EUVD-2017-6388

Malware in sbrugna...

EUVD-2020-7790

Malware in sbrugna...

EUVD-2019-2698

Malware in sbrugna...

EUVD-2019-2692

Malware in sbrugna...

EUVD-2019-0464

Malware in sbrugna...

EUVD-2019-17098

Malware in sbrugna...

EUVD-2017-16003

Malware in sbrugna...

EUVD-2025-9921

Malicious code in bioql PyPI...

EUVD-2022-3710

Malicious code in bioql PyPI...

Free of Memory not on the Heap

Overview Affected versions of this package are vulnerable to Free of Memory not on the Heap in the TIFFCROP utility. An attacker can cause denial of service by triggering memory corruption through crafted input files. Remediation Upgrade libtiff to version 4.7.1 or higher. References - GitLab Iss...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the ggufinitfromfileimpl function in the gguf.cpp file. An attacker can cause heap out-of-bounds read or write by providing specially crafted input files. Remediation Upgrade llama-cpp to version b6565 or...

CVE-2020-27788

An out-of-bounds read access vulnerability was discovered in UPX in PackLinuxElf64::canPack function of plxelf.cpp file. An attacker with a crafted input file could trigger this issue that could cause a crash leading to a denial of service...

CVE-2025-4876

ConnectWise-Password-Encryption-Utility.exe in ConnectWise Risk Assessment allows an attacker to extract a hardcoded AES decryption key via reverse engineering. This key is embedded in plaintext within the binary and used in cryptographic operations without dynamic key management. Once obtained t...

gstreamer1-plugins-good: Use-After-Free read in Matroska CodecPrivate

A flaw was found in the GStreamer library. A use-after-free in the Matroska demuxer can cause crashes for certain input files, potentially allowing a malicious actor to trigger an application crash...

gstreamer1-plugins-base: GStreamer has an out-of-bounds write in SSA subtitle parser

A flaw was found in the GStreamer library. An out-of-bounds write in the SSA subtitle parser can cause crashes for certain input files, potentially allowing a malicious third party to trigger an application crash...

SUSE-SU-2025:20272-1 Security update for orc

This update for orc fixes the following issues: - CVE-2024-40897: Fixed stack-based buffer overflow inside the orc compiler when formatting error messages for certain input files bsc1228184...

FreeBSD : Mozilla -- null pointer dereference (ba6361be-1887-11f0-a8ce-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the ba6361be-1887-11f0-a8ce-b42e991fc52e advisory. [email protected] reports: A null pointer dereference may have inadvertently occurred in pk12util, a...

MGASA-2025-0134 Updated poppler packages fix security vulnerabilities

A floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an application to crash when handling malformed inputs associated with INTMIN. CVE-2025-32364 Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine...

CVE-2025-32365

Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine function in JBIG2Stream.cc because of a misplaced isOk check...

PT-2025-15076

Name of the Vulnerable Software and Affected Versions Poppler versions prior to 25.04.0 Description The issue allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine function due to a misplaced isOk check. This occurs in the JBIG2 parsing component of the software...