PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2025 document archive · 71

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,053 documents · Identifier year 2025 · 71 / 82

  1. CVE-2025-15059gimp: heap-based buffer overflow via specially crafted PSP file
  2. CVE-2025-14946libnbd: libnbd: Arbitrary code execution via SSH argument injection through a malicious URI
  3. CVE-2025-14905389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow
  4. CVE-2025-14876qemu-kvm: Unbounded allocation in virtio-crypto
  5. CVE-2025-14831gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification
  6. CVE-2025-14821libssh: libssh: Insecure default configuration leads to local man-in-the-middle attacks on Windows
  7. CVE-2025-14819curl: libcurl: Improper certificate validation due to cached TLS settings reuse
  8. CVE-2025-14813bouncycastle: BC-JAVA: GOSTCTR implementation unable to process more than 255 blocks correctly
  9. CVE-2025-14714LibreOffice: LibreOffice: Authentication Bypass leading to privilege escalation via bundled interpreter execution
  10. CVE-2025-14576qtdeclarative: Qt SVG: Arbitrary QML/JavaScript code injection via malicious SVG file
  11. CVE-2025-14524curl: Information disclosure via cross-protocol redirect with OAuth2 bearer token
  12. CVE-2025-14523libsoup: libsoup: Duplicate Host Header Handling Causes Host-Parsing Discrepancy (First- vs Last-Value Wins)
  13. CVE-2025-14512glib: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow
  14. CVE-2025-14505elliptic: Key handling flaws in Elliptic
  15. CVE-2025-14425gimp: GIMP: Remote Code Execution via JP2 file parsing heap-based buffer overflow
  16. CVE-2025-14424gimp: GIMP: Remote Code Execution via XCF File Parsing Use-After-Free
  17. CVE-2025-14423gimp: GIMP: Remote Code Execution via stack-based buffer overflow in LBM file parsing
  18. CVE-2025-14422gimp: GIMP: Remote Code Execution via PNM file parsing integer overflow
  19. CVE-2025-14333firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146
  20. CVE-2025-14332firefox: Memory safety bugs fixed in Firefox 146 and Thunderbird 146
  21. CVE-2025-14331firefox: thunderbird: Same-origin policy bypass in the Request Handling component
  22. CVE-2025-14330firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component
  23. CVE-2025-14329firefox: thunderbird: Privilege escalation in the Netmonitor component
  24. CVE-2025-14328firefox: thunderbird: Privilege escalation in the Netmonitor component
  25. CVE-2025-14327firefox: Spoofing issue in the Downloads Panel component
  26. CVE-2025-14326firefox: Use-after-free in the Audio/Video: GMP component
  27. CVE-2025-14325firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component
  28. CVE-2025-14324firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component
  29. CVE-2025-14323firefox: thunderbird: Privilege escalation in the DOM: Notifications component
  30. CVE-2025-14322firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component
  31. CVE-2025-14321firefox: thunderbird: Use-after-free in the WebRTC: Signaling component
  32. CVE-2025-14242vsftpd: vsftpd: Denial of service via integer overflow in ls command parameter parsing
  33. CVE-2025-14181php: PHP: Denial of Service via heap buffer overflow in SOAP client
  34. CVE-2025-14180php: PHP: Denial of Service via invalid character sequence in PDO PostgreSQL prepared statement
  35. CVE-2025-14179php: SQL injection in pdo_firebird via NUL bytes in quoted strings
  36. CVE-2025-14178php: heap-based buffer overflow in array_merge()
  37. CVE-2025-14177php: PHP: Information disclosure via getimagesize() function when reading multi-chunk images
  38. CVE-2025-14174Google Chrome: chromium: webkitgtk: Out of bounds memory access via crafted HTML page
  39. CVE-2025-14104util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames
  40. CVE-2025-14087glib: GLib: Buffer underflow in GVariant parser leads to heap corruption
  41. CVE-2025-14017curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers
  42. CVE-2025-13947webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop
  43. CVE-2025-13946wireshark: Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
  44. CVE-2025-13945wireshark: Improperly Controlled Sequential Memory Allocation in Wireshark
  45. CVE-2025-13878bind: bind: Denial of Service via corrupt or malicious record
  46. CVE-2025-13837cpython: Out-of-memory when loading Plist
  47. CVE-2025-13836cpython: Excessive read buffering DoS in http.client
  48. CVE-2025-13763libopensc: opensc: Multiple uses of uninitialized variable
  49. CVE-2025-13699mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation
  50. CVE-2025-13674Wireshark: Wireshark: BPv7 dissector crash leads to denial of service
CVE 2025 document archive — Page 71 | PulseLinux