Browse CVEs

HIGH 7.8 CVE-2025-46285 An integer overflow was addressed by adopting 64-bit timestamps. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS… macOS 14.8.3 / 15.7.3+ Fix from $1,9502025-12-12 CRITICAL 10.0 CVE-2025-64721 Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. In versions 1.16.6 and below, the SYSTEM-le… Sandboxie 1.16.7+ Fix from $2,3002025-12-11 HIGH 7.8 CVE-2025-36936 In GetTachyonCommand of tachyon_server_common.h, there is a possible out of bounds write due to an integer overflow. This could lead to local escalat… Android Mitigation only Fix from $1,9502025-12-11 MEDIUM 6.5 CVE-2025-14512 A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib In… Openshift 2.86.3+ Fix from $1,6002025-12-11 MEDIUM 6.5 CVE-2025-65803 An integer overflow in the psdParser::ReadImageData function of FreeImage v3.18.0 and before allows attackers to cause a Denial of Service (DoS) via … Freeimage after 3.18.0 Fix from $1,6002025-12-10 CRITICAL 9.8 CVE-2025-14087 A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potenti… Enterprise Linux 2.86.3+ Fix from $2,3002025-12-10 HIGH 7.8 CVE-2025-64783 DNG SDK versions 1.7.0 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in t… Dng Software Development Kit after 1.7.0 Fix from $1,9502025-12-09 MEDIUM 5.5 CVE-2025-64894 DNG SDK versions 1.7.0 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could lead to application denial-of-service. … Dng Software Development Kit after 1.7.0 Fix from $1,6002025-12-09 HIGH 7.8 CVE-2025-62467 Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally. Windows 10 1809 10.0.17763.8146 / 10.0.19044.6691+ Fix from $1,9502025-12-09 CRITICAL 9.8 CVE-2025-14308 An integer overflow vulnerability exists in the write method of the Buffer class in Robocode version 1.9.3.6. The method fails to properly validate t… Robocode Patch available Fix from $2,3002025-12-09 HIGH 7.8 CVE-2025-48637 In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of pr… Android Mitigation only Fix from $1,9502025-12-08 HIGH 7.5 CVE-2025-55753 An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures (~30 days in default configurations), to the bac… HTTP Server 2.4.66+ Fix from $1,9502025-12-05 HIGH 8.6 CVE-2025-34297 KissFFT versions prior to the fix commit 1b083165 contain an integer overflow in kiss_fft_alloc() in kiss_fft.c on platforms where size_t is 32-bit. … Patch available Fix from $1,9502025-12-01 CRITICAL 9.8 CVE-2025-3500 Integer Overflow or Wraparound vulnerability in Avast Antivirus (25.1.981.6) on Windows allows Privilege Escalation.This issue affects Antivirus: fro… Antivirus 25.3+ Fix from $2,3002025-12-01 MEDIUM 5.3 CVE-2025-66030 Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forg… Forge 1.3.2+ Fix from $1,6002025-11-26 MEDIUM 6.5 CVE-2025-63938 Tinyproxy through 1.11.2 contains an integer overflow vulnerability in the strip_return_port() function within src/reqs.c. Tinyproxy after 1.11.2 Fix from $1,6002025-11-26 HIGH 7.7 CVE-2025-13601 A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the … Codeready Linux Builder No fix yet Fix from $1,9502025-11-26 HIGH 8.0 CVE-2025-52538 Improper input validation within the XOCL driver may allow a local attacker to generate an integer overflow condition, potentially resulting in loss … Mitigation only Fix from $1,9502025-11-24 HIGH 7.3 CVE-2025-0005 Improper input validation within the XOCL driver may allow a local attacker to generate an integer overflow condition, potentially resulting in crash… Mitigation only Fix from $1,9502025-11-24 HIGH 7.5 CVE-2025-63829 eProsima Fast-DDS v3.3 and before has an infinite loop vulnerability caused by integer overflow in the Time_t:: fraction() function. Fast Dds after 3.3.0 Fix from $1,9502025-11-18 MEDIUM 5.9 CVE-2025-12818 Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to under… Mitigation only Fix from $1,6002025-11-13 CRITICAL 9.8 CVE-2025-27918 An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7… Anydesk 9.0.0+ Fix from $2,3002025-11-06 HIGH 7.8 CVE-2025-47365 Memory corruption while processing large input data from a remote source via a communication interface. Qam8255p Firmware No fix yet Fix from $1,9502025-11-04 HIGH 7.5 CVE-2025-12501 Integer overflow in GameMaker IDE below 2024.14.0 version can lead to can lead to application crashes through denial-of-service attacks (DoS). GameMa… Mitigation only Fix from $1,9502025-10-31 HIGH 7.3 CVE-2025-62231 A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause a… Debian Linux 21.1.19+ Fix from $1,9502025-10-30 HIGH 7.8 CVE-2025-11463 Ashlar-Vellum Cobalt XE File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbi… Cobalt Mitigation only Fix from $1,9502025-10-29 HIGH 7.8 CVE-2025-10923 GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on … Gimp Patch available Fix from $1,9502025-10-29 HIGH 7.8 CVE-2025-10924 GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on af… Gimp Patch available Fix from $1,9502025-10-29 HIGH 7.1 CVE-2025-55067 The TLS4B ATG system is vulnerable to improper handling of Unix time values that exceed the 2038 epoch rollover. When the system clock reaches Januar… Mitigation only Fix from $1,9502025-10-23 CRITICAL 9.8 CVE-2025-54957 An issue was discovered in Dolby UDC 4.5 through 4.13. A crash of the DD+ decoder process can occur when a malformed DD+ bitstream is processed. When… Mitigation only Fix from $2,3002025-10-20