Browse CVEs

MEDIUM 5.5 CVE-2023-53309 In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Fix integer overflow in radeon_cs_parser_init The type of size is u… Linux Kernel 4.14.324 / 4.19.293+ Fix from $1,6002025-09-16 MEDIUM 5.3 CVE-2025-58749 WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. In WAMR versions prior to 2.4.2, when running in LLVM-JIT mo… Webassembly Micro Runtime 2.4.2+ Fix from $1,6002025-09-16 HIGH 8.8 CVE-2025-10533 Integer overflow in the SVG component. This vulnerability was fixed in Firefox 143, Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird 143, and Thund… Firefox 115.28.0 / 140.3+ Fix from $1,9502025-09-16 MEDIUM 5.5 CVE-2022-50330 In the Linux kernel, the following vulnerability has been resolved: crypto: cavium - prevent integer overflow loading firmware The "code_length" va… Linux Kernel 4.14.296 / 4.19.262+ Fix from $1,6002025-09-15 HIGH 7.8 CVE-2025-54259 Substance3D - Modeler versions 1.22.2 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code… Substance 3d Modeler 1.22.4+ Fix from $1,9502025-09-09 HIGH 7.8 CVE-2025-54895 Integer overflow or wraparound in Windows SPNEGO Extended Negotiation allows an authorized attacker to elevate privileges locally. Windows 10 1507 10.0.10240.21128 / 10.0.14393.8422+ Fix from $1,9502025-09-09 HIGH 8.8 CVE-2025-54110 Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally. Windows 10 1507 10.0.10240.21128 / 10.0.14393.8422+ Fix from $1,9502025-09-09 HIGH 8.8 CVE-2025-54106 Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. Windows Server 2012 10.0.14393.8422 / 10.0.17763.7792+ Fix from $1,9502025-09-09 HIGH 7.8 CVE-2025-54091 Integer overflow or wraparound in Windows Hyper-V allows an authorized attacker to elevate privileges locally. Windows 10 1507 10.0.10240.21128 / 10.0.14393.8422+ Fix from $1,9502025-09-09 MEDIUM 6.9 CVE-2025-7709 An integer overflow exists in the FTS5 https://sqlite.org/fts5.html  extension. It occurs when the size of an array of tombstone pointers is calcula… Mitigation only Fix from $1,6002025-09-08 HIGH 7.5 CVE-2025-36853 A vulnerability (CVE-2025-21172) exists in msdia140.dll due to integer overflow and heap-based overflow. Per CWE-122: Heap-based Buffer Overflow, a… Mitigation only Fix from $1,9502025-09-08 MEDIUM 6.7 CVE-2025-36900 In lwis_test_register_io of lwis_device_test.c, there is a possible OOB Write due to an integer overflow. This could lead to local escalation of priv… Android Mitigation only Fix from $1,6002025-09-04 MEDIUM 5.0 CVE-2025-9688 A security vulnerability has been detected in Mupen64Plus up to 2.6.0. The affected element is the function write_is_viewer of the file src/device/ca… Patch available Fix from $1,6002025-08-30 HIGH 8.8 CVE-2025-57803 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-28 and 7.1.2-2 for ImageMagic… Imagemagick 6.9.13-28 / 7.1.2-2+ Fix from $1,9502025-08-26 CRITICAL 9.8 CVE-2025-52581 An integer overflow vulnerability exists in the GDF parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A speci… Libbiosig Mitigation only Fix from $2,3002025-08-25 CRITICAL 9.8 CVE-2025-53518 An integer overflow vulnerability exists in the ABF parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A speci… Libbiosig Mitigation only Fix from $2,3002025-08-25 HIGH 7.5 CVE-2025-54472 Unlimited memory allocation in redis protocol parser in Apache bRPC (all versions < 1.14.1) on all platforms allows attackers to crash the service vi… Brpc 1.14.1+ Fix from $1,9502025-08-14 HIGH 7.8 CVE-2025-55154 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified… Imagemagick 6.9.13-27 / 7.1.2-1+ Fix from $1,9502025-08-13 MEDIUM 6.5 CVE-2025-25248 An Integer Overflow or Wraparound vulnerability [CWE-190] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.2 … Fortios 1.4.3 / 7.2.11+ Fix from $1,6002025-08-12 MEDIUM 6.5 CVE-2025-50166 Integer overflow or wraparound in Windows Distributed Transaction Coordinator allows an authorized attacker to disclose information over a network. Windows 10 1507 10.0.10240.21100 / 10.0.14393.8330+ Fix from $1,6002025-08-12 HIGH 7.3 CVE-2025-23241 Integer overflow or wraparound in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17.2 may allow an authenticated… Mitigation only Fix from $1,9502025-08-12 HIGH 7.8 CVE-2025-22836 Integer overflow or wraparound in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17.2 may allow an authenticated… Mitigation only Fix from $1,9502025-08-12 MEDIUM 6.3 CVE-2024-38805 EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vu… Mitigation only Fix from $1,6002025-08-12 CRITICAL 9.8 CVE-2025-30404 An integer overflow vulnerability in the loading of ExecuTorch models can cause overlapping allocations, potentially resulting in code execution or o… Patch available Fix from $2,3002025-08-07 CRITICAL 9.8 CVE-2025-30405 An integer overflow vulnerability in the loading of ExecuTorch models can cause objects to be placed outside their allocated memory area, potentially… Patch available Fix from $2,3002025-08-07 HIGH 7.5 CVE-2025-23323 NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause an integer overflow or wraparound, leading to … Triton Inference Server 25.05+ Fix from $1,9502025-08-06 HIGH 7.5 CVE-2025-23324 NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause an integer overflow or wraparound, leading to … Triton Inference Server 25.05+ Fix from $1,9502025-08-06 CRITICAL 9.1 CVE-2025-23327 NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause an integer overflow through specially cra… Triton Inference Server 25.05+ Fix from $2,3002025-08-06 MEDIUM 5.5 CVE-2025-54631 Vulnerability of insufficient data length verification in the partition module. Impact: Successful exploitation of this vulnerability may affect avai… Harmonyos No fix yet Fix from $1,6002025-08-06 MEDIUM 6.5 CVE-2025-54804 Russh is a Rust SSH client & server library. In versions 0.54.0 and below, the channel window adjust message of the SSH protocol is used to track the… Russh 0.16.0 / 0.54.1+ Fix from $1,6002025-08-05