CVE-2025-0999

Heap buffer overflow in V8 in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2025-0999

Heap buffer overflow in V8 in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2025-0999

Heap buffer overflow in V8 in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2025-0999

Heap buffer overflow in V8 in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

Google Chrome Security Update (stable-channel-update-for-desktop_18-2025-02) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

CVE-2025-26623 Use After Free in Exiv2

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A heap buffer overflow was found in Exiv2 versions v0.28.0 to v0.28.4. Versions prior to v0.28.0, such as v0.27.7, are not affected. Exiv2 is a command-line utility and C++...

CVE-2025-26623 Use After Free in Exiv2

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A heap buffer overflow was found in Exiv2 versions v0.28.0 to v0.28.4. Versions prior to v0.28.0, such as v0.27.7, are not affected. Exiv2 is a command-line utility and C++...

CVE-2025-26623

CVE-2025-26623 affects Exiv2 (C++ library/CLI) and is caused by a heap buffer overflow in the encoding/writing path. Affected versions are v0.28.0 through v0.28.4; v0.27.7 and earlier are not affected. The overflow occurs when Exiv2 is used to write metadata into a crafted image file, potentially...

CVE-2025-22920

CVE-2025-22920 is a heap buffer overflow in FFmpeg prior to commit 4bf784c, triggered by crafted media files in avformat while processing tile grid group streams. Consequence: memory corruption that can cause a Denial of Service. Root cause: unsafe handling leading to a heap overflow. A fix is av...

PT-2025-7467

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned. Description Integer overflow may lead to out-of-bounds write. Recommendations At the moment, there is no information about a newer version that contains a fix for this issue...

Google Chrome < 133.0.6943.126 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 133.0.6943.126. It is, therefore, affected by multiple vulnerabilities as referenced in the 202502stable-channel-update-for-desktop18 advisory. - Use after free in Network in Google Chrome prior to 133.0.6943.126 allowe...

Stable Channel Update for Desktop

The Stable channel has been updated to 133.0.6943.126/.127 for Windows, Mac and 133.0.6943.126 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept...

PT-2025-7481

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 133.0.6943.126 Description A heap buffer overflow in V8 in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. The issue has a high security severity rating fr...

chromium -- multiple security fixes

Chrome Releases reports: This update includes 3 security fixes: 394350433 High CVE-2025-0999: Heap buffer overflow in V8. Reported by Seunghyun Lee @0x10n on 2025-02-04 383465163 High CVE-2025-1426: Heap buffer overflow in GPU. Reported by un3xploitable and GF on 2024-12-11 390590778 Medium...

CVE-2025-22920

A heap buffer overflow vulnerability in FFmpeg before commit 4bf784c allows attackers to trigger a memory corruption via supplying a crafted media file in avformat when processing tile grid group streams. This can lead to a Denial of Service DoS...

CVE-2025-22920

A heap buffer overflow vulnerability in FFmpeg before commit 4bf784c allows attackers to trigger a memory corruption via supplying a crafted media file in avformat when processing tile grid group streams. This can lead to a Denial of Service DoS...

CVE-2025-22920

A heap buffer overflow vulnerability in FFmpeg before commit 4bf784c allows attackers to trigger a memory corruption via supplying a crafted media file in avformat when processing tile grid group streams. This can lead to a Denial of Service DoS...

PT-2025-7506 · Google +1 · Google Chrome +1

Name of the Vulnerable Software and Affected Versions: Google Chrome on Android versions prior to 133.0.6943.126 Description: A heap buffer overflow in the GPU of Google Chrome on Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. The severity of thi...

OSV-2025-131 Heap-buffer-overflow in vips_foreign_save_heif_write_block

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=396460413 Crash type: Heap-buffer-overflow WRITE Crash state: vipsforeignsaveheifwriteblock wbufferwritethread vipsthreadsetwork...

CVE-2024-57970

libarchive through 3.7.7 has a heap-based buffer over-read in headergnulonglink in archivereadsupportformattar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname...