PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2025 document archive · 74

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,053 documents · Identifier year 2025 · 74 / 82

  1. CVE-2025-10920gimp: GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
  2. CVE-2025-10911libxslt: use-after-free with key data stored cross-RVT
  3. CVE-2025-10729qtsvg: Use-after-free vulnerability in Qt SVG
  4. CVE-2025-10728qt6-qtsvg: qt5-qtsvg: Uncontrolled recursion in Qt SVG module
  5. CVE-2025-10543paho.mqtt.golang: paho.mqtt.golang: Integer Overflow in UTF-8 String Encoding
  6. CVE-2025-10537firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143
  7. CVE-2025-10536firefox: thunderbird: Information disclosure in the Networking: Cache component
  8. CVE-2025-10535firefox: Information disclosure, mitigation bypass in the Privacy component in Firefox for Android
  9. CVE-2025-10534firefox: Spoofing issue in the Site Permissions component
  10. CVE-2025-10533firefox: thunderbird: Integer overflow in the SVG component
  11. CVE-2025-10532firefox: thunderbird: Incorrect boundary conditions in the JavaScript: GC component
  12. CVE-2025-10531firefox: Mitigation bypass in the Web Compatibility: Tooling component
  13. CVE-2025-10530firefox: Spoofing issue in the WebAuthn component in Firefox for Android
  14. CVE-2025-10529firefox: thunderbird: Same-origin policy bypass in the Layout component
  15. CVE-2025-10528firefox: thunderbird: Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component
  16. CVE-2025-10527firefox: thunderbird: Sandbox escape due to use-after-free in the Graphics: Canvas2D component
  17. CVE-2025-10502chromium-browser: angle: Heap buffer overflow in ANGLE
  18. CVE-2025-10263kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources
  19. CVE-2025-10230samba: Command Injection in WINS Server Hook Script
  20. CVE-2025-10158rsync: Rsync: Out of bounds array access via negative index
  21. CVE-2025-10148curl: predictable WebSocket mask
  22. CVE-2025-9901libsoup: Improper Handling of HTTP Vary Header in libsoup Caching
  23. CVE-2025-9900libtiff: Libtiff Write-What-Where
  24. CVE-2025-9820gnutls: Stack-based Buffer Overflow in gnutls_pkcs11_token_init() Function
  25. CVE-2025-9817Wireshark: NULL Pointer Dereference in Wireshark
  26. CVE-2025-9810linenoise: TOCTOU race in Linenoise enables arbitrary file overwrite and permission changes
  27. CVE-2025-9784undertow: Undertow MadeYouReset HTTP/2 DDoS Vulnerability
  28. CVE-2025-9714libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c
  29. CVE-2025-9640samba: vfs_streams_xattr uninitialized memory write possible
  30. CVE-2025-9615NetworkManager: NetworkManager File Access
  31. CVE-2025-9566podman: Podman kube play command may overwrite host files
  32. CVE-2025-9478chromium-browser: angle: Use after free in ANGLE
  33. CVE-2025-9403jq: assertion failure in run_jq_tests() of the file jq_test.c
  34. CVE-2025-9390vim: vim xxd xxd.c main buffer overflow
  35. CVE-2025-9389vim: vim memmove-vec-unaligned-erms.S __memmove_avx_unaligned_erms memory corruption
  36. CVE-2025-9308yarn: yarnpkg regular expression denial of service
  37. CVE-2025-9301cmake: cmake reachable assertion
  38. CVE-2025-9288sha.js: Missing type checks leading to hash rewind and passing on crafted data
  39. CVE-2025-9287cipher-base: Cipher-base hash manipulation
  40. CVE-2025-9232openssl: Out-of-bounds read in HTTP client no_proxy handling
  41. CVE-2025-9231openssl: Timing side-channel in SM2 algorithm on 64 bit ARM
  42. CVE-2025-9230openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap
  43. CVE-2025-9187firefox: thunderbird: Memory safety bugs fixed in Firefox 142 and Thunderbird 142
  44. CVE-2025-9185thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142
  45. CVE-2025-9184thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142
  46. CVE-2025-9183firefox