Socomec DIRIS Digiware M-70 Modbus RTU over TCP factory reset denial of service vulnerability

Talos Vulnerability Report TALOS-2025-2138 Socomec DIRIS Digiware M-70 Modbus RTU over TCP factory reset denial of service vulnerability December 1, 2025 CVE Number CVE-2025-20085 SUMMARY A denial of service vulnerability exists in the Modbus RTU over TCP functionality of Socomec DIRIS Digiware...

GCC Productions Inc. Fade In XML parser use-after-free vulnerability

Talos Vulnerability Report TALOS-2025-2252 GCC Productions Inc. Fade In XML parser use-after-free vulnerability October 28, 2025 CVE Number CVE-2025-53814 SUMMARY A use-after-free vulnerability exists in the XML parser functionality of GCC Productions Inc. Fade In 4.2.0. A specially crafted .xml...

Planet WGR-500 formPingCmd format string vulnerability

Talos Vulnerability Report TALOS-2025-2228 Planet WGR-500 formPingCmd format string vulnerability October 7, 2025 CVE Number CVE-2025-48826 SUMMARY A format string vulnerability exists in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests c...

OpenPLC OpenPLC_v3 ModbusTCP server denial of service vulnerability

Talos Vulnerability Report TALOS-2025-2223 OpenPLC OpenPLCv3 ModbusTCP server denial of service vulnerability October 7, 2025 CVE Number CVE-2025-53476 SUMMARY A denial of service vulnerability exists in the ModbusTCP server functionality of OpenPLC v3 a931181e8b81e36fadf7b74d5cba99b73c3f6d58. A...

NVIDIA nvdisasm REL section header parsing heap-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2025-2191 NVIDIA nvdisasm REL section header parsing heap-based buffer overflow vulnerability September 24, 2025 CVE Number CVE-2025-23271 SUMMARY A heap-based buffer overflow vulnerability exists in the REL section header parsing functionality of NVIDIA nvdisasm...

NVIDIA nvdisasm RELA section parsing out-of-bounds write vulnerability

Talos Vulnerability Report TALOS-2025-2172 NVIDIA nvdisasm RELA section parsing out-of-bounds write vulnerability September 24, 2025 CVE Number CVE-2025-23340 SUMMARY An out-of-bounds write vulnerability exists in the RELA section parsing functionality of NVIDIA nvdisasm 12.8.90. A specially...

The Biosig Project libbiosig ISHNE ECG Annotations file parsing heap-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2025-2232 The Biosig Project libbiosig ISHNE ECG Annotations file parsing heap-based buffer overflow vulnerability August 25, 2025 CVE Number CVE-2025-53853 SUMMARY A heap-based buffer overflow vulnerability exists in the ISHNE parsing functionality of The Biosig...

The Biosig Project libbiosig ABF parsing integer overflow to heap-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2025-2231 The Biosig Project libbiosig ABF parsing integer overflow to heap-based buffer overflow vulnerability August 25, 2025 CVE Number CVE-2025-53518 SUMMARY An integer overflow vulnerability exists in the ABF parsing functionality of The Biosig Project...

The Biosig Project libbiosig MFER Tag 63 parsing heap-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2025-2235 The Biosig Project libbiosig MFER Tag 63 parsing heap-based buffer overflow vulnerability August 25, 2025 CVE Number CVE-2025-53557 SUMMARY A heap-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project libbiosi...

SAIL Image Decoding Library PCX Image Decoding heap-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2025-2217 SAIL Image Decoding Library PCX Image Decoding heap-based buffer overflow vulnerability August 25, 2025 CVE Number CVE-2025-35984 SUMMARY A memory corruption vulnerability exists in the PCX Image Decoding functionality of the SAIL Image Decoding Library...

SAIL Image Decoding Library BMPv3 Palette Decoding integer overflow vulnerability

Talos Vulnerability Report TALOS-2025-2215 SAIL Image Decoding Library BMPv3 Palette Decoding integer overflow vulnerability August 25, 2025 CVE Number CVE-2025-46407 SUMMARY A memory corruption vulnerability exists in the BMPv3 Palette Decoding functionality of the SAIL Image Decoding Library...

SAIL Image Decoding Library BMPv3 RLE Decoding integer overflow vulnerability

Talos Vulnerability Report TALOS-2025-2221 SAIL Image Decoding Library BMPv3 RLE Decoding integer overflow vulnerability August 25, 2025 CVE Number CVE-2025-52930 SUMMARY A memory corruption vulnerability exists in the BMPv3 RLE Decoding functionality of the SAIL Image Decoding Library v0.9.8. Wh...

