5979 matches found
CVE-2025-6120 Open Asset Import Library Assimp HL1MDLLoader.cpp read_meshes heap-based overflow
A vulnerability classified as critical was found in Open Asset Import Library Assimp up to 5.4.3. Affected by this vulnerability is the function readmeshes in the library assimp/code/AssetLib/MDL/HalfLife/HL1MDLLoader.cpp. The manipulation leads to heap-based buffer overflow. It is possible to...
Astra Linux – Vulnerability in spdlog
A vulnerability, classified as problematic, was discovered in spdlog up to version 1.15.1. This issue affects the function scopedpadder in the library include/spdlog/patternformatter-inl.h. The vulnerability causes excessive resource consumption. An attack can be launched on the local host. The...
Astra Linux – Vulnerability in Augeas
A vulnerability has been discovered in Hercules Augeas 1.14.1 and is classified as problematic. This vulnerability affects the recaseexpand function of the src/fa.c file. Manipulation of the re argument leads to a null pointer dereference. Local attacks are required to exploit this vulnerability...
CVE-2025-6119
A vulnerability classified as critical has been found in Open Asset Import Library Assimp up to 5.4.3. Affected is the function Assimp::BVHLoader::ReadNodeChannels in the library assimp/code/AssetLib/BVH/BVHLoader.cpp. The manipulation of the argument pNode leads to use after free. Attacking...
CVE-2025-6119 Open Asset Import Library Assimp BVHLoader.cpp ReadNodeChannels use after free
A vulnerability classified as critical has been found in Open Asset Import Library Assimp up to 5.4.3. Affected is the function Assimp::BVHLoader::ReadNodeChannels in the library assimp/code/AssetLib/BVH/BVHLoader.cpp. The manipulation of the argument pNode leads to use after free. Attacking...
CVE-2025-6119 Open Asset Import Library Assimp BVHLoader.cpp ReadNodeChannels use after free
A vulnerability classified as critical has been found in Open Asset Import Library Assimp up to 5.4.3. Affected is the function Assimp::BVHLoader::ReadNodeChannels in the library assimp/code/AssetLib/BVH/BVHLoader.cpp. The manipulation of the argument pNode leads to use after free. Attacking...
CVE-2025-33062
Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally...
CVE-2025-32720
Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally...
CVE-2025-32714
Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2025-33067
Improper privilege management in Windows Kernel allows an unauthorized attacker to elevate privileges locally...
CVE-2025-35978
Improper restriction of communication channel to intended endpoints issue exists in UpdateNavi V1.4 L10 to L33 and UpdateNaviInstallService Service 1.2.0091 to 1.2.0125. If a local authenticated attacker send malicious data, an arbitrary registry value may be modified or arbitrary code may be...
CVE-2025-47962
Improper access control in Windows SDK allows an authorized attacker to elevate privileges locally...
CVE-2025-47956
External control of file name or path in Windows Security App allows an authorized attacker to perform spoofing locally...
CVE-2025-33067
Improper privilege management in Windows Kernel allows an unauthorized attacker to elevate privileges locally...
CVE-2025-32718
Integer overflow or wraparound in Windows SMB allows an authorized attacker to elevate privileges locally...
CVE-2025-32718
Integer overflow or wraparound in Windows SMB allows an authorized attacker to elevate privileges locally...
CVE-2025-32713
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
CVE-2025-32712
Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...