PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2025 document archive · 73

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,053 documents · Identifier year 2025 · 73 / 82

  1. CVE-2025-11964libpcap: libpcap: Data corruption via out-of-bounds write on Windows
  2. CVE-2025-11961libpcap: libpcap: Memory corruption via malformed MAC-48 address input
  3. CVE-2025-11840binutils: GNU Binutils out-of-bounds read
  4. CVE-2025-11839binutils: GNU Binutils prdbg.c tg_tag_type return value
  5. CVE-2025-11731libxslt: Type Confusion in exsltFuncResultCompfunction of libxslt
  6. CVE-2025-11721thunderbird: firefox: Memory safety bug fixed in Firefox 144 and Thunderbird 144
  7. CVE-2025-11719thunderbird: firefox: Use-after-free caused by the native messaging web extension API on Windows
  8. CVE-2025-11715thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  9. CVE-2025-11714thunderbird: firefox: Memory safety bugs
  10. CVE-2025-11713thunderbird: firefox: Potential user-assisted code execution in “Copy as cURL” command
  11. CVE-2025-11712thunderbird: firefox: An OBJECT tag type attribute overrode browser behavior on web resources without a content-type
  12. CVE-2025-11711thunderbird: firefox: Some non-writable Object properties could be modified
  13. CVE-2025-11710thunderbird: firefox: Cross-process information leaked due to malicious IPC messages
  14. CVE-2025-11709thunderbird: firefox: Out of bounds read/write in a privileged process triggered by WebGL textures
  15. CVE-2025-11708thunderbird: firefox: Use-after-free in MediaTrackGraphImpl::GetInstance()
  16. CVE-2025-11683yaml-syck: YAML::Syck potential Information Disclosure
  17. CVE-2025-11626wireshark: MONGO dissector infinite loop
  18. CVE-2025-11568luksmeta: Data corruption when handling LUKS1 partitions with luksmeta
  19. CVE-2025-11561sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems
  20. CVE-2025-11495binutils: GNU Binutils Linker heap-based overflow
  21. CVE-2025-11494binutils: GNU Binutils Linker out-of-bounds read
  22. CVE-2025-11468cpython: Missing character filtering in Python
  23. CVE-2025-11414binutils: GNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds
  24. CVE-2025-11413binutils: GNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds
  25. CVE-2025-11412binutils: GNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds
  26. CVE-2025-11411unbound: Unbound domain hijacking via promiscuous records
  27. CVE-2025-11395podman: Arbitrary file write when importing OCI archive
  28. CVE-2025-11277assimp: Open Asset Import Library Assimp Q3DLoader.cpp InternReadFile heap-based overflow
  29. CVE-2025-11275assimp: Open Asset Import Library Assimp OpenDDLParserUtils.h getNextSeparator heap-based overflow
  30. CVE-2025-11274assimp: Open Asset Import Library Assimp Q3DLoader.cpp InternReadFile allocation of resources
  31. CVE-2025-11234qemu-kvm: VNC WebSocket handshake use-after-free
  32. CVE-2025-11233rust: Rust standard library didn't detect all path separators on Cygwin
  33. CVE-2025-11230haproxy: denial of service vulnerability in HAProxy mjson library
  34. CVE-2025-11226ch.qos.logback/logback-core: Conditional abitrary code execution in logback-core
  35. CVE-2025-11187openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file
  36. CVE-2025-11153firefox: From CVEorg collector
  37. CVE-2025-11149node-static: node-static denial of service
  38. CVE-2025-11143org.eclipse.jetty/jetty-http: org.eclipse.jetty: Security bypass due to differential URI parsing
  39. CVE-2025-11083binutils: GNU Binutils Linker heap-based overflow
  40. CVE-2025-11082binutils: GNU Binutils Linker heap-based overflow
  41. CVE-2025-11081binutils: GNU Binutils out-of-bounds read
  42. CVE-2025-11065github.com/go-viper/mapstructure/v2: Go-viper's mapstructure May Leak Sensitive Information in Logs in github.com/go-viper/mapstructure
  43. CVE-2025-11021libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library
  44. CVE-2025-10966curl: Curl missing SFTP host verification with wolfSSH backend
  45. CVE-2025-10934gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
  46. CVE-2025-10925gimp: GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
  47. CVE-2025-10924gimp: GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability
  48. CVE-2025-10923gimp: GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability
  49. CVE-2025-10922gimp: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
  50. CVE-2025-10921gimp: GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
CVE 2025 document archive — Page 73 | PulseLinux