SAIL Image Decoding Library WebP Image Decoding integer overflow vulnerability

Talos Vulnerability Report TALOS-2025-2224 SAIL Image Decoding Library WebP Image Decoding integer overflow vulnerability August 25, 2025 CVE Number CVE-2025-52456 SUMMARY A memory corruption vulnerability exists in the WebP Image Decoding functionality of the SAIL Image Decoding Library v0.9.8...

SAIL Image Decoding Library Targa RLE Decoding heap-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2025-2220 SAIL Image Decoding Library Targa RLE Decoding heap-based buffer overflow vulnerability August 25, 2025 CVE Number CVE-2025-50129 SUMMARY A memory corruption vulnerability exists in the PCX Image Decoding functionality of the SAIL Image Decoding Library...

Tenda AC6 V5.0 Tenda App Router Authentication cleartext transmission vulnerability

Talos Vulnerability Report TALOS-2025-2178 Tenda AC6 V5.0 Tenda App Router Authentication cleartext transmission vulnerability August 20, 2025 CVE Number CVE-2025-31143 SUMMARY A cleartext transmission vulnerability exists in the Tenda App Router Authentication functionality of Tenda AC6 V5.0...

Foxit Reader Signature Uninitialized Pointer Vulnerability

Talos Vulnerability Report TALOS-2025-2202 Foxit Reader Signature Uninitialized Pointer Vulnerability August 13, 2025 CVE Number CVE-2025-32451 SUMMARY A memory corruption vulnerability exists in Foxit Reader 2025.1.0.27937 due to the use of an uninitialized pointer. A specially crafted Javascrip...

Dell ControlVault3 securebio_identify stack-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2024-2130 Dell ControlVault3 securebioidentify stack-based buffer overflow vulnerability August 9, 2025 CVE Number CVE-2025-24922 SUMMARY A stack-based buffer overflow vulnerability exists in the securebioidentify functionality of Dell ControlVault3 5.14.3.0. A...

WWBN AVideo aVideoEncoder.json.php unzip race condition vulnerability

Talos Vulnerability Report TALOS-2025-2212 WWBN AVideo aVideoEncoder.json.php unzip race condition vulnerability July 24, 2025 CVE Number CVE-2025-25214 SUMMARY A race condition vulnerability exists in the aVideoEncoder.json.php unzip functionality of WWBN AVideo 14.4 and dev master commit...

Asus Armoury Crate AsIO3.sys stack-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2025-2144 Asus Armoury Crate AsIO3.sys stack-based buffer overflow vulnerability June 16, 2025 CVE Number CVE-2025-1533 SUMMARY A stack-based buffer overflow vulnerability exists in the AsIO3.sys kernel driver of Asus Armoury Crate 5.9.13.0. A specially crafted I/...

Entr'ouvert Lasso lasso_node_impl_init_from_xml type confusion vulnerability

Talos Vulnerability Report TALOS-2025-2193 Entr'ouvert Lasso lassonodeimplinitfromxml type confusion vulnerability November 5, 2025 CVE Number CVE-2025-47151 SUMMARY A type confusion vulnerability exists in the lassonodeimplinitfromxml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A special...

Planet WGR-500 swctrl OS command injection vulnerabilities

Talos Vulnerability Report TALOS-2025-2227 Planet WGR-500 swctrl OS command injection vulnerabilities October 7, 2025 CVE Number CVE-2025-54404,CVE-2025-54403 SUMMARY Multiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b190912. A specially...

SAIL Image Decoding Library BMPv3 Image Decoding integer overflow vulnerability

Talos Vulnerability Report TALOS-2025-2216 SAIL Image Decoding Library BMPv3 Image Decoding integer overflow vulnerability August 25, 2025 CVE Number CVE-2025-32468 SUMMARY A memory corruption vulnerability exists in the BMPv3 Image Decoding functionality of the SAIL Image Decoding Library v0.9.8...

MedDream PACS Premium PACS privilege escalation vulnerability

Talos Vulnerability Report TALOS-2025-2156 MedDream PACS Premium PACS privilege escalation vulnerability July 28, 2025 CVE Number CVE-2025-27724 SUMMARY A privilege escalation vulnerability exists in the login.php functionality of meddream MedDream PACS Premium 7.3.3.840. A specially crafted .php...

Planet WGR-500 formPingCmd OS command injection vulnerabilities

Talos Vulnerability Report TALOS-2025-2229 Planet WGR-500 formPingCmd OS command injection vulnerabilities October 7, 2025 CVE Number CVE-2025-54406,CVE-2025-54405 SUMMARY Multiple OS command injection vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A...