Browse CVEs

HIGH 7.5 CVE-2025-62171 ImageMagick is an open source software suite for displaying, converting, and editing raster image files. In ImageMagick versions prior to 7.1.2-7 and… Imagemagick 6.9.13-32 / 7.1.2-7+ Fix from $1,9502025-10-17 HIGH 8.8 CVE-2025-62496 A vulnerability exists in the QuickJS engine's BigInt string parsing logic (js_bigint_from_string) when attempting to create a BigInt from a string w… Quickjs 2025-09-13+ Fix from $1,9502025-10-16 HIGH 7.8 CVE-2025-39967 In the Linux kernel, the following vulnerability has been resolved: fbcon: fix integer overflow in fbcon_do_set_font Fix integer overflow vulnerabi… Linux Kernel 4.5 / 4.10+ Fix from $1,9502025-10-15 HIGH 7.8 CVE-2025-61807 Substance3D - Stager versions 3.1.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code e… Substance 3d Stager 3.1.5+ Fix from $1,9502025-10-14 HIGH 7.8 CVE-2025-61800 Dimension versions 4.1.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in… Dimension 4.1.5+ Fix from $1,9502025-10-14 HIGH 7.8 CVE-2025-61803 Substance3D - Stager versions 3.1.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code e… Substance 3d Stager 3.1.5+ Fix from $1,9502025-10-14 HIGH 8.8 CVE-2025-58715 Integer overflow or wraparound in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally. Windows 10 1507 10.0.10240.21161 / 10.0.14393.8519+ Fix from $1,9502025-10-14 MEDIUM 5.5 CVE-2025-20722 In gnss driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure if a malicious act… Rdk B Mitigation only Fix from $1,6002025-10-14 HIGH 8.8 CVE-2025-20710 In wlan AP driver, there is a possible out of bounds write due to an integer overflow. This could lead to remote (proximal/adjacent) escalation of pr… Software Development Kit after 7.6.7.2 Fix from $1,9502025-10-14 HIGH 7.8 CVE-2025-47351 Memory corruption while processing user buffers. Fastconnect 6200 Firmware No fix yet Fix from $1,9502025-10-09 MEDIUM 5.5 CVE-2023-53661 In the Linux kernel, the following vulnerability has been resolved: bnxt: avoid overflow in bnxt_get_nvram_directory() The value of an arithmetic e… Linux Kernel 5.15.113 / 6.1.30+ Fix from $1,6002025-10-07 MEDIUM 5.5 CVE-2023-53624 In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_fq: fix integer overflow of "credit" if sch_fq is configured wit… Linux Kernel 5.10.180 / 5.15.111+ Fix from $1,6002025-10-07 HIGH 7.8 CVE-2023-53570 In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: fix integer overflow in nl80211_parse_mbssid_elems() nl80211_par… Linux Kernel 6.1.46 / 6.4.11+ Fix from $1,9502025-10-04 MEDIUM 5.5 CVE-2025-39940 In the Linux kernel, the following vulnerability has been resolved: dm-stripe: fix a possible integer overflow There's a possible integer overflow … Linux Kernel 6.12.49 / 6.16.9+ Fix from $1,6002025-10-04 HIGH 7.1 CVE-2025-46819 Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted LU… Redis 6.2.20 / 7.2.11+ Fix from $1,9502025-10-03 HIGH 8.8 CVE-2025-46817 Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lu… Redis 6.2.20 / 7.2.11+ Fix from $1,9502025-10-03 HIGH 7.8 CVE-2023-53524 In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf An integer o… Linux Kernel 5.4.244 / 5.10.181+ Fix from $1,9502025-10-01 MEDIUM 5.5 CVE-2023-53474 In the Linux kernel, the following vulnerability has been resolved: x86/MCE/AMD: Use an u64 for bank_map Thee maximum number of MCA banks is 64 (MA… Linux Kernel 5.10.180 / 5.15.111+ Fix from $1,6002025-10-01 HIGH 8.6 CVE-2025-11152 Sandbox escape due to integer overflow in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143.0.3. Firefox 143.0.3+ Fix from $1,9502025-09-30 HIGH 7.5 CVE-2025-59942 go-f3 is a Golang implementation of Fast Finality for Filecoin (F3). In versions 0.8.6 and below, go-f3 panics when it validates a "poison" messages … Go F3 0.8.7+ Fix from $1,9502025-09-29 HIGH 7.5 CVE-2025-51495 An integer overflow vulnerability exists in the WebSocket component of Mongoose 7.5 thru 7.17. By sending a specially crafted WebSocket request, an a… Mongoose after 7.17 Fix from $1,9502025-09-29 HIGH 7.5 CVE-2025-55552 pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randn_like are used together. Pytorch after 2.8.0 Fix from $1,9502025-09-25 MEDIUM 5.3 CVE-2025-55554 pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-.long(). Pytorch after 2.8.0 Fix from $1,6002025-09-25 HIGH 8.8 CVE-2025-10892 Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 140.0.7339.207+ Fix from $1,9502025-09-24 MEDIUM 5.5 CVE-2025-59800 In Artifex Ghostscript through 10.05.1, ocr_begin_page in devices/gdevpdfocr.c has an integer overflow that leads to a heap-based buffer overflow in … Ghostscript after 10.05.1 Fix from $1,6002025-09-22 MEDIUM 6.5 CVE-2025-10456 A vulnerability was identified in the handling of Bluetooth Low Energy (BLE) fixed channels (such as SMP or ATT). Specifically, an attacker could exp… Zephyr after 4.1.0 Fix from $1,6002025-09-19 HIGH 8.2 CVE-2025-55068 Dover Fueling Solutions ProGauge MagLink LX4 Devices fail to handle Unix time values beyond a certain point. An attacker can manually change the sys… Mitigation only Fix from $1,9502025-09-18 MEDIUM 5.5 CVE-2022-50399 In the Linux kernel, the following vulnerability has been resolved: media: atomisp: prevent integer overflow in sh_css_set_black_frame() The "heigh… Linux Kernel 4.18 / 5.15.77+ Fix from $1,6002025-09-18 HIGH 7.8 CVE-2025-7982 Ashlar-Vellum Cobalt LI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbi… Cobalt Mitigation only Fix from $1,9502025-09-17 HIGH 7.8 CVE-2025-7985 Ashlar-Vellum Cobalt VC6 File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arb… Cobalt Mitigation only Fix from $1,9502025-09-17