PT-2026-4862

Out-of-bounds Write, Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in azerothcore azerothcore-wotlk deps/zlib modules. This vulnerability is associated with program files inflate.C. This issue affects azerothcore-wotlk: through v4.0.0...

dlib security vulnerabilities

dlib is a toolkit developed by Davis E. King for machine learning and data analysis applications. Versions of dlib prior to v19.24.9 contained security vulnerabilities, which were caused by an out-of-bound write operation and buffer overflow in the zlib component inflate.C, potentially allowing f...

PT-2026-4868

Out-of-bounds Write, Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in davisking dlib dlib/external/zlib modules. This vulnerability is associated with program files inflate.C. This issue affects dlib: before v19.24.9...

Furnace security vulnerabilities

Furnace is a chip tuning tracker developed by tildearrow. There is a security vulnerability in furnace, which stems from an out-of-bounds write operation and buffer overflow in the zlib component inflate.C, potentially allowing for the execution of arbitrary code...

X-TRACK security vulnerabilities

X-TRACK is a GPS cycling speedometer developed by VIFEX personal developers, which supports offline maps and track recording. X-TRACK versions 2.7 and earlier had security vulnerabilities, stemming from buffer copying operations in the inflate.C program file, which allowed out-of-bounds writes an...

Azure Linux 3.0 Security Update: syslinux (CVE-2011-3045)

The version of syslinux installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2011-3045 advisory. - Integer signedness error in the pnginflate function in pngrutil.c in libpng before 1.4.10beta01, as used in...

MiracleLinux 8 : zlib-1.2.11-19.el8 (AXSA:2022-3921:04)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3921:04 advisory. zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field CVE-2022-37434 Tenable has extracted the...

MiracleLinux 8 : rsync-3.1.3-19.el8 (AXSA:2022-4191:08)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-4191:08 advisory. zlib: heap-based buffer over-read and overflow in inflate in inflate.c via a large gzip header extra field CVE-2022-37434 Tenable has extracted the preceding...

CVE-2025-68248

In the Linux kernel, the following vulnerability has been resolved: vmwballoon: indicate success when effectively deflating during migration When migrating a balloon page, we first deflate the old page to then inflate the new page. However, if inflating the new page succeeded, we effectively...

UBUNTU-CVE-2025-68248

In the Linux kernel, the following vulnerability has been resolved: vmwballoon: indicate success when effectively deflating during migration When migrating a balloon page, we first deflate the old page to then inflate the new page. However, if inflating the new page succeeded, we effectively...

CVE-2025-68248

In the Linux kernel, the following vulnerability has been resolved: vmwballoon: indicate success when effectively deflating during migration When migrating a balloon page, we first deflate the old page to then inflate the new page. However, if inflating the new page succeeded, we effectively...

CVE-2025-68248 vmw_balloon: indicate success when effectively deflating during migration

In the Linux kernel, the following vulnerability has been resolved: vmwballoon: indicate success when effectively deflating during migration When migrating a balloon page, we first deflate the old page to then inflate the new page. However, if inflating the new page succeeded, we effectively...

Advisory ROSA-SA-2025-3103

Software: rsync 3.1.3 OS: ROSA Virtualization 2.1 packageevrstring: rsync-3.1.3-20.rv3 CVE-ID: CVE-2022-37434 BDU-ID: 2022-05325 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability in the inflate.c component of the zlib library is related to an operation exceeding buffer boundaries in memory...

Malicious code in ignite-puppeteer-procyon-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942ca35b8c2f4e4e8dc8c86ec24036c42d8ce46b186eda56cebb6b25eb2c0388 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perturbation-thuban-neuromorphic-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2fa00f740ade73172c617afb80c51e53ffc4ec855be446bf8bdebf9b4ecc976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oauth-neptunology-lint-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95c4cc16ff1626173c0195d83335a1da888d78e5e7a6f5e830831b1ee8647d3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-perseus-pm2-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc57a4e4f391d90b732c2fbc2a15299c92d0e333ee56ee1fd78c4fcc255ea485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tree-notify-fire-resolve-scale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58286446bdb6c6f5f5005a6bc809b0344a781e5d24164ab1e56e1fe30e434940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remark-io-sass-loader-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ef20101ee38f63c38e24ae8f075da72835328afa3145f6b4e7eeca7e3e984ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-titan-pavo-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb1598783b15eca6936335df4a84a0344e4d4d3e714804992c93e368d3a8cf3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...