CVE-2025-10921 GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page o...

vlc:vlc-demux-dec-libfuzzer: Heap-buffer-overflow in Read

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=6535052122193920 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-dec-libfuzzer Job Type: aflasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x79394d1f5b71 Crash...

mruby:mruby_fuzzer: Heap-buffer-overflow in mrb_pack_pack

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6462498313404416 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzerasanmruby Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x7a109f6e0191...

upx:list_packed_file_fuzzer: Heap-buffer-overflow in PackMachBase<N_Mach::MachClass_64<N_BELE_CTP::LEPolicy>>::canUnpack

Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=6666275687563264 Project: upx Fuzzing Engine: honggfuzz Fuzz Target: listpackedfilefuzzer Job Type: honggfuzzasanupx Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x771dc6fe7781...

EulerOS 2.0 SP13 : freetype (EulerOS-SA-2025-2285)

According to the versions of the freetype package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based buffer overflow.CVE-2022-31782 Tenable has extracted the preceding descriptio...

Huawei EulerOS: Security Advisory for gnutls (EulerOS-SA-2025-2259)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for gnutls (EulerOS-SA-2025-2291)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 4344-1] gdk-pixbuf security update

Debian LTS Advisory DLA-4344-1 [email protected] https://www.debian.org/lts/security/ Carlos Henrique Lima Melara October 22, 2025 https://wiki.debian.org/LTS Package : gdk-pixbuf Version : 2.42.2+dfsg-1+deb11u4 CVE ID : CVE-2025-7345 Debian Bug : 1109262 A vulnerability was found in...

PT-2025-46094

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=454097865 Crash type: Heap-buffer-overflow READ 1 Crash state: std:: 1::pair arrow::util::R arrow::util::RleBitPackedDecoder::GetBatch auto parquet::DictByteArrayDecoderImpl::DecodeArrowDense...

openssl:x509: Heap-buffer-overflow in ossl_x509_check_cert_time

Project: https://github.com/openssl/openssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5880369384849408 Project: openssl Fuzzing Engine: libFuzzer Fuzz Target: x509 Job Type: libfuzzerasanopenssl Platform Id: linux Crash Type: Heap-buffer-overflow READ 14 Crash Address: 0x7b72ac1e049d...

arrow:parquet-arrow-fuzz: Heap-buffer-overflow in std::__1::pair<int, arrow::util::RleBitPackedParser::ControlFlow> arrow::util::R

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5831656524283904 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: parquet-arrow-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

openssl:x509: Heap-buffer-overflow in ossl_x509_check_cert_time

Project: https://github.com/openssl/openssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5818603716018176 Project: openssl Fuzzing Engine: libFuzzer Fuzz Target: x509 Job Type: libfuzzerasanopenssl Platform Id: linux Crash Type: Heap-buffer-overflow READ 14 Crash Address: 0x76120f7e5f1d...

libyal:libfsntfs_volume_fuzzer: Heap-buffer-overflow in libfsntfs_index_value_read

Detailed Report: https://oss-fuzz.com/testcase?key=4979273434988544 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libfsntfsvolumefuzzer Job Type: libfuzzerasanlibyal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7921ee5e0839 Crash State:...

CVE-2025-62526: Heap-based Buffer Overflow

OpenWrt Project is a Linux operating system targeting embedded devices. Prior to version 24.10.4, ubusd contains a heap buffer overflow in the event registration parsing code. This allows an attacker to modify the head and potentially execute arbitrary code in the context of the ubus daemon. The...

Several ABB products have security vulnerabilities

The ABB Terra AC wallbox is ABB's superior EV home charger, offering high value quality, future-proof flexibility, and advanced security and protection. A security vulnerability exists in several ABB products, which originates from a heap buffer overflow. The following products and versions are...

PT-2025-45916

FFmpeg version n6.1 was discovered to contain a heap buffer overflow vulnerability in the draw block rectangle function of libavfilter/vf codecview.c. This vulnerability allows attackers to cause undefined behavior or a Denial of Service DoS via crafted input...

RUSTSEC-2025-0126 Heap-buffer-overflow in nftnl::Batch::with_page_size (nftnl-rs)

A heap-buffer-overflow vulnerability exists in the Rust wrapper for libnftnl, triggered via the nftnl::Batch::withpagesize constructor. When a small or malformed page size is provided, the underlying C code allocates an insufficient buffer, leading to out-of-bounds writes during batch...

PT-2025-48046

A heap-buffer-overflow vulnerability exists in the Rust wrapper for libnftnl, triggered via the nftnl::Batch::with page size constructor. When a small or malformed page size is provided, the underlying C code allocates an insufficient buffer, leading to out-of-bounds writes during batch...

Alibaba Cloud Linux 3 : 0163: gnutls (ALINUX3-SA-2025:0163)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2025:0163 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-32988: A flaw was found in GnuTLS...

Adobe Bridge security vulnerabilities

Adobe Bridge is a file viewer from the American company Audobee Adobe. Adobe Bridge suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to cause the disclosure of sensitive information in memory...