9555 matches found
PT-2025-2591 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a possible infinite loop in the parseUriInternal function of Intent.java due to improper input validation. This could lead to a local denial of service with no...
PT-2025-5652 · Git +1 · Kamailio
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions extract mediaip, parse sdp session, and parse mixed content. No...
llvm:llvm-parse-assembly-fuzzer: Heap-buffer-overflow in llvm::LLParser::PerFunctionState::PerFunctionState
Detailed Report: https://oss-fuzz.com/testcase?key=5309886774181888 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-parse-assembly-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x515000025f64 Crash State:...
SUSE CVE-2025-22865
Using ParsePKCS1PrivateKey to parse a RSA key that is missing the CRT values would panic when verifying that the key is well formed...
PT-2025-5651 · Git +1 · Kamailio
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 8 crash has been reported. The crash occurs in the following functions: extract candidate, parse sdp session, and parse mixed...
Medium: runfinch-finch
Issue Overview: An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service. CVE-2024-45338 golang-jwt is a Go implementation of JSON Web Tokens. Unclear...
Regular Expression Denial Of Service (ReDoS)
Parse-uri is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability is due to inefficient regular expression processing, which allows attackers to exploit crafted URLs and cause a denial of service...
PT-2025-2193 · Newtec · Newtec Ntc2299 +2
Name of the Vulnerable Software and Affected Versions: Newtec NTC2218, NTC2250, NTC2299 versions 1.0.1.1 through 2.2.6.19 Description: A buffer overflow issue in the swdownload binary allows attackers to execute arbitrary code. The parse INFO function uses an unrestricted sscanf to read a string ...
@tinyjs/tiny (1.6.6), @trezor/connect (>=9.0.0-beta.1, <=9.0.7) +2 more potentially affected by CVE-2024-36751 via parse-uri (>=1.0.3, <=1.0.7)
parse-uri NPM version =1.0.3, =9.0.0-beta.1, =9.0.0-beta.1, =0.2.0, =0.6.0 Source cves: CVE-2024-36751 Source advisory: OSV:GHSA-6FX8-H7JM-663J...
GHSA-6FX8-H7JM-663J parse-uri Regular expression Denial of Service (ReDoS)
An issue in parse-uri v1.0.9 allows attackers to cause a Regular expression Denial of Service ReDoS via a crafted URL. PoC js async function exploit const parseuri = require"parse-uri"; // This input is designed to cause excessive backtracking in the regex const craftedInput = 'http://example.com...
parse-uri Regular expression Denial of Service (ReDoS)
An issue in parse-uri v1.0.9 allows attackers to cause a Regular expression Denial of Service ReDoS via a crafted URL. PoC js async function exploit const parseuri = require"parse-uri"; // This input is designed to cause excessive backtracking in the regex const craftedInput = 'http://example.com...
@tinyjs/tiny (1.6.6), @trezor/connect (>=9.0.0-beta.1, <=9.0.7) +2 more potentially affected by CVE-2024-36751 via parse-uri (>=1.0.3, <=1.0.7)
parse-uri NPM version =1.0.3, =9.0.0-beta.1, =9.0.0-beta.1, =0.2.0, =0.6.0 Source cves: CVE-2024-36751 Source advisory: GHSA-6FX8-H7JM-663J...
CVE-2024-36751
An issue in parse-uri v1.0.9 allows attackers to cause a Regular expression Denial of Service ReDoS via a crafted URL...
CVE-2024-36751
An issue in parse-uri v1.0.9 allows attackers to cause a Regular expression Denial of Service ReDoS via a crafted URL...
DEBIAN-CVE-2024-57887
In the Linux kernel, the following vulnerability has been resolved: drm: adv7511: Fix use-after-free in adv7533attachdsi The hostnode pointer was assigned and freed in adv7533parsedt, and later, adv7533attachdsi uses the same. Fix this use-after-free issue by dropping ofnodeput in adv7533parsedt...
UBUNTU-CVE-2024-57887
In the Linux kernel, the following vulnerability has been resolved: drm: adv7511: Fix use-after-free in adv7533attachdsi The hostnode pointer was assigned and freed in adv7533parsedt, and later, adv7533attachdsi uses the same. Fix this use-after-free issue by dropping ofnodeput in adv7533parsedt...
CVE-2024-36751: Inefficient Regular Expression Complexity
An issue in parse-uri v1.0.9 allows attackers to cause a Regular expression Denial of Service ReDoS via a crafted URL...
parse-uri security vulnerability
parse-uri is a lightweight module for parsing URIs from the individual developers at Kiko Beats. A security vulnerability exists in parse-uri v1.0.9. An attacker can exploit this vulnerability to trigger a regular expression denial of service via a crafted URL...
PT-2025-2456 · Parse-Uri · Parse-Uri
Name of the Vulnerable Software and Affected Versions: parse-uri version 1.0.9 Description: The issue allows attackers to cause a Regular expression Denial of Service ReDoS via a crafted URL. This can be achieved by manipulating the URL in a way that triggers a denial of service. Recommendations:...
