CVE-2025-62526: Heap-based Buffer Overflow

OpenWrt Project is a Linux operating system targeting embedded devices. Prior to version 24.10.4, ubusd contains a heap buffer overflow in the event registration parsing code. This allows an attacker to modify the head and potentially execute arbitrary code in the context of the ubus daemon. The...

ABB多款产品 安全漏洞

The ABB Terra AC wallbox is ABB's superior EV home charger, offering high value quality, future-proof flexibility, and advanced security and protection. A security vulnerability exists in several ABB products, which originates from a heap buffer overflow. The following products and versions are...

PT-2025-45916

FFmpeg version n6.1 was discovered to contain a heap buffer overflow vulnerability in the draw block rectangle function of libavfilter/vf codecview.c. This vulnerability allows attackers to cause undefined behavior or a Denial of Service DoS via crafted input...

RUSTSEC-2025-0126 Heap-buffer-overflow in nftnl::Batch::with_page_size (nftnl-rs)

A heap-buffer-overflow vulnerability exists in the Rust wrapper for libnftnl, triggered via the nftnl::Batch::withpagesize constructor. When a small or malformed page size is provided, the underlying C code allocates an insufficient buffer, leading to out-of-bounds writes during batch...

PT-2025-48046

A heap-buffer-overflow vulnerability exists in the Rust wrapper for libnftnl, triggered via the nftnl::Batch::with page size constructor. When a small or malformed page size is provided, the underlying C code allocates an insufficient buffer, leading to out-of-bounds writes during batch...

Alibaba Cloud Linux 3 : 0163: gnutls (ALINUX3-SA-2025:0163)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2025:0163 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-32988: A flaw was found in GnuTLS...

Adobe Bridge 安全漏洞

Adobe Bridge is a file viewer from the American company Audobee Adobe. Adobe Bridge suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to cause the disclosure of sensitive information in memory...

arrow:arrow-csv-fuzz: Heap-buffer-overflow in arrow_vendored::fast_float::from_chars_result arrow_vendored::fast_float::detail

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5003506164760576 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-csv-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x79848e1e51...

EUVD-2025-34373

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2025-59254

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

OSV-2025-834 Heap-buffer-overflow in std::__1::pair<int, arrow::util::RleBitPackedParser::ControlFlow> arrow::util::R

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=451150486 Crash type: Heap-buffer-overflow READ 3 Crash state: std::1::pair arrow::util::R arrow::util::RleBitPackedDecoder::GetBatch auto parquet::DictByteArrayDecoderImpl::DecodeArrowDense...

PT-2025-43578

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=451150486 Crash type: Heap-buffer-overflow READ 3 Crash state: std:: 1::pair arrow::util::R arrow::util::RleBitPackedDecoder::GetBatch auto parquet::DictByteArrayDecoderImpl::DecodeArrowDense...

Important: cuda-cudart-13-0

Issue Overview: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit of this vulnerability may lead to a partial denial of service. CVE-2025-23248 NVIDIA...

Important: libcurand-13-0

Issue Overview: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit of this vulnerability may lead to a partial denial of service. CVE-2025-23248 NVIDIA...

Important: cuda-sandbox-devel-13-0

Issue Overview: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit of this vulnerability may lead to a partial denial of service. CVE-2025-23248 NVIDIA...

arrow:parquet-arrow-fuzz: Heap-buffer-overflow in std::__1::pair<int, arrow::util::RleBitPackedParser::ControlFlow> arrow::util::R

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5664058981548032 Project: arrow Fuzzing Engine: afl Fuzz Target: parquet-arrow-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 3 Crash Address: 0x7c360d0e0344 Crash...

python3-libraries:fuzzer-ast: Heap-buffer-overflow in _PyTokenizer_ensure_utf8

Detailed Report: https://oss-fuzz.com/testcase?key=6621835346378752 Project: python3-libraries Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-ast Job Type: libfuzzerasanpython3-libraries Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x799e459e3553 Crash State:...

cpython3:fuzz_pycompile: Heap-buffer-overflow in _PyTokenizer_ensure_utf8

Project: https://github.com/python/cpython.git Detailed Report: https://oss-fuzz.com/testcase?key=6597781046493184 Project: cpython3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzpycompile Job Type: libfuzzerasancpython3 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

Fedora 42 : chromium (2025-10d67f6509)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-10d67f6509 advisory. Update to 141.0.7390.65 High CVE-2025-11458: Heap buffer overflow in Sync High CVE-2025-11460: Use after free in Storage Medium CVE-2025-11211: Out ...

PT-2025-46009

libcurl's ASN1 parser code has the GTime2str function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the time fraction, leading to a strlen getting performed on a pointer to a heap buffer area that i...