CVE-2025-63829

eProsima Fast-DDS v3.3 and before has an infinite loop vulnerability caused by integer overflow in the Timet:: fraction function...

RHEL 9 : libsoup (RHSA-2025:21655)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:21655 advisory. The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: libsoup: Integer Overflow in Cookie Expiration Da...

Siemens SCALANCE and RUGGEDCOM Devices Integer Overflow or Wraparound (CVE-2024-53161)

EDAC/bluefield: potential integer overflow The 64-bit argument for the get DIMM info SMC call consists of memctrlidx left-shifted 16 bits and OR-ed with DIMM index. With memctrlidx defined as 32-bits wide the left-shift operation truncates the upper 16 bits of information during the calculation o...

RHEL 7 : libsoup (RHSA-2025:21657)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:21657 advisory. The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: libsoup: Heap buffer over-read in...

cbor2 安全漏洞

cbor2 is a library with extensive tag support for encoding and decoding binary object representations in serialized format by the individual developer Alex Grönholm. A security vulnerability exists in cbor2 version 5.7.0 and earlier, which stems from an integer overflow and memory leak in the...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-53146)

NFSD: Prevent a potential integer overflow If the tag length is = U32MAX - 3 then the length + 4 addition can result in an integer overflow. Address this by splitting the decoding into several steps so that decodecbcompound4res does not have to perform arithmetic on the unsafe length value. This...

Mozilla Firefox ESR < 52.0.1

The version of Firefox ESR installed on the remote Windows host is prior to 52.0.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2017-08 advisory. - An integer overflow in createImageBitmap was reported through the Pwn2Own contest. The fix for this vulnerability disables...

Mozilla Firefox ESR < 52.0.1

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 52.0.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2017-08 advisory. - An integer overflow in createImageBitmap was reported through the Pwn2Own contest. The fix for this vulnerabilit...

Mozilla Thunderbird < 52.7

The version of Thunderbird installed on the remote Windows host is prior to 52.7. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2018-09 advisory. - Mozilla developers Jet Villegas and Randell Jesup reported memory safety bugs present in Firefox ESR 52.6 and...

RHEL 8 : libsoup (RHSA-2025:21665)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:21665 advisory. The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: libsoup: Integer Overflow in Cookie Expiration Da...

CVE-2025-63829

eProsima Fast-DDS up to v3.3 has an infinite loop vulnerability caused by an integer overflow in Time_t::fraction(). Affected: Fast-DDS v3.3 and earlier. Impact: potential denial of service due to indefinite looping; no exploitation details provided in the documents. Remediation: update to v3.4 o...

RHEL 9 : libsoup (RHSA-2025:21666)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:21666 advisory. The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: libsoup: Integer Overflow in Cookie Expiration Da...

Alibaba Cloud Linux 3 : 0165: redis:6 (ALINUX3-SA-2025:0165)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2025:0165 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-46817: Redis is an open source,...

CLSA-2025-1763122640 edk2: Fix of 3 CVEs

CVE-2022-36763: fix heap buffer overflow in TPM2 measure boot library when processing GPT partition tables - CVE-2022-36764: fix heap buffer overflow in TPM measure boot library when calculating PE image event size - CVE-2022-36765: fix integer overflow in CreateHob function that could lead to...

Security Bulletin: TSSC/IMC addresses multiple security vulnerabilities.

Summary TSSC/IMC addresses multiple security vulnerabilities, listed in the CVEs below. Vulnerability Details CVEID:CVE-2024-34397 DESCRIPTION: An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted...

Siemens RUGGEDCOM ROS Devices Integer Overflow or Wraparound (CVE-2021-42019)

Within a third-party component, the process to allocate partition size fails to check memory boundaries. Therefore, if a large amount is requested by an attacker, due to an integer-wrap around, it could result in a small size being allocated instead. This plugin only works with Tenable.ot. Please...

CVE-2025-40159

In the Linux kernel, the following vulnerability has been resolved: xsk: Harden userspace-supplied xdpdesc validation Turned out certain clearly invalid values passed in xdpdesc from userspace can pass xp,unalignedvalidatedesc and then lead to UBs or just invalid frames to be queued for xmit...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the libpq client library functions. An attacker can cause the client application to crash or experience a segmentation fault by sending specially crafted PostgreSQL protocol data that triggers integer...

CVE-2025-12818

Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for the application using libpq. Versions...

CLSA-2025-1763023946 Fix CVE(s): CVE-2020-35457

SECURITY UPDATE: Integer Overflow in goptiongroupaddentries - debian/patches/CVE-2020-35457.patch: goption: add a precondition to avoid GOptionEntry list overflow - CVE-2020-35457...