GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JP2 files. The...

Capstone 安全漏洞

Capstone is a cross-platform disassembly framework from Capstone, Inc. that supports use for binary analysis and reverse engineering of secure communications, among other things. A security vulnerability exists in Capstone 6.0.0-Alpha5 and earlier versions, which stems from Skipdata length not...

hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VM_memcpyvv function.

...

Adobe DNG Software Development Kit (SDK) Heap Buffer Overflow Vulnerability

Adobe DNG Software Development Kit SDK is a software development kit from the American company Audobee Adobe. The Adobe DNG Software Development Kit SDK contains a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code on a system or cause an application...

Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow

...

CVE-2025-36923

In NrmmDecoder::DecodeSORTransparentContext of cnNrmmDecoder.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

EUVD-2025-202851

In NrmmDecoder::DecodeSORTransparentContext of cnNrmmDecoder.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-14512

CVE-2025-14512 affects GLib2 (glib2) in IBM Netezza Appliance. The IBM security bulletin confirms a vulnerability in GLib’s GIO escape_byte_string() that can cause a heap-based buffer overflow leading to DoS when processing certain file or remote filesystem attribute values. Remediation: upgrade ...

CVE-2025-62456

Heap-based buffer overflow in Windows Resilient File System ReFS allows an authorized attacker to execute code over a network...

CVE-2025-48592

In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CLSA-2025-1765286037 Fix CVE(s): CVE-2025-22134

SECURITY UPDATE: Heap-buffer overflow when switching buffers in visual mode - debian/patches/CVE-2025-22134.patch: fix visual mode heap-buffer-overflow by resetting VIsual mode on :all - CVE-2025-22134...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. Google Android suffers from a buffer error vulnerability that stems from a heap buffer overflow that could lead to remote information disclosure...

CVE-2025-14104

A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the setpwnam function, affecting SUID Set User ID login-utils utilities writing to the password database...

Alibaba Cloud Linux 3 : 0191: gimp:2.8 (ALINUX3-SA-2025:0191)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2025:0191 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-10920: GIMP ICNS File Parsing...

EUVD-2025-201096

A heap buffer overflow in compiler.c and compiler.h in Pepper language 0.1.1commit 961a5d9988c5986d563310275adad3fd181b2bb7. Malicious execution of a pepper source file.pr could lead to arbitrary code execution or Denial of Service...

CVE-2025-50360

A heap buffer overflow in compiler.c and compiler.h in Pepper language 0.1.1commit 961a5d9988c5986d563310275adad3fd181b2bb7. Malicious execution of a pepper source file.pr could lead to arbitrary code execution or Denial of Service...

Pepper Programming Language 安全漏洞

Pepper Programming Language is an interpreted programming language from the Dutch individual developer Danny van Kooten. A security vulnerability exists in Pepper Programming Language version 0.1.1commit, which originates from a heap buffer overflow and could lead to the execution of arbitrary co...

CVE-2025-50360

Pepper language 0.1.1commit (commit 961a5d9988c5986d563310275adad3fd181b2bb7) contains a heap buffer overflow in compiler.c and compiler.h. Malicious Pepper source files (.pr) could cause arbitrary code execution or Denial of Service. Several connected sources (including Red Hat, EUVD-ENISA, NVD/...

AlmaLinux 9 : gimp (ALSA-2025:21968)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:21968 advisory. gimp: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2025-10922 gimp: GIMP ICNS File Parsing Out-Of-Bounds Writ...

KLA90657 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. Implementation vulnerability in Google Updater can be exploited to caus...