EUVD-2022-1454

Malicious code in bioql PyPI...

GHSA-5GFQ-XRQ4-34RJ Duplicate Advisory: Open Babel has out-of-bounds write (overlapping memcpy) in zipstream basic_unzip_streambuf::underflow

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-8j3x-m868-cpw8. This link is maintained to preserve external references. Original Description A security vulnerability has been detected in Open Babel up to 3.1.1. This vulnerability affects the function...

CVE-2025-10995

Open Babel up to 3.1.1 is affected by CVE-2025-10995 due to a vulnerability in zlib_stream::basic_unzip_streambuf::underflow (in /src/zipstreamimpl.h) that can cause memory corruption. The ROS/REDOS entries confirm multiple Open Babel components (including ChemKinFormat, CacaoFormat, and SMILES p...

openbabel 缓冲区错误漏洞

openbabel is a chemistry toolkit software open-sourced by Open Babel. A buffer error vulnerability exists in openbabel 3.1.1 and earlier versions, which stems from a memory corruption issue in the zlibstream::basicunzipstreambuf::underflow function, which could lead to a local attack...

PT-2025-39477

Name of the Vulnerable Software and Affected Versions Open Babel versions through 3.1.1 Description A security issue has been identified in Open Babel. The zlib stream::basic unzip streambuf::underflow function within the /src/zipstreamimpl.h library is susceptible to memory corruption. Local...

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-10.3.0.1)

The version of AHV installed on the remote host is prior to 10.3.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-10.3.0.1 advisory. - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointe...

Linux Distros Unpatched Vulnerability : CVE-2025-4640

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds Write vulnerability in PointCloudLibrary pcl allows Overflow Buffers. Since version 1.14.0, PCL by default uses a zlib installation from the syste...

CLSA-2025-1757247437 zlib: Fix of CVE-2016-9840

CVE-2016-9840: fix undefined behavior in inftrees.c...

CLSA-2025-1757246128 zlib: Fix of CVE-2016-9840

CVE-2016-9840: fix undefined behavior in inftrees.c...

CLSA-2025-1757246101 zlib: Fix of CVE-2016-9840

CVE-2016-9840: fix undefined behavior in inftrees.c...

Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to buffer overflow due to the zlib package (CVE-2023-45853)

Summary Zlib is used by DataStage on Cloud Pak for Data as part of buffer compression functionality. Vulnerability Details CVEID:CVE-2023-45853 DESCRIPTION: MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip464 via a long filename,...

Linux Distros Unpatched Vulnerability : CVE-2025-52937

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in PointCloudLibrary PCL surface/src/3rdparty/opennurbs modules. This vulnerability is associated with program files crc32.C. This vulnerability i...

Linux Distros Unpatched Vulnerability : CVE-2023-38657

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds write vulnerability exists in the LXT2 zlib block decompression functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.3.0.5)

The version of AOS installed on the remote host is prior to 7.3.0.5. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.3.0.5 advisory. - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer...

Linux Distros Unpatched Vulnerability : CVE-2023-35989

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow vulnerability exists in the LXT2 zlib block allocation functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrar...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.1.1)

The version of AOS installed on the remote host is prior to 7.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.1.1 advisory. - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer...

zlib:zlib_uncompress3_fuzzer: Global-buffer-overflow in inflate_fast

Project: https://github.com/madler/zlib.git Detailed Report: https://oss-fuzz.com/testcase?key=5342666595565568 Project: zlib Fuzzing Engine: afl Fuzz Target: zlibuncompress3fuzzer Job Type: aflasanzlib Platform Id: linux Crash Type: Global-buffer-overflow WRITE 1 Crash Address: 0x5caecd11dd40...

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20230302.103053)

The version of AHV installed on the remote host is prior to 20230302.103053. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20230302.103053 advisory. - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.10.1.9)

The version of AOS installed on the remote host is prior to 6.10.1.9. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-6.10.1.9 advisory. - setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.0.1.8)

The version of AOS installed on the remote host is prior to 7.0.1.8. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.0.1.8 advisory. - setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path...