CVE-2025-57697

AstrBot Project v3.5.22 has an arbitrary file read vulnerability in function encodeimagebs64. Since the encodeimagebs64 function defined in entities.py opens the image specified by the user in the request body and returns the image content as a base64-encoded string without checking the legitimac...

EUVD-2025-38261

AstrBot has an arbitrary file read vulnerability in function encodeimagebs64...

Directory Traversal

Overview AstrBot is a 易上手的多平台 LLM 聊天机器人及开发框架 Affected versions of this package are vulnerable to Directory Traversal via the encodeimagebs64 function. An attacker can access sensitive files by supplying a crafted file path in the request body. Details A Directory Traversal attack also known as pa...

CVE-2025-57697

AstrBot Project v3.5.22 has an arbitrary file read vulnerability in function encodeimagebs64. Since the encodeimagebs64 function defined in entities.py opens the image specified by the user in the request body and returns the image content as a base64-encoded string without checking the legitimac...

PT-2025-45473

Name of the Vulnerable Software and Affected Versions AstrBot Project version 3.5.22 Description The software contains an arbitrary file read issue in the encode image bs64 function. This function, defined in entities.py, opens an image specified by a user-controlled request body and returns its...

CVE-2025-57697

AstrBot Project v3.5.22 has an arbitrary file read vulnerability in function encodeimagebs64. Since the encodeimagebs64 function defined in entities.py opens the image specified by the user in the request body and returns the image content as a base64-encoded string without checking the legitimac...

CVE-2025-27049

Transient DOS while processing IOCTL call for image encoding...

CVE-2025-47341

memory corruption while processing an image encoding completion event...

CVE-2025-47341

memory corruption while processing an image encoding completion event...

CVE-2025-27049

Transient DOS while processing IOCTL call for image encoding...

CVE-2025-47341 Buffer Copy Without Checking Size of Input in Camera

memory corruption while processing an image encoding completion event...

CVE-2025-47341

CVE-2025-47341 describes a memory corruption issue in Qualcomm chipsets triggered while processing an image encoding completion event. Affected component is tied to image encoding handling; underlying root cause is memory handling during completion processing. The CVE is tracked with high severit...

CVE-2025-47341 Buffer Copy Without Checking Size of Input in Camera

memory corruption while processing an image encoding completion event...

EUVD-2025-33239

memory corruption while processing an image encoding completion event...

CVE-2025-27049

CVE-2025-27049 affects Qualcomm chipsets. The vulnerability is described as a transient denial of service when processing an IOCTL call for image encoding, with a MEDIUM base CVSSv3.1 score (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) and a HIGH impact on availability. Connected documents corroborate a ...

EUVD-2025-33246

Transient DOS while processing IOCTL call for image encoding...

CVE-2025-27049 Buffer Over-read in Camera

Transient DOS while processing IOCTL call for image encoding...

CVE-2025-27049 Buffer Over-read in Camera

Transient DOS while processing IOCTL call for image encoding...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a memory corruption when processing image encoding completion events...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that could result in a denial of service when processing IOCTL calls for image encoding...