Browse CVEs

HIGH 7.8 CVE-2025-64461 There is an out of bounds write vulnerability in NI LabVIEW in mgocre_SH_25_3!RevBL() when parsing a corrupted VI file. This vulnerability may resul… Labview Mitigation only Fix from $1,9502025-12-18 HIGH 7.8 CVE-2025-47350 Memory corruption while handling concurrent memory mapping and unmapping requests from a user-space application. Fastconnect 6900 Firmware No fix yet Fix from $1,9502025-12-18 HIGH 8.4 CVE-2025-47372 Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication. Qam8255p Firmware Mitigation only Fix from $1,9502025-12-18 HIGH 7.8 CVE-2025-47320 Memory corruption while processing MFC channel configuration during music playback. 9206 Lte Modem Firmware Patch available Fix from $1,9502025-12-18 HIGH 7.8 CVE-2025-53524 Fuji Electric Monitouch V-SFT-6 is vulnerable to an out-of-bounds write while processing a specially crafted project file, which may allow an attac… Mitigation only Fix from $1,9502025-12-17 HIGH 8.8 CVE-2025-14766 Out of bounds read and write in V8 in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a cr… Chrome 143.0.7499.146+ Fix from $1,9502025-12-16 CRITICAL 9.8 CVE-2025-62863 Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorrectly form… Ampereone A192 32m Firmware 4.4.5.2 / 5.4.5.1+ Fix from $2,3002025-12-16 CRITICAL 9.8 CVE-2025-62864 Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorrectly form… Ampereone A192 32m Firmware 4.4.5.2 / 5.4.5.1+ Fix from $2,3002025-12-16 HIGH 7.8 CVE-2025-9456 A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability. A malicious actor can … Shared Components 2026.5+ Fix from $1,9502025-12-16 HIGH 7.8 CVE-2025-9457 A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability. A malicious actor can lev… Shared Components 2026.5+ Fix from $1,9502025-12-16 HIGH 7.8 CVE-2025-9452 A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability. A malicious actor can … Shared Components 2026.5+ Fix from $1,9502025-12-16 HIGH 7.8 CVE-2025-10898 AA maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor m… Shared Components 2026.5+ Fix from $1,9502025-12-16 HIGH 7.8 CVE-2025-10899 AA maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor m… Shared Components 2026.5+ Fix from $1,9502025-12-16 HIGH 7.8 CVE-2025-10900 AA maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor m… Shared Components 2026.5+ Fix from $1,9502025-12-16 HIGH 7.8 CVE-2025-10884 AA maliciously crafted CATPART file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor… Shared Components 2026.5+ Fix from $1,9502025-12-16 HIGH 7.8 CVE-2025-10888 AA maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor m… Shared Components 2026.5+ Fix from $1,9502025-12-16 HIGH 7.8 CVE-2025-10882 AA maliciously crafted X_T file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may… Shared Components 2026.5+ Fix from $1,9502025-12-16 HIGH 7.5 CVE-2023-53886 Xlight FTP Server 3.9.3.6 contains a stack buffer overflow vulnerability in the 'Execute Program' configuration that allows attackers to crash the ap… Xlight Ftp Server No fix yet Fix from $1,9502025-12-15 MEDIUM 5.5 CVE-2023-53879 NVClient 5.0 contains a stack buffer overflow vulnerability in the user configuration contact field that allows attackers to crash the application. A… Nvclient No fix yet Fix from $1,6002025-12-15 HIGH 8.8 CVE-2025-14655 A security flaw has been discovered in Tenda AC20 16.03.08.12. The impacted element is the function formSetRebootTimer of the file /goform/SetSysAuto… Ac20 Firmware No fix yet Fix from $1,9502025-12-14 HIGH 8.8 CVE-2025-14654 A vulnerability was identified in Tenda AC20 16.03.08.12. The affected element is the function formSetPPTPUserList of the file /goform/setPptpUserLis… Ac20 Firmware No fix yet Fix from $1,9502025-12-14 HIGH 8.8 CVE-2025-43539EPSS 6% The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.… macOS 14.8.3 / 15.7.3+ Fix from $1,9502025-12-12 HIGH 7.8 CVE-2025-43402 The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.1. An app may… macOS 26.1+ Fix from $1,9502025-12-12 MEDIUM 6.6 CVE-2025-11266 An out-of-bounds write vulnerability exists in the Grassroots DICOM library (GDCM). The issue is triggered during parsing of a malformed DICOM file c… Patch available Fix from $1,6002025-12-12 HIGH 8.8 CVE-2025-14174 KEVEPSS 23% Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access… Chrome 18.7.3 / 26.2+ Fix from $1,9502025-12-12 HIGH 8.2 CVE-2025-10451 Unchecked output buffer may allowed arbitrary code execution in SMM and potentially result in SMM memory corruption. Mitigation only Fix from $1,9502025-12-12 CRITICAL 9.8 CVE-2025-66590 In AzeoTech DAQFactory release 20.7 (Build 2555), an out-of-bounds write vulnerability can be exploited by an attacker to cause the program to write … Daqfactory 21.1+ Fix from $2,3002025-12-11 HIGH 7.8 CVE-2025-36935 In trusty_ffa_mem_reclaim of shared-mem-smcall.c, there is a possible memory corruption due to uninitialized data. This could lead to local escalatio… Android Mitigation only Fix from $1,9502025-12-11 CRITICAL 9.8 CVE-2025-36937 In AudioDecoder::HandleProduceRequest of audio_decoder.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead … Android Mitigation only Fix from $2,3002025-12-11 HIGH 7.8 CVE-2025-36925 In WAVES_send_data_to_dsp of libaoc_waves.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati… Android Mitigation only Fix from $1,9502025-12-11