CVE-2025-4605 USD File Parsing Memory Allocation Vulnerability

A maliciously crafted .usdc file, when loaded through Autodesk Maya, can force an uncontrolled memory allocation vulnerability. A malicious actor may leverage this vulnerability to cause a denial-of-service DoS, or cause data corruption...

CVE-2025-4605

CVE-2025-4605 relates to Autodesk Maya parsing of .usdc via MayaUSD, where an adversary‑crafted file can trigger an uncontrolled memory allocation, leading to DoS or data corruption. Connected sources specify affected software: Autodesk Maya (prior to 2025.3.1) and MayaUSD (prior to 0.32.0). The ...

CVE-2025-4605: Memory Allocation with Excessive Size Value

A maliciously crafted .usdc file, when loaded through Autodesk Maya, can force an uncontrolled memory allocation vulnerability. A malicious actor may leverage this vulnerability to cause a denial-of-service DoS, or cause data corruption...

Autodesk Maya security vulnerabilities

Autodesk Maya is a three-dimensional computer graphics software from the American company Autodesk. It is widely used to create digital special effects for movies, television, commercials, computer games and video games. A security vulnerability exists in Autodesk Maya that originates from an...

PT-2025-25215 · Autodesk · Autodesk Maya

Name of the Vulnerable Software and Affected Versions: Autodesk Maya affected versions not specified Description: A maliciously crafted .usdc file, when loaded through Autodesk Maya, can force an uncontrolled memory allocation issue. This can be leveraged by a malicious actor to cause a...

IBM DB2 Memory Distribution DoS

The vulnerability of IBM DB2 database management systems, including IBM DB2 Connect Server, is related to uncontrolled memory allocation. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafted requests...

NewStart CGSL MAIN 7.02 : glibc Multiple Vulnerabilities (NS-SA-2025-0079)

The remote NewStart CGSL host, running version MAIN 7.02, has glibc packages installed that are affected by multiple vulnerabilities: - nscd: netgroup cache assumes NSS callback uses in-buffer strings The Name Service Cache Daemon's nscd netgroup cache can corrupt memory when the NSS callback doe...

RHEL 10 : osbuild-composer (RHSA-2025:7503)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:7503 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for...

RHEL 10 : grafana (RHSA-2025:7475)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:7475 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: golang-jwt/jwt: jwt-go...

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.13.3 fixes and container updates

Red Hat Advanced Cluster Management for Kubernetes 2.13.3 General Availability release, with updates to container images and bug fixes. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...

libsoup: Denial of Service attack to websocket server

A flaw was found in libsoup. The SoupWebsocketConnection may accept a large WebSocket message, which may cause libsoup to allocate memory and lead to a denial of service DoS...

libsoup: Denial of Service attack to websocket server

A flaw was found in libsoup. The SoupWebsocketConnection may accept a large WebSocket message, which may cause libsoup to allocate memory and lead to a denial of service DoS...

Important: Red Hat Security Advisory: RHODF-4.16-RHEL-9 security update

Updated images are now available for RHODF-4.16-RHEL-9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in...

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.9.9 bug fixes and container updates

Red Hat Advanced Cluster Management for Kubernetes 2.9.9 General Availability release, with updates to container images and bug fixes. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CVE-2025-49000 InvenTree has uncontrolled memory allocation via built-in label-sheet plugin

InvenTree is an Open Source Inventory Management System. Prior to version 0.17.13, the skip field in the built-in label-sheet plugin lacks an upper bound, so a large value forces the server to allocate an enormous Python list. This lets any authenticated label-printing user trigger a...

CVE-2025-49000 InvenTree has uncontrolled memory allocation via built-in label-sheet plugin

InvenTree is an Open Source Inventory Management System. Prior to version 0.17.13, the skip field in the built-in label-sheet plugin lacks an upper bound, so a large value forces the server to allocate an enormous Python list. This lets any authenticated label-printing user trigger a...

Important: Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.4.9 security updates and bug fixes

Multicluster Engine for Kubernetes 2.4.9 General Availability release images, which fix bugs and update container images. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

Important: Red Hat Security Advisory: Red Hat multicluster global hub 1.4.1 bug fixes and container updates

Red Hat multicluster global hub 1.4.1 general availability release, with updates to container images and bug fixes. Red Hat multicluster global hub 1.4.1 images This advisory contains the container images for multicluster global hub. These container images provide enhancements. security fixes:...

PT-2025-27708

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A potential NULL pointer dereference issue has been identified in the Linux kernel, specifically in the gve alloc pending packet function within the TX DQO. This function can return...

CVE-2025-2518: Memory Allocation with Excessive Size Value

IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query...