Browse CVEs

HIGH 7.8 CVE-2025-2760EPSS 13% GIMP XWD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on a… Gimp Mitigation only Fix from $1,9502025-04-23 MEDIUM 5.5 CVE-2025-22091 In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix page_size variable overflow Change all variables storing mlx5_um… Linux Kernel 6.12.23 / 6.13.11+ Fix from $1,6002025-04-16 MEDIUM 5.5 CVE-2025-22080 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Prevent integer overflow in hdr_first_de() The "de_off" and "used" va… Linux Kernel 6.6.87 / 6.12.23+ Fix from $1,6002025-04-16 MEDIUM 5.5 CVE-2025-22081 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix a couple integer overflows on 32bit systems On 32bit systems the … Linux Kernel 5.15.180 / 6.1.134+ Fix from $1,6002025-04-16 MEDIUM 5.5 CVE-2025-22059 In the Linux kernel, the following vulnerability has been resolved: udp: Fix multiple wraparounds of sk->sk_rmem_alloc. __udp_enqueue_schedule_skb(… Linux Kernel 6.12.23 / 6.13.11+ Fix from $1,6002025-04-16 MEDIUM 5.5 CVE-2025-22055 In the Linux kernel, the following vulnerability has been resolved: net: fix geneve_opt length integer overflow struct geneve_opt uses 5 bit length… Linux Kernel 5.10.236 / 5.15.180+ Fix from $1,6002025-04-16 HIGH 7.1 CVE-2025-22039 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix overflow in dacloffset bounds check The dacloffset field was origina… Linux Kernel 6.12.23 / 6.13.11+ Fix from $1,9502025-04-16 MEDIUM 6.5 CVE-2025-0101 A low privileged user can set the date of the devices to the 19th of January 2038 an therefore exceed the 32-Bit time limit. This causes some functio… Mitigation only Fix from $1,6002025-04-16 HIGH 8.1 CVE-2025-30712 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.1.6. Easi… Vm Virtualbox Patch available Fix from $1,9502025-04-15 CRITICAL 9.8 CVE-2025-3277 An integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used to allocate a buffer. When SQL… SQLite 3.49.1+ Fix from $2,3002025-04-14 MEDIUM 5.5 CVE-2025-29088 In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3_db_config (in the C-language API) can cause a denial of service (application crash… SQLite Patch available Fix from $1,6002025-04-10 MEDIUM 6.5 CVE-2025-22471 Dell PowerScale OneFS, versions 9.4.0.0 through 9.10.0.1, contains an integer overflow or wraparound vulnerability. An unauthenticated attacker with … Powerscale Onefs 9.10.1.1+ Fix from $1,6002025-04-10 HIGH 7.8 CVE-2025-26642 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502025-04-08 HIGH 7.8 CVE-2025-26639 Integer overflow or wraparound in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. Windows 10 21h2 10.0.19044.5737 / 10.0.19045.5737+ Fix from $1,9502025-04-08 HIGH 8.8 CVE-2025-3408 A vulnerability was found in Nothings stb up to f056911. It has been rated as critical. Affected by this issue is the function stb_dupreplace. The ma… Stb Image.h after 2.13 Fix from $1,9502025-04-08 HIGH 7.5 CVE-2025-29087 In SQLite 3.44.0 through 3.49.0 before 3.49.1, the concat_ws() SQL function can cause memory to be written beyond the end of a malloc-allocated buffe… SQLite 3.49.1+ Fix from $1,9502025-04-07 HIGH 8.8 CVE-2025-22851 in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow. Openharmony after 5.0.2 Fix from $1,9502025-04-07 MEDIUM 5.5 CVE-2025-32364 A floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an application to crash when handling malformed inputs a… Poppler 25.04.0+ Fix from $1,6002025-04-05 MEDIUM 5.5 CVE-2025-21997 In the Linux kernel, the following vulnerability has been resolved: xsk: fix an integer overflow in xp_create_and_assign_umem() Since the i and poo… Linux Kernel 6.1.132 / 6.6.85+ Fix from $1,6002025-04-03 MEDIUM 5.5 CVE-2025-22001 In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Fix integer overflow in qaic_validate_req() These are u64 variables… Linux Kernel 6.6.85 / 6.12.21+ Fix from $1,6002025-04-03 HIGH 7.9 CVE-2024-36337 Integer overflow within AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to loss of confidentiality, integrity… Mitigation only Fix from $1,9502025-04-02 HIGH 7.3 CVE-2024-36328 Integer overflow within AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to loss of integrity or availability. No fix yet Fix from $1,9502025-04-02 HIGH 7.9 CVE-2024-36336 Integer overflow within the AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to a loss of confidentiality, int… Mitigation only Fix from $1,9502025-04-02 MEDIUM 5.5 CVE-2025-21962 In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing closetimeo mount option User-provid… Linux Kernel 5.15.180 / 6.1.132+ Fix from $1,6002025-04-01 MEDIUM 5.5 CVE-2025-21963 In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing acdirmax mount option User-provided… Linux Kernel 5.15.180 / 6.1.132+ Fix from $1,6002025-04-01 MEDIUM 5.5 CVE-2025-21964 In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing acregmax mount option User-provided… Linux Kernel 5.15.180 / 6.1.132+ Fix from $1,6002025-04-01 MEDIUM 5.5 CVE-2023-53032 In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. … Linux Kernel 4.14.303 / 4.19.270+ Fix from $1,6002025-03-27 MEDIUM 5.5 CVE-2023-52933 In the Linux kernel, the following vulnerability has been resolved: Squashfs: fix handling and sanity checking of xattr_ids count A Sysbot [1] corr… Linux Kernel 4.5 / 4.10+ Fix from $1,6002025-03-27 MEDIUM 5.5 CVE-2022-49748 In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd: fix potential integer overflow on shift of a int The left shift o… Linux Kernel 5.4.231 / 5.10.166+ Fix from $1,6002025-03-27 MEDIUM 5.5 CVE-2022-49749 In the Linux kernel, the following vulnerability has been resolved: i2c: designware: use casting of u64 in clock multiplication to avoid overflow I… Linux Kernel 5.10.166 / 5.15.91+ Fix from $1,6002025-03-27