CVE-2025-55100

CVE-2025-55100 affects USBX (ThreadX USB support module) prior to version 6.4.3. The issue is an out-of-bounds read in the function _ux_host_class_audio10_sam_parse_func() while parsing a list of sampling frequencies, which could lead to a crash or potential data exposure. Red Hat and CVE aggrega...

CVE-2025-11356 Tenda AC23 SetStaticRouteCfg sscanf buffer overflow

A vulnerability was found in Tenda AC23 up to 16.03.07.52. Affected by this issue is the function sscanf of the file /goform/SetStaticRouteCfg. The manipulation of the argument list results in buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and coul...

EUVD-2018-4067

Malware in sbrugna...

libbiosig MFER Parsing Function Buffer Overflow Vulnerability

libbiosig is BioSig Project open source an open source software library for biomedical signal processing . With biological signal analysis functions. A buffer overflow vulnerability exists in the libbiosig MFER parsing function, which can be exploited by an attacker to cause arbitrary code...

libbiosig ISHNE Parsing Function Buffer Overflow Vulnerability

libbiosig is BioSig Project open source an open source software library for biomedical signal processing . With biological signal analysis functions. A buffer overflow vulnerability exists in the libbiosig ISHNE parsing function, which can be exploited by an attacker to cause arbitrary code...

libbiosig security vulnerability

libbiosig is BioSig Project open source an open source software library for biomedical signal processing . With biological signal analysis functions. A buffer overflow vulnerability exists in the libbiosig RHS2000 parsing function, which can be exploited by an attacker to cause arbitrary code...

libbiosig security vulnerability

libbiosig is BioSig Project open source an open source software library for biomedical signal processing . With biological signal analysis functions. A stack buffer overflow vulnerability exists in libbiosig, which is caused by incorrect boundary checking of the MFER parsing function. An attacker...

CVE-2025-38027

In the Linux kernel, the following vulnerability has been resolved: regulator: max20086: fix invalid memory access max20086parseregulatorsdt calls ofregulatormatch using an array of struct ofregulatormatch allocated on the stack for the matches argument. ofregulatormatch calls...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the function ieee80211ifparseactivelinks in the net/mac80211/debugfsnetdev.c module of the Linux kernel is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

SUSE CVE-2025-3360

A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp with the gdatetimenewfromiso8601 function...

AZL-55478 CVE-2024-57822 affecting package raptor2 2.0.15-29

In Raptor RDF Syntax Library through 2.0.16, there is a heap-based buffer over-read when parsing triples with the nquads parser in raptorntriplesparseterminternal...

PDF-XChange Editor buffer error vulnerability

PDF-XChange Editor is a PDF file viewing software from PDF-XChange that runs on Microsoft Windows systems. PDF-XChange Editor suffers from a buffer error vulnerability that stems from the PDF file parsing function containing an out-of-bounds read issue. An attacker exploiting this vulnerability...

CVE-2024-39249

The Async library (versions ≤ 2.6.4 and ≤ 3.2.5 ) is vulnerable to a Regular Expression Denial of Service (ReDoS) during function parsing within the autoinject function. This vulnerability is caused by inefficient regular expression complexity (CWE-1333) . While the supplier disputes the threat m...

CVE-2024-39249: Inefficient Regular Expression Complexity

Async = 2.6.4 and = 3.2.5 are vulnerable to ReDoS Regular Expression Denial of Service while parsing function in autoinject function. NOTE: this is disputed by the supplier because there is no realistic threat model: regular expressions are not used with untrusted input...

RHEL 9 : golang (RHSA-2024:2562)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2562 advisory. The golang packages provide the Go programming language compiler. Security Fixes: golang-fips/openssl: Memory leaks in code encrypting and...

CVE-2023-51931

An issue in alanclarke URLite v.3.1.0 allows an attacker to cause a denial of service DoS via a crafted payload to the parsing function...

CVE-2023-51931

An issue in alanclarke URLite v.3.1.0 allows an attacker to cause a denial of service DoS via a crafted payload to the parsing function...

CVE-2023-51931

An issue in alanclarke URLite v.3.1.0 allows an attacker to cause a denial of service DoS via a crafted payload to the parsing function...

CVE-2023-51931

An issue in alanclarke URLite v.3.1.0 allows an attacker to cause a denial of service DoS via a crafted payload to the parsing function...

CVE-2023-51931: Inefficient Regular Expression Complexity

An issue in alanclarke URLite v.3.1.0 allows an attacker to cause a denial of service DoS via a crafted payload to the parsing function...