CVE-2025-1919

Out of bounds read in Media in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-1917

A vulnerability in the user interface of Google Chrome on Android prior to version 134.0.6998.35 allows a remote attacker to perform UI spoofing . The root cause is an inappropriate implementation involving the incorrect limitation of visualized layers within the browser's UI. By navigating to a ...

CVE-2025-1917

Inappropriate implementation in Browser UI in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-1919

Out of bounds read in Media in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: Medium...

AMD CPU Microcode Signature Verification Vulnerability

AMD ID: AMD-SB-7033 Potential Impact: Loss of integrity of x86 instruction execution, loss of confidentiality and integrity of data in x86 CPU privileged context and compromise of SMM execution environment Severity: Medium Summary Researchers from Google®have provided AMD with a report titled “AM...

PT-2025-9740

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 134.0.6998.35 Description The issue is an out of bounds read in the Media component, allowing a remote attacker to potentially access memory out of bounds via a crafted HTML page. The severity of this issue is...

PT-2025-9738 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome on Android versions prior to 134.0.6998.35 Description: The issue is related to an inappropriate implementation in the Browser UI, allowing a remote attacker to perform UI spoofing via a crafted HTML page. The severity of this...

libjxl:streaming_fuzzer: Heap-buffer-overflow in jxl::WriteTokens

Project: https://github.com/libjxl/libjxl.git Detailed Report: https://oss-fuzz.com/testcase?key=5783612599631872 Project: libjxl Fuzzing Engine: libFuzzer Fuzz Target: streamingfuzzer Job Type: libfuzzerasanlibjxl Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

libredwg:llvmfuzz: Index-out-of-bounds in dwg_decode_eed

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=6748398014758912 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerubsanlibredwg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

libucl:ucl_add_string_fuzzer: Object-size in ucl_array_append

Project: https://github.com/vstakhov/libucl.git Detailed Report: https://oss-fuzz.com/testcase?key=5508733199515648 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerubsanlibucl Platform Id: linux Crash Type: Object-size Crash Address: Crash State:...

pcapplusplus:FuzzTargetNg: Use-of-uninitialized-value in pcpp::HeaderField::HeaderField

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5376722296176640 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTargetNg Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

CVE-2025-1006

Use after free in Network in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted web app. Chromium security severity: Medium...

CVE-2025-1006

Use after free in Network in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted web app. Chromium security severity: Medium...

CVE-2025-1006

A use after free vulnerability in the Network component of Google Chrome (prior to version 133.0.6943.126 ) allows a remote attacker to potentially exploit heap corruption via a crafted web application. This vulnerability affects the Chromium engine, as evidenced by its presence in related distri...

ffmpeg:ffmpeg_AV_CODEC_ID_AAC_LATM_fuzzer: Use-of-uninitialized-value in av_buffer_unref

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5434110676107264 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDAACLATMfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

net-snmp:snmp_parse_args_fuzzer: Stack-buffer-overflow in se_read_conf

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=4824646101041152 Project: net-snmp Fuzzing Engine: libFuzzer Fuzz Target: snmpparseargsfuzzer Job Type: libfuzzerasannet-snmp Platform Id: linux Crash Type:...

wavpack:fuzzer: Object-size in unpack_dsd_samples

Project: https://github.com/dbry/WavPack.git Detailed Report: https://oss-fuzz.com/testcase?key=6717620724498432 Project: wavpack Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzerubsanwavpack Platform Id: linux Crash Type: Object-size Crash Address: Crash State: unpackdsdsamples...

N-MDM - Security Advisory Ivanti Neurons for MDM (N-MDM)

Summary Ivanti has released updates for Ivanti Neurons for MDM N-MDM which addresses a medium severity vulnerability. We are not aware of any customers being exploited by this vulnerability at the time of disclosure. Vulnerability Details: Description | CVSS Score Severity | CVSS Vector | CWE...

Astra Linux – Vulnerability in Chromium

In versions of Google Chrome prior to 132.0.6834.83, races in frames allowed a remote attacker who convinced a user to perform certain UI gestures to perform UI spoofing through a crafted HTML page. Chromium security severity: Medium...

Azure Linux 3.0 Security Update: python3 (CVE-2024-6923)

The version of python3 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-6923 advisory. - There is a MEDIUM severity vulnerability affecting CPython. The email module didn't properly quote newlines...