iccDEV security vulnerability

iccDEV is an open-source color configuration code library developed by the International Color Consortium. Versions of iccDEV prior to 2.3.1.1 contained security vulnerabilities. These vulnerabilities stemmed from a heap buffer overflow in the CIccMpeCalculator::Read function, which could lead to...

PT-2026-32710

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=475305126 Crash type: Heap-buffer-overflow READ Crash state: check sync pes Demux demux process stream...

PT-2025-46926

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=457106694 Crash type: Stack-buffer-overflow READ 8 Crash state: snmp input snmp parse trap fuzzer.c...

graphicsmagick:coder_MVG_fuzzer: Global-buffer-overflow in void jxl::N_AVX2::WriteToOutputStage::StoreUnsignedRow<unsigned char>

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6397769050030080 Project: graphicsmagick Fuzzing Engine: afl Fuzz Target: coderMVGfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type: Global-buffer-overflow READ 16 Crash...

EUVD-2022-35113

Malicious code in bioql PyPI...

PT-2025-42418

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=448424495 Crash type: Global-buffer-overflow READ 4 Crash state: icaltime day of year expand bymonth days expand year days...

CVE-2025-58050

The PCRE2 library is a set of C functions that implement regular expression pattern matching. In version 10.45, a heap-buffer-overflow read vulnerability exists in the PCRE2 regular expression matching engine, specifically within the handling of the scs:... Scan SubString verb when combined with...

Linux Distros Unpatched Vulnerability : CVE-2018-20230

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in PSPP 1.2.0. There is a heap-based buffer overflow at the function readbytesinternal in utilities/pspp-dump-sav.c, which allows...

CVE-2025-55004

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-1, ImageMagick is vulnerable to heap-buffer overflow read around the handling of images with separate alpha channels when performing image magnification in ReadOneMNGIMage. This c...

PT-2025-37381

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437653047 Crash type: Heap-buffer-overflow READ Crash state: check sync pes Demux demux process stream...

PT-2025-37384

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437593508 Crash type: Heap-buffer-overflow READ 7 Crash state: Open demux Probe vlc module load...

ALPINE-CVE-2024-25178

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in ljstate.c...

PT-2025-37251

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=429330008 Crash type: Heap-buffer-overflow READ 1 Crash state: JS CallInternal async func resume js async function resume...

PT-2025-39510

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=427814448 Crash type: Heap-buffer-overflow READ 5 Crash state: libssl.soNUMBER libssl.soNUMBER SSL CTX set cipher list...

CVE-2025-6120 Open Asset Import Library Assimp HL1MDLLoader.cpp read_meshes heap-based overflow

A vulnerability classified as critical was found in Open Asset Import Library Assimp up to 5.4.3. Affected by this vulnerability is the function readmeshes in the library assimp/code/AssetLib/MDL/HalfLife/HL1MDLLoader.cpp. The manipulation leads to heap-based buffer overflow. It is possible to...

PT-2025-29582

Name of the Vulnerable Software and Affected Versions Assimp affected versions not specified Description The software is susceptible to a heap-buffer-overflow read issue. The crash occurs during the Assimp::SceneCombiner::CopyScene function, which is called within Assimp::Exporter::Export and...

PT-2025-8753

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A heap-buffer-overflow read issue has been identified, which can cause a crash. The crash occurs due to a heap buffer overflow read of 8 bytes. The functions involved in the crash include se a...

ghostscript:gs_device_pdfwrite_opts_fuzzer: Global-buffer-overflow in gs_scan_token

Detailed Report: https://oss-fuzz.com/testcase?key=6142763745214464 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwriteoptsfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x5735759fae60 Crash State:...

SUSE CVE-2025-20128

A vulnerability in the Object Linking and Embedding 2 OLE2 decryption routine of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an integer underflow in a bounds check that allows for a heap buff...

PT-2024-40551

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided input. Description: The issue is related to a stack-buffer-overflow read, which occurs in the SmilesParseOps parser. Specifically, the crash happens in the parse atom props and...