CVE-2025-64181

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.3.0 through 3.3.5 and 3.4.0 through 3.4.2, while fuzzing openexrexrcheckfuzzer, Valgrind reports a conditional branch depending on...

DEBIAN-CVE-2025-64181

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.3.0 through 3.3.5 and 3.4.0 through 3.4.2, while fuzzing openexrexrcheckfuzzer, Valgrind reports a conditional branch depending on...

UBUNTU-CVE-2025-64181

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.3.0 through 3.3.5 and 3.4.0 through 3.4.2, while fuzzing openexrexrcheckfuzzer, Valgrind reports a conditional branch depending on...

CVE-2025-64181 OpenEXR Makes Use of Uninitialized Memory

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.3.0 through 3.3.5 and 3.4.0 through 3.4.2, while fuzzing openexrexrcheckfuzzer, Valgrind reports a conditional branch depending on...

CVE-2025-64181 OpenEXR Makes Use of Uninitialized Memory

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.3.0 through 3.3.5 and 3.4.0 through 3.4.2, while fuzzing openexrexrcheckfuzzer, Valgrind reports a conditional branch depending on...

CVE-2025-64181

CVE-2025-64181 affects OpenEXR OpenEXRCore in 3.3.0–3.3.5 and 3.4.0–3.4.2 where fuzzing revealed a use of uninitialized memory in generic_unpack, leading to undefined behavior or potential crash. Affected releases are fixed in 3.3.6 and 3.4.3. Fedora/OpenSUSE advisories corroborate the backport/f...

CVE-2025-64181

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.3.0 through 3.3.5 and 3.4.0 through 3.4.2, while fuzzing openexrexrcheckfuzzer, Valgrind reports a conditional branch depending on...

CVE-2025-64181 OpenEXR Makes Use of Uninitialized Memory

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.3.0 through 3.3.5 and 3.4.0 through 3.4.2, while fuzzing openexrexrcheckfuzzer, Valgrind reports a conditional branch depending on...

OpenEXR 安全漏洞

OpenEXR is an open standard for a high dynamic range image HDR file format open sourced by Academy Software Foundation. A security vulnerability exists in OpenEXR versions 3.3.0 through 3.3.5 and 3.4.0 through 3.4.2, which stems from the use of uninitialized memory and could lead to undefined...

Security update for sccache

This update for sccache fixes the following issues: CVE-2025-55159: updated slab with the uninit memory access fix bsc1248003 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comma...

SUSE-SU-2025:3955-1 Security update for sccache

This update for sccache fixes the following issues: - CVE-2025-55159: updated slab with the uninit memory access fix bsc1248003...

SUSE-SU-2025:3944-1 Security update for sccache

This update for sccache fixes the following issues: - CVE-2025-55159 - updated slab with the uninit memory access fix bsc1248003...

CVE-2025-64118

node-tar is a Tar for Node.js. In 7.5.1, using .t aka .list with sync: true to read tar entry contents returns uninitialized memory contents if tar file was changed on disk to a smaller size while being read. This vulnerability is fixed in 7.5.2...

Samba Information Disclosure (CVE-2025-9640)

In the vfsstreamsxattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability. Note that Nessus has not tested for...

CVE-2025-45663

An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a domevent structure. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and...

CVE-2025-45663

An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a domevent structure...

UBUNTU-CVE-2025-45663

An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a domevent structure...

CLSA-2025-1762180717 Fix CVE(s): CVE-2022-2343, CVE-2022-2522

SECURITY UPDATE: Reading past end of completion with a long line and 'infercase' set - debian/patches/CVE-2022-2343.patch: Allocate the string if needed - CVE-2022-2343 SECURITY UPDATE: Accessing uninitialized memory when completing long line - debian/patches/CVE-2022-2522.patch: Terminate string...

PT-2025-44770

Name of the Vulnerable Software and Affected Versions Netsurf version 3.11 Description An issue exists in NetSurf version 3.11 where the application reads uninitialized heap memory during the creation of a dom event structure. Recommendations At the moment, there is no information about a newer...

CVE-2025-45663

An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a domevent structure...