Use After Free

Overview Microsoft.AspNetCore.App.Runtime.linux-musl-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Use After Free that could allow remote code...

Use After Free

Overview Microsoft.AspNetCore.App.Runtime.win-arm is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Use After Free that could allow remote code execution...

Use After Free

Overview Microsoft.AspNetCore.App.Runtime.win-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Use After Free that could allow remote code execution...

CVE-2025-36854

A vulnerability CVE-2024-38229 https://www.cve.org/CVERecord exists in EOL ASP.NET when closing an HTTP/3 stream while application code is writing to the response body, a race condition may lead to use-after-free, resulting in Remote Code Execution. Per CWE-416: Use After Free...

PT-2025-36468

Name of the Vulnerable Software and Affected Versions: EOL ASP.NET versions 6.0.0 through 6.0.36 EOL ASP.NET versions 8.0.0 through 8.0.8 EOL ASP.NET versions 9.0.0-preview.1.24081.5 through 9.0.0.RC.1 Description: A race condition may occur when closing an HTTP/3 stream while application code is...

sctp: linearize cloned gso packets in sctp_rcv

...

CVE-2025-57807

CVE-2025-57807 affects ImageMagick versions lower than 14.8.2. The vulnerability arises from insecure functions SeekBlob() and WriteBlob(): SeekBlob() allows advancing the stream offset beyond the current end without increasing capacity, and WriteBlob() expands by quantum + length instead of offs...

CVE-2025-57807 ImageMagick BlobStream Forward-Seek Under-Allocation

ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 include insecure functions: SeekBlob, which permits advancing the stream offset beyond the current end without increasing capacity, and WriteBlob, which then expan...

Malicious code in jest-weywot-leda-stream (npm)

The package jest-weywot-leda-stream was found to contain malicious code...

Malicious code in ganymede-stream-nuxtjs-ursa (npm)

The package ganymede-stream-nuxtjs-ursa was found to contain malicious code...

MAL-2025-45065 Malicious code in loopback-ursa-stream-rollup (npm)

The package loopback-ursa-stream-rollup was found to contain malicious code...

MAL-2025-43452 Malicious code in antares-stream-duplex-lightyear (npm)

The package antares-stream-duplex-lightyear was found to contain malicious code...

MAL-2025-44375 Malicious code in ganymede-stream-nuxtjs-ursa (npm)

The package ganymede-stream-nuxtjs-ursa was found to contain malicious code...

Malicious code in fornax-stream-elara-miranda (npm)

The package fornax-stream-elara-miranda was found to contain malicious code...

MAL-2025-44290 Malicious code in fornax-stream-elara-miranda (npm)

The package fornax-stream-elara-miranda was found to contain malicious code...

MAL-2025-44050 Malicious code in dotenv-jasmine-cosmicweb-stream (npm)

The package dotenv-jasmine-cosmicweb-stream was found to contain malicious code...

MAL-2025-44771 Malicious code in jest-weywot-leda-stream (npm)

The package jest-weywot-leda-stream was found to contain malicious code...

Malicious code in xo-fornax-blitz-stream (npm)

The package xo-fornax-blitz-stream was found to contain malicious code...

Malicious code in antares-stream-duplex-lightyear (npm)

The package antares-stream-duplex-lightyear was found to contain malicious code...

Malicious code in loopback-ursa-stream-rollup (npm)

The package loopback-ursa-stream-rollup was found to contain malicious code...