PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2025 document archive · 12

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,053 documents · Identifier year 2025 · 12 / 82

  1. CVE-2025-66614tomcat: Client certificate verification bypass due to virtual host mapping
  2. CVE-2025-66566lz4-java: lz4-java: Information Disclosure via Insufficient Output Buffer Clearing
  3. CVE-2025-66506github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token
  4. CVE-2025-66476vim: Vim for Windows: Uncontrolled search path vulnerability allows arbitrary code execution
  5. CVE-2025-66471urllib3: urllib3 Streaming API improperly handles highly compressed data
  6. CVE-2025-66418urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion
  7. CVE-2025-66412angular: Angular Stored XSS Vulnerability via SVG Animation, SVG URL and MathML Attributes
  8. CVE-2025-66382libexpat: libexpat: Denial of service via crafted file processing
  9. CVE-2025-66293libpng: LIBPNG out-of-bounds read in png_image_read_composite
  10. CVE-2025-66287webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash
  11. CVE-2025-66286webkitgtk: Authorization bypass through WebPage::send-request signal handler
  12. CVE-2025-66215OpenSC: OpenSC: Stack-buffer-overflow with physical access via crafted smart card or USB device
  13. CVE-2025-66200httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo
  14. CVE-2025-66199openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression
  15. CVE-2025-66038OpenSC: OpenSC: Memory corruption via improper compact-TLV length validation
  16. CVE-2025-66037OpenSC: OpenSC: Out-of-bounds read via crafted input
  17. CVE-2025-66035angular: Angular HTTP Client Has XSRF Token Leakage via Protocol-Relative URLs
  18. CVE-2025-66034fonttools: fontTools: Arbitrary file write leading to remote code execution via malicious .designspace file
  19. CVE-2025-66031node-forge: node-forge ASN.1 Unbounded Recursion
  20. CVE-2025-66030node-forge: node-forge: Integer Overflow allows OID-based security bypass
  21. CVE-2025-66004usbmuxd: usbmuxd: Path Traversal vulnerability allows local privilege escalation
  22. CVE-2025-65955imagemagick: ImageMagick use-after-free/double-free
  23. CVE-2025-65637github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload
  24. CVE-2025-65082httpd: Apache HTTP Server: CGI environment variable override
  25. CVE-2025-65018libpng: LIBPNG heap buffer overflow
  26. CVE-2025-64775org.apache.struts/struts2-core: Apache Struts: File leak in multipart request processing causes disk exhaustion (DoS)
  27. CVE-2025-64756glob: glob: Command Injection Vulnerability via Malicious Filenames
  28. CVE-2025-64720libpng: LIBPNG buffer overflow
  29. CVE-2025-64718js-yaml: js-yaml prototype pollution in merge
  30. CVE-2025-64524cups-filters: cups-filters: Heap buffer overflow in rastertopclx filter may lead arbitrary code execution
  31. CVE-2025-64506libpng: LIBPNG heap buffer over-read
  32. CVE-2025-64505libpng: LIBPNG heap buffer overflow via malformed palette index
  33. CVE-2025-64503cups: cups-filters: cups-filters: Out-of-bounds write via crafted PDF MediaBox
  34. CVE-2025-64329github.com/containerd/containerd: containerd: Memory exhaustion via CRI Attach implementation goroutine leaks
  35. CVE-2025-64183openexr: use after free in PyObject_StealAttrString
  36. CVE-2025-64182openexr: buffer overflow in PyOpenEXR_old's channels() and channel()
  37. CVE-2025-64181openexr: Use of Uninitialized Memory inside generic_unpack
  38. CVE-2025-64118node-tar: tar: node-tar: Information disclosure via reading a truncated tar file
  39. CVE-2025-62718axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization
  40. CVE-2025-62689libmicrohttpd: GNU libmicrohttpd null pointer dereference
  41. CVE-2025-62594ImageMagick: ImageMagick CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash (DoS)
  42. CVE-2025-62518astral-tokio-tar: astral-tokio-tar Vulnerable to PAX Header Desynchronization
  43. CVE-2025-62507redis: Redis: Bug in XACKDEL may lead to stack overflow and potential RCE
  44. CVE-2025-62408c-ares: c-ares: Denial of Service due to query termination after maximum attempts
  45. CVE-2025-62231xorg: xmayland: Value overflow in XkbSetCompatMap()
  46. CVE-2025-62230xorg: xwayland: Use-after-free in Xkb client resource removal
  47. CVE-2025-62229xorg: xmayland: Use-after-free in XPresentNotify structure creation
  48. CVE-2025-62171ImageMagick: ImageMagick vulnerable to denial of service via integer overflow in BMP decoder on 32-bit systems
  49. CVE-2025-62168squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling
  50. CVE-2025-61985openssh: OpenSSH: Null character in ssh:// URI can lead to code execution via ProxyCommand
CVE 2025 document archive — Page 12 | PulseLinux