CVE-2025-6633 RBG File Parsing Out-of-Bounds Write Vulnerability

A maliciously crafted RBG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2025-6633 RBG File Parsing Out-of-Bounds Write Vulnerability

A maliciously crafted RBG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2025-6632 PSD File Parsing Out-of-Bounds Read Vulnerability

A maliciously crafted PSD file, when linked or imported into Autodesk 3ds Max, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-6632 PSD File Parsing Out-of-Bounds Read Vulnerability

A maliciously crafted PSD file, when linked or imported into Autodesk 3ds Max, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-6632

CVE-2025-6632 corresponds to a vulnerability in Autodesk 3ds Max where a specially crafted PSD file can trigger an Out-of-Bounds Read in the PSD parsing path. Affected component: Autodesk 3ds Max (PSD file handling). Impact statements from the sources indicate potential crash, exposure of sensiti...

PT-2025-32224 · Autodesk · Autodesk 3Ds Max

Name of the Vulnerable Software and Affected Versions: Autodesk 3ds Max affected versions not specified Description: A maliciously crafted RBG file, when parsed, can trigger an Out-of-Bounds Write issue. Successful exploitation may allow an attacker to cause a crash, corrupt data, or execute...

PT-2025-32225 · Autodesk · Autodesk 3Ds Max

Name of the Vulnerable Software and Affected Versions: Autodesk 3ds Max affected versions not specified Description: A maliciously crafted TGA file, when linked or imported into Autodesk 3ds Max, can lead to a memory corruption issue. A malicious actor can potentially exploit this issue to execut...

PT-2025-32223 · Autodesk · Autodesk 3Ds Max

Name of the Vulnerable Software and Affected Versions: Autodesk 3ds Max affected versions not specified Description: A maliciously crafted PSD file, when linked or imported into Autodesk 3ds Max, can trigger an Out-of-Bounds Read issue. An attacker can exploit this to cause a crash, potentially...

Autodesk 3ds Max 安全漏洞

Autodesk 3ds Max is a full-featured, three-dimensional computer graphics software from the American company Autodesk. A security vulnerability exists in Autodesk 3ds Max that stems from a specially crafted TGA file that could lead to memory corruption...

Autodesk 3ds Max 安全漏洞

Autodesk 3ds Max is a full-featured, three-dimensional computer graphics software from the American company Autodesk. A security vulnerability exists in Autodesk 3ds Max that stems from a specially crafted RBG file that could lead to out-of-bounds writes...

XML Entity Expansion

Overview Affected versions of this package are vulnerable to XML Entity Expansion via the messagemaxbytesize setting configured in the decoderawsaml function. An attacker can cause resource exhaustion by submitting a specially crafted large SAML response that is validated for Base64 format before...

SUSE CVE-2025-38434

In the Linux kernel, the following vulnerability has been resolved: Revert "riscv: Define TASKSIZEMAX for accessok" This reverts commit ad5643cf2f69 "riscv: Define TASKSIZEMAX for accessok". This commit changes TASKSIZEMAX to be LONGMAX to optimize accessok, because the previous TASKSIZEMAX defau...

Exploit for SQL Injection in Piwigo

CVE-2024-43018 - x Assign an ID - Be officially populate...

CVE-2024-43018

Piwigo 13.8.0 and below is vulnerable to SQL Injection in the parameters maxlevel and minregister. These parameters are used in wsusergerList function from file include\wsfunctions\pwg.users.php and this same function is called by ws.php file at some point can be used for searching users in...

Piwigo 安全漏洞

Piwigo is Piwigo open source a set of Web-based open source image library software. The software includes features such as image management, image categorization and permission management. A security vulnerability exists in Piwigo 13.8.0 and earlier versions, which stems from the unvalidated...

Exploit for SQL Injection in Piwigo

CVE-2024-43018 - x Assign an ID - X Be officially populate...

DEBIAN-CVE-2025-38434

In the Linux kernel, the following vulnerability has been resolved: Revert "riscv: Define TASKSIZEMAX for accessok" This reverts commit ad5643cf2f69 "riscv: Define TASKSIZEMAX for accessok". This commit changes TASKSIZEMAX to be LONGMAX to optimize accessok, because the previous TASKSIZEMAX defau...

UBUNTU-CVE-2025-38434

In the Linux kernel, the following vulnerability has been resolved: Revert "riscv: Define TASKSIZEMAX for accessok" This reverts commit ad5643cf2f69 "riscv: Define TASKSIZEMAX for accessok". This commit changes TASKSIZEMAX to be LONGMAX to optimize accessok, because the previous TASKSIZEMAX defau...

CVE-2025-38434

In the Linux kernel, the following vulnerability has been resolved: Revert "riscv: Define TASKSIZEMAX for accessok" This reverts commit ad5643cf2f69 "riscv: Define TASKSIZEMAX for accessok". This commit changes TASKSIZEMAX to be LONGMAX to optimize accessok, because the previous TASKSIZEMAX defau...

AZL-65687 CVE-2025-38391 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: do not index invalid pinassignments A poorly implemented DisplayPort Alt Mode port partner can indicate that its pin assignment capabilities are greater than the maximum value, DPPINASSIGNF. In...