:...

ruby:fuzz_prism: Heap-buffer-overflow in parse_target

Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4589954832596992 Project: ruby Fuzzing Engine: afl Fuzz Target: fuzzprism Job Type: aflasanruby Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x75cd543e12aa Crash State:...

CVE-2025-62608: Heap-based Buffer Overflow

MLX is an array framework for machine learning on Apple silicon. Prior to version 0.29.4, there is a heap buffer overflow in mlx::core::load when parsing malicious NumPy .npy files. Attacker-controlled file causes 13-byte out-of-bounds read, leading to crash or information disclosure. This issue...

Linux Distros Unpatched Vulnerability : CVE-2025-64524

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In versions...