Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS : HTMLDOC vulnerabilities (USN-7189-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7189-1 advisory. It was discovered that HTMLDOC incorrectly handled certain inputs, which could lead to an integer overflow. An attack...

OSV-2025-7 Heap-buffer-overflow in oatpp::json::Utils::escapeUtf8Char

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=387626404 Crash type: Heap-buffer-overflow WRITE 1 Crash state: oatpp::json::Utils::escapeUtf8Char oatpp::json::Utils::escapeString oatpp::json::Serializer::serializeString...

PT-2025-5666 · Oatpp · Oatpp

Name of the Vulnerable Software and Affected Versions: oatpp affected versions not specified Description: The issue is related to a heap-buffer-overflow error. Technical details about the error include the escapeUtf8Char and escapeString functions within oatpp::json::Utils, and the serializeStrin...

OSV-2025-6 Heap-buffer-overflow in next_marker

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=387317434 Crash type: Heap-buffer-overflow READ 1 Crash state: nextmarker readmarkers consumemarkers...

PT-2025-5662 · Git +1 · Libvips

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue has been identified, with a crash type of Heap-buffer-overflow READ 1. The crash state involves functions such as next...

OSV-2025-4 Heap-buffer-overflow in ___interceptor_pthread_create

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=386713390 Crash type: Heap-buffer-overflow READ 8 Crash state: interceptorpthreadcreate...

OSV-2025-3 Heap-buffer-overflow in avifImageAddUUIDProperty

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=386713389 Crash type: Heap-buffer-overflow READ 16 Crash state: avifImageAddUUIDProperty avif::testutil::PropsValid...

PT-2025-5656 · Avif · Avif

Name of the Vulnerable Software and Affected Versions: avif affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash occurs in the avifImageAddUUIDProperty function, as indicated by the crash state. Technical details about the issue include the...

PT-2025-5657 · Git +1 · Libavif

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 8 crash has been reported, with the crash state indicating an issue related to interceptor pthread create. No information is...

PT-2025-1034

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to a heap buffer overflow in the gatts process primary service req function of gatt sr.cc, which could lead to remote code execution without needing additional execution...

SUSE CVE-2024-56826

A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opjdecompress utility. This can lead to an application crash or other undefined behavior...

CVE-2024-47032

In constructtransactionfromcmd of lwisioctl.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-47032

In constructtransactionfromcmd of lwisioctl.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-47032

In constructtransactionfromcmd of lwisioctl.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-47032

The lwis component in Google Android is vulnerable to a heap buffer overflow within the construct_transaction_from_cmd function of the lwis_ioctl.c file. This flaw leads to a possible out-of-bounds write , which could allow a local attacker to achieve elevation of privilege (EoP) without requirin...

OSV-2024-1417 Heap-buffer-overflow in cv::PngDecoder::read_from_io

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=386688710 Crash type: Heap-buffer-overflow READ 4 Crash state: cv::PngDecoder::readfromio cv::PngDecoder::readchunk cv::PngDecoder::readHeader...

PT-2025-3337 · Openjpeg +6 · Openjpeg +6

Name of the Vulnerable Software and Affected Versions: OpenJPEG affected versions not specified Description: A flaw was found in the OpenJPEG project, where a heap buffer overflow condition may be triggered when certain options are specified while using the opj decompress utility. This can lead t...

PT-2025-3336 · Openjpeg +7 · Openjpeg +7

Name of the Vulnerable Software and Affected Versions: OpenJPEG project affected versions not specified Description: A flaw was found in the OpenJPEG project, where a heap buffer overflow condition may be triggered when certain options are specified while using the opj decompress utility. This ca...

PT-2025-23000

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw was found in GIMP when processing certain TGA image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricked into making serious...

PT-2025-16899 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 135.0.7049.95 Microsoft Edge Chromium-based versions affected versions not specified Description: A heap buffer overflow in Codecs in Google Chrome on Windows allowed a remote attacker to potentially exploit he...