CVE-2025-3500

Integer Overflow or Wraparound vulnerability in Avast Antivirus 25.1.981.6 on Windows allows Privilege Escalation.This issue affects Antivirus: from 25.1.981.6 before 25.3...

CVE-2025-3500 Integer Overflow in Avast Antiviurs 25.1.981.6 on Windows may result in privilege escalation

Integer Overflow or Wraparound vulnerability in Avast Antivirus 25.1.981.6 on Windows allows Privilege Escalation.This issue affects Antivirus: from 25.1.981.6 before 25.3...

CVE-2025-3500

CVE-2025-3500 describes an Integer Overflow/Wraparound in Avast Antivirus for Windows (affected: 25.1.981.6 up to but before 25.3). The root cause is an overflow in AvastResourceParser::AllocateBuffer(int size) where size * sizeof(struct) can under-allocate a buffer, enabling privilege escalation...

EUVD-2025-200018

Integer Overflow or Wraparound vulnerability in Avast Antivirus 25.1.981.6 on Windows allows Privilege Escalation.This issue affects Antivirus: from 25.1.981.6 before 25.3...

CVE-2025-3500 Integer Overflow in Avast Antiviurs 25.1.981.6 on Windows may result in privilege escalation

Integer Overflow or Wraparound vulnerability in Avast Antivirus 25.1.981.6 on Windows allows Privilege Escalation.This issue affects Antivirus: from 25.1.981.6 before 25.3...

gimp: GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability

A remote code execution vulnerability exists in GIMP due to improper validation of user-supplied data during the parsing of WBMP Wireless Bitmap files. The flaw occurs because an integer overflow can happen before memory allocation, leading to a heap-based buffer overflow. An attacker can exploit...

gimp: GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability

A remote code execution RCE vulnerability exists in GIMP’s FF file parsing functionality. The flaw stems from improper validation of user-supplied data, leading to an integer overflow before buffer allocation. When a user opens a malicious FF image file, the overflow can cause incorrect memory...

assimp: Open Asset Import Library Assimp Q3DLoader.cpp InternReadFile heap-based overflow

A flaw was found in the assimp library. Processing a specially crafted input file can trigger a heap-based buffer overflow due to an integer overflow when reading texture data, causing a crash to the application linked to the library and resulting in a denial of service...

kernel: nbd: fix incomplete validation of ioctl arg

A flaw has been found in the Linux kernel’s NBD drivers.The issue stems from incomplete validation of IOCTL arguments passed to the NBD driver. Specifically, oversized or unchecked arguments may lead to a signed integer overflow in blockwritefullpage and misuse of argument values cast to int in...

kernel: nbd: fix incomplete validation of ioctl arg

A flaw has been found in the Linux kernel’s NBD drivers.The issue stems from incomplete validation of IOCTL arguments passed to the NBD driver. Specifically, oversized or unchecked arguments may lead to a signed integer overflow in blockwritefullpage and misuse of argument values cast to int in...

assimp: Open Asset Import Library Assimp Q3DLoader.cpp InternReadFile heap-based overflow

A flaw was found in the assimp library. Processing a specially crafted input file can trigger a heap-based buffer overflow due to an integer overflow when reading texture data, causing a crash to the application linked to the library and resulting in a denial of service...

PUB-A-438955204

In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2025-48537

Name of the Vulnerable Software and Affected Versions KissFFT versions prior to commit 1b083165 Description The software contains an integer overflow in the kiss fft alloc function within the kiss fft.c file. This occurs on 32-bit platforms where size t is 32-bit. The nfft parameter is not...

KISS FFT 输入验证错误漏洞

KISS FFT is a Fourier Transform computational library by mborgerding individual developers. An input validation error vulnerability exists in versions of KISS FFT prior to 1b083165, which stems from an integer overflow in the function kissfftalloc in kissfft.c, which could result in a heap buffer...

ASB-A-443763663

In multiple functions of memprotect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-427215169

In GetTachyonCommand of tachyonservercommon.h, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Linux Distros Unpatched Vulnerability : CVE-2025-63938

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tinyproxy through 1.11.2 contains an integer overflow vulnerability in the stripreturnport function within src/reqs.c. CVE-2025-63938 Note that Nessus relies on...

Glib: integer overflow in in g_escape_uri_string()

...

CLSA-2025-1764324579 Fix CVE(s): CVE-2025-62171

SECURITY UPDATE: integer overflow vulnerability in BMP decoder on 32-bit systems - debian/patches/CVE-2025-62171.patch: add extra check to resolve issue on 32-bit systems - CVE-2025-62171...

CLSA-2025-1764324335 Fix CVE(s): CVE-2025-62171

SECURITY UPDATE: integer overflow vulnerability in BMP decoder on 32-bit systems - debian/patches/CVE-2025-62171.patch: add extra check to fix issue on 32-bit systems - CVE-2025-62171...