CVE-2025-22920

A heap buffer overflow vulnerability in FFmpeg before commit 4bf784c allows attackers to trigger a memory corruption via supplying a crafted media file in avformat when processing tile grid group streams. This can lead to a Denial of Service DoS...

CVE-2025-22920

A heap buffer overflow vulnerability in FFmpeg before commit 4bf784c allows attackers to trigger a memory corruption via supplying a crafted media file in avformat when processing tile grid group streams. This can lead to a Denial of Service DoS...

PT-2025-7506 · Google +1 · Google Chrome +1

Name of the Vulnerable Software and Affected Versions: Google Chrome on Android versions prior to 133.0.6943.126 Description: A heap buffer overflow in the GPU of Google Chrome on Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. The severity of thi...

OSV-2025-131 Heap-buffer-overflow in vips_foreign_save_heif_write_block

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=396460413 Crash type: Heap-buffer-overflow WRITE Crash state: vipsforeignsaveheifwriteblock wbufferwritethread vipsthreadsetwork...

PT-2025-7218

Name of the Vulnerable Software and Affected Versions: Exiv2 versions v0.28.0 through v0.28.4 Description: A heap buffer overflow was found in Exiv2 when used to write metadata into a crafted image file. This issue can be exploited by an attacker to gain code execution if they can trick the victi...

CVE-2024-37601

An issue was discovered in Mercedes Benz NTG New Telematics Generation 6. A possible heap buffer overflow exists in the user data import/export function of NTG 6 head units. To perform this attack, local access to the USB interface of the car is needed. With prepared data, an attacker can cause t...

CVE-2024-35434

Irontec Sngrep v1.8.1 was discovered to contain a heap buffer overflow via the function rtpcheckpacket at /sngrep/src/rtp.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted SIP packet...

OSV-2025-119 Heap-buffer-overflow in snmp_config_when

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=396102403 Crash type: Heap-buffer-overflow READ 1 Crash state: snmpconfigwhen netsnmpconfigprocessmemorylist readpremibconfigs...

OSV-2025-113 Heap-buffer-overflow in snmp_log_options

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=395921931 Crash type: Heap-buffer-overflow READ 8 Crash state: snmplogoptions netsnmpparseargs snmpparseargsfuzzer.c...

PT-2025-7259 · Net Snmp · Net-Snmp

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the following functions: snmp config when, netsnmp config process memory list,...

CVE-2024-37601

An issue was discovered in Mercedes Benz NTG New Telematics Generation 6. A possible heap buffer overflow exists in the user data import/export function of NTG 6 head units. To perform this attack, local access to the USB interface of the car is needed. With prepared data, an attacker can cause t...

CVE-2024-37601

An issue was discovered in Mercedes Benz NTG New Telematics Generation 6. A possible heap buffer overflow exists in the user data import/export function of NTG 6 head units. To perform this attack, local access to the USB interface of the car is needed. With prepared data, an attacker can cause t...

CVE-2024-37601

An issue was discovered in Mercedes Benz NTG New Telematics Generation 6. A possible heap buffer overflow exists in the user data import/export function of NTG 6 head units. To perform this attack, local access to the USB interface of the car is needed. With prepared data, an attacker can cause t...

CVE-2024-37601

CVE-2024-37601 : Mercedes-Benz NTG (New Telematics Generation) 6 contains a heap buffer overflow in the UserData/UD2 decoding path used for import/export via USB. The vulnerability requires local USB access to trigger, and exploitation can crash the UserData service, with the system subsequently ...

CVE-2024-37601

An issue was discovered in Mercedes Benz NTG New Telematics Generation 6. A possible heap buffer overflow exists in the user data import/export function of NTG 6 head units. To perform this attack, local access to the USB interface of the car is needed. With prepared data, an attacker can cause t...

ROS-20250212-02

Open Asset Import Library Assimp 3D model import library vulnerability is related to heap buffer overflow. heap buffer overflow. Exploitation of the vulnerability could allow an attacker to cause a denial of service Vulnerability of OpenDDDLParser::parseStructure function of 3D models import...

NVIDIA nvJPEG2000 安全漏洞

NVIDIA nvJPEG2000 is a library from NVIDIA, Inc. for decoding and encoding JPEG2000 images on NVIDIA GPUs. A security vulnerability exists in NVIDIA nvJPEG2000 version 0.8.0, which originates from a heap-based buffer overflow issue that can be caused by an attacker via a specially crafted JPEG200...

CVE-2025-1176

A vulnerability was found in GNU Binutils 2.43 and classified as critical. This issue affects the function bfdelfgcmarkrsec of the file elflink.c of the component ld. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The complexity of an attack is rather...

OSV-2022-1292 Heap-buffer-overflow in LibRaw::phase_one_correct

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=394920636 Crash type: Heap-buffer-overflow READ 2 Crash state: LibRaw::phaseonecorrect LibRaw::raw2imageex LibRaw::dcrawprocess...

PT-2025-9876 · Libraw · Libraw

Name of the Vulnerable Software and Affected Versions: LibRaw affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash occurs in the LibRaw::phase one correct function, which is called by LibRaw::raw2image ex and LibRaw::dcraw process...