CVE-2025-59734

It is possible to cause an use-after-free write in SANM decoding with a carefully crafted animation using subversion storedframe. Stored frames can later be referenced by FTCH chunks. For files using subversion storedframe. Leaving ctx-hasdimensions set to false. A subsequent chunk with type...

CVE-2025-59734 Heap-buffer-overflow write in FFmpeg SANM process_ftch

It is possible to cause an use-after-free write in SANM decoding with a carefully crafted animation using subversion storedframe. Stored frames can later be referenced by FTCH chunks. For files using subversion storedframe. Leaving ctx-hasdimensions set to false. A subsequent chunk with type...

CVE-2025-59734

CVE-2025-59734 affects FFmpeg SANM decoding. A use-after-free read can occur when processing SANM frames via STOR/FOBJ/FTCH chunks for subversion stored_frame with an invalid state, and later reallocation that frees the old buffer while GetByteContext gb is still referenced. This can enable a rea...

CVE-2025-59734: Use After Free

It is possible to cause an use-after-free write in SANM decoding with a carefully crafted animation using subversion storedframe. Stored frames can later be referenced by FTCH chunks. For files using subversion storedframe. Leaving ctx-hasdimensions set to false. A subsequent chunk with type...

Apache Subversion security vulnerabilities

Apache Subversion is an open source version control system from the American Apache Apache Foundation. The system is compatible with the Concurrent Versions System CVS. A security vulnerability exists in versions prior to Apache Subversion 2 that stems from post-release reuse during SANM decoding...

EUVD-2024-1005

Malicious code in bioql PyPI...

EUVD-2022-5541

Malicious code in bioql PyPI...

EUVD-2022-5703

Malicious code in bioql PyPI...

EUVD-2015-3254

Malicious code in bioql PyPI...

EUVD-2024-41565

Malicious code in bioql PyPI...

EUVD-2016-9573

Malicious code in bioql PyPI...

EUVD-2022-5390

Malicious code in bioql PyPI...

EUVD-2022-5547

Malicious code in bioql PyPI...

EUVD-2022-0207

Malicious code in bioql PyPI...

EUVD-2022-4214

Malicious code in bioql PyPI...

EUVD-2022-4893

Malicious code in bioql PyPI...

EUVD-2025-22380

Malicious code in bioql PyPI...

EUVD-2022-28983

Malicious code in bioql PyPI...

EUVD-2024-0969

Malicious code in bioql PyPI...

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not being reproduceable and they argue this is not a valid vulnerability.

...