...[ More ]

EVerest version 2025.9.0 suffers from an integer overflow in SdpPacket::parseheader that allows an attacker to trigger either an infinite loop TCP or stack buffer overflow TLS by sending a malformed SDP packet with a specially crafted length field. The vulnerability exists because the length fiel...

CVE-2025-68137 EVerest's Integer Overflow and Signed to Unsigned conversion lead to either stack buffer overflow or infinite loop

EVerest is an EV charging software stack. Prior to version 2025.10.0, an integer overflow occurring in SdpPacket::parseheader allows the current buffer length to be set to 7 after a complete header of size 8 has been read. The remaining length to read is computed using the current length subtract...

CVE-2025-68137: Buffer Copy without Checking Size of Input

EVerest is an EV charging software stack. Prior to version 2025.10.0, an integer overflow occurring in SdpPacket::parseheader allows the current buffer length to be set to 7 after a complete header of size 8 has been read. The remaining length to read is computed using the current length subtract...

serenity:FuzzJPEGLoader: Bad-cast to AK::Array<AK::TypeErasedParameter, 0>Gfx::read_start_of_scan in Gfx::parse_header

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=4911477174960128 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzJPEGLoader Job Type: libfuzzerubsanserenity Platform Id: linux Crash Type: Bad-cast Crash Address: 0x7ffcef172f88...

serenity:FuzzJPGLoader: Bad-cast to AK::Array<AK::TypeErasedParameter, 0>Gfx::read_start_of_scan in Gfx::parse_header

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=5602425283149824 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzJPGLoader Job Type: libfuzzerubsanserenity Platform Id: linux Crash Type: Bad-cast Crash Address: 0x7ffe72c80778 Cra...