5436 matches found
gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
A heap-based buffer overflow in GIMP’s X Window Dump XWD file parser allows an attacker to craft a malicious XWD file or a web page that triggers opening one that can overflow a heap buffer during parsing and lead to remote code execution in the context of the GIMP process. The flaw is tracked as...
CVE-2025-13711
creationtimestamp| type| source ---|---|--- 2025-12-01 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1035/ 2026-01-12 18:07:39+00:00| seen| Telegram/Qn4zDx1gopuoFDdeF2t5YNGl6RathPfNxmtfN1VfQWpYEMo...
CVE-2025-13716
creationtimestamp| type| source ---|---|--- 2025-12-01 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1032/...
CVE-2025-13713
creationtimestamp| type| source ---|---|--- 2025-12-01 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1027/ 2025-12-23 22:26:18+00:00| seen| https://bsky.app/profile/potato.software/post/3maos665sef23...
CVE-2025-13710
creationtimestamp| type| source ---|---|--- 2025-12-01 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1030/...
CVE-2025-13712
creationtimestamp| type| source ---|---|--- 2025-12-01 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1028/...
CVE-2025-13706
creationtimestamp| type| source ---|---|--- 2025-12-01 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1034/...
CVE-2025-13707
creationtimestamp| type| source ---|---|--- 2025-12-01 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1029/...
CVE-2025-23357
creationtimestamp| type| source ---|---|--- 2025-12-01 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1038/...
CVE-2025-13708
creationtimestamp| type| source ---|---|--- 2025-12-01 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1033/...
CVE-2025-13714
creationtimestamp| type| source ---|---|--- 2025-12-01 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1031/...
CVE-2025-13699
creationtimestamp| type| source ---|---|--- 2025-11-27 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1025/ 2025-11-27 22:51:47+00:00| seen| https://gist.github.com/Darkcrai86/9dfce17966ab9913118eb96513ff157a 2026-01-13 15:10:19+00:00| seen|...
CVE-2025-13700
creationtimestamp| type| source ---|---|--- 2025-11-26 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1024/...
CVE-2025-13703
creationtimestamp| type| source ---|---|--- 2025-11-26 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1023/...
CVE-2025-13698
creationtimestamp| type| source ---|---|--- 2025-11-25 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1022/...
CVE-2025-6980
creationtimestamp| type| source ---|---|--- 2025-11-25 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1018/ 2025-12-05 03:00:07+00:00| published-proof-of-concept| Telegram/PvVlKU5mouDrQkucYBVA45d4PI3zxJLZNVLfukuzHyAN8nc...
Effective Command-Line Interface Fuzzing with Path-Aware Large Language Model Orchestration
Command-line interface CLI fuzzing tests programs by mutating both command-line options and input file contents, thus enabling discovery of vulnerabilities that only manifest under specific option-input combinations. Prior works of CLI fuzzing face the challenges of generating semantics-rich opti...
gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
A heap-based buffer overflow in GIMP’s X Window Dump XWD file parser allows an attacker to craft a malicious XWD file or a web page that triggers opening one that can overflow a heap buffer during parsing and lead to remote code execution in the context of the GIMP process. The flaw is tracked as...
A week in security (November 17 – November 23)
Last week on Malwarebytes Labs: AI teddy bear for kids responds with sexual content and advice about weapons Fake calendar invites are spreading. Here’s how to remove them and prevent more Budget Samsung phones shipped with unremovable spyware, say researchers What the Flock is happening with...
