CVE-2025-8177

CVE-2025-8177 affects LibTIFF up to 4.7.0. The issue is in the function setrow (tools/thumbnail.c) and leads to a buffer overflow. Local attack is required. The patch (e8c9d6c616b19438695fd829e58ae4fde5bfbc22) fixes this issue; affected deployments note the maintainer has dropped support for some...

CVE-2025-8137 TOTOLINK A702R HTTP POST Request formIpQoS buffer overflow

A vulnerability has been found in TOTOLINK A702R 4.0.0-B20230721.1521 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formIpQoS of the component HTTP POST Request Handler. The manipulation of the argument mac leads to buffer overflow. The...

PT-2025-30850 · Tenda · Tenda Ac20

Name of the Vulnerable Software and Affected Versions: Tenda AC20 versions through 16.03.08.12 Description: A critical vulnerability exists due to a buffer overflow in an unknown function of the /goform/SetSysTimeCfg file within the httpd component. The vulnerability is triggered by manipulating...

NewStart CGSL MAIN 7.02 : libsoup Vulnerability (NS-SA-2025-0122)

The remote NewStart CGSL host, running version MAIN 7.02, has libsoup packages installed that are affected by a vulnerability: - GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soupheaderparseparamliststrict. There is a plausible way to reac...

CVE-2025-7945

A vulnerability was found in D-Link DIR-513 up to 20190831. It has been declared as critical. This vulnerability affects the function formSetWanDhcpplus of the file /goform/formSetWanDhcpplus. The manipulation of the argument curTime leads to buffer overflow. The attack can be initiated remotely...

CVE-2025-51082

The CVE-2025-51082 entry affects Tenda AC8V4 devices, specifically version 16.03.34.06, where a stack overflow can be triggered in the /goform/fast_setting_wifi_set endpoint by manipulating the timeZone parameter. The root cause is a stack-based buffer overflow in handling that parameter, leading...

CVE-2025-51087

Tenda AC8V4 V16.03.34.06 was discovered to contain stack overflow at /goform/saveParentControlInfo. The manipulation of the argument time leads to stack-based buffer overflow...

PT-2025-30736 · Totolink · Totolink A702R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A702R version 4.0.0-B20230721.1521 Description: A critical vulnerability exists in the HTTP POST Request Handler component of TOTOLINK A702R. The vulnerability is due to a buffer overflow triggered by manipulating the ip6addr argumen...

CVE-2025-7251

The CVE-2025-7251 entry concerns IrfanView CADImage Plugin, where a DWG file parsing flaw allows an out-of-bounds read that can lead to remote code execution. The issue stems from insufficient validation of user-supplied data in DWG parsing, enabling an attacker to execute code in the context of ...

CVE-2025-53816 GHSL-2025-058 - 7-Zip Multi-byte write heap buffer overflow in NCompress::NRar5::CDecoder

7-Zip is a file archiver with a high compression ratio. Zeroes written outside heap buffer in RAR5 handler may lead to memory corruption and denial of service in versions of 7-Zip prior to 25.0.0. Version 25.0.0 contains a fix for the issue...

CVE-2025-53014 ImageMagick has Heap Buffer Overflow in InterpretImageFilename

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-0 and 6.9.13-26 have a heap buffer overflow in the InterpretImageFilename function. The issue stems from an off-by-one error that causes out-of-bounds memory access when processi...

CVE-2025-7571

A vulnerability classified as critical has been found in UTT HiPER 840G up to 3.1.1-190328. This affects an unknown part of the file /goform/aspApBasicConfigUrcp. The manipulation of the argument Username leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has be...

CVE-2025-7571 UTT HiPER 840G aspApBasicConfigUrcp buffer overflow

A vulnerability classified as critical has been found in UTT HiPER 840G up to 3.1.1-190328. This affects an unknown part of the file /goform/aspApBasicConfigUrcp. The manipulation of the argument Username leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has be...

CVE-2025-7468 Tenda FH1201 HTTP POST Request fromSafeUrlFilter buffer overflow

A vulnerability has been found in Tenda FH1201 1.2.0.14 and classified as critical. This vulnerability affects the function fromSafeUrlFilter of the file /goform/fromSafeUrlFilter of the component HTTP POST Request Handler. The manipulation of the argument page leads to buffer overflow. The attac...

CVE-2025-7468

CVE-2025-7468 describes a buffer overflow in the Tenda FH1201, affecting the HTTP POST Request Handler’s /goform/fromSafeUrlFilter. The root cause is improper validation of the page parameter in fromSafeUrlFilter, enabling remote exploitation. Affected product: Tenda FH1201 (1.2.0.14). Impact per...

CVE-2025-7463 Tenda FH1201 HTTP POST Request AdvSetWrlsafeset formWrlsafeset buffer overflow

A vulnerability was found in Tenda FH1201 1.2.0.14. It has been declared as critical. This vulnerability affects the function formWrlsafeset of the file /goform/AdvSetWrlsafeset of the component HTTP POST Request Handler. The manipulation of the argument mitssid leads to buffer overflow. The atta...

CVE-2025-47103

InDesign Desktop versions 19.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-34096 Easy File Sharing HTTP Server 7.2 Buffer Overflow via POST to /sendemail.ghp

A stack-based buffer overflow vulnerability exists in Easy File Sharing HTTP Server version 7.2. The flaw is triggered when a crafted POST request is sent to the /sendemail.ghp endpoint containing an overly long Email parameter. The application fails to properly validate the length of this field,...

CVE-2025-38348 wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback()

In the Linux kernel, the following vulnerability has been resolved: wifi: p54: prevent buffer-overflow in p54rxeepromreadback Robert Morris reported: |If a malicious USB device pretends to be an Intersil p54 wifi |interface and generates an eepromreadback message with a large |eeprom-v1.len,...

PT-2025-29138 · Unknown · Easy File Sharing Ftp Server

Name of the Vulnerable Software and Affected Versions: Easy File Sharing HTTP Server version 7.2 Description: A stack-based buffer overflow vulnerability exists in the application. The flaw is triggered when a crafted POST request is sent to the /sendemail.ghp endpoint containing an overly long...