PT-2026-104547

Name of the Vulnerable Software and Affected Versions WPFront Notification Bar versions prior to 3.5.2 Description Reflected Cross-Site Scripting occurs when the write debug logs debug-log output path reflects the raw value of the $ SERVER'REQUEST URI' variable through the vprintf function within...

EUVD-2025-24010

Malicious code in bioql PyPI...

GNU Bison obprintf.c __obstack_vprintf_internal assertion

...

CVE-2025-8733

A flaw was found in bison. The obstackvprintfinternal function in obprintf.c contains an issue where manipulation can lead to a reachable assertion, allowing a local attacker to trigger an assertion failure. This condition is exploitable via crafted input. The primary consequence of this...

CVE-2025-8733

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: Additional analysis indicates that the files referenced in the stack trace do not exist in Bison...

CVE-2025-8733

...

CVE-2025-8733

...

CVE-2025-8733

CVE-2025-8733 entry is withdrawn/not an active vulnerability per NVD: the CNA withdrew it and analysis showed the referenced stack-trace files do not exist in GNU Bison; other connected records describe related discussions but do not establish an exploitable issue for this CVE.

CVE-2025-8733

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: Additional analysis indicates that the files referenced in the stack trace do not exist in Bison...

CVE-2025-8733

Removed by vendor...

SUSE CVE-2025-2338

A vulnerability, which was classified as critical, was found in tbeu matio 1.5.28. Affected is the function strdupvprintf of the file src/io.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may ...

DEBIAN-CVE-2025-2338

A vulnerability, which was classified as critical, was found in tbeu matio 1.5.28. Affected is the function strdupvprintf of the file src/io.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may ...

PT-2025-11387

Name of the Vulnerable Software and Affected Versions: tbeu matio version 1.5.28 Description: A critical vulnerability was found in the function strdup vprintf of the file src/io.c, leading to a heap-based buffer overflow. This issue can be exploited remotely. Recommendations: For version 1.5.28,...

PT-2025-32387

Name of the Vulnerable Software and Affected Versions GNU Bison versions up to 3.8.2 Description A problematic issue was found in GNU Bison affecting the obstack vprintf internal function within the obprintf.c file. The manipulation leads to a reachable assertion. The exploit has been publicly...

SUSE CVE-2019-8904

dobidnote in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to fileprintf and filevprintf...

PT-2021-27537

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 13 crash has been reported. The crash involves the functions git buf vprintf, giterr set, and git strntol32. No information i...

PT-2020-22651

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of Use-of-uninitialized-value. The crash state involves functions such as file vprintf, file printf, and mget. No...

PT-2020-22042

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the following functions: file vprintf, file printf, and file buffer. Recommendations At th...

DEBIAN-CVE-2019-17533

MatVarReadNextInfo4 in mat4.c in MATIO 1.5.17 omits a certain '\0' character, leading to a heap-based buffer over-read in strdupvprintf when uninitialized memory is accessed...

PT-2019-15191

Name of the Vulnerable Software and Affected Versions MATIO version 1.5.17 Description The issue is related to a heap-based buffer over-read in the strdup vprintf function when uninitialized memory is accessed. This occurs because the Mat VarReadNextInfo4 function in mat4.c omits a certain '0'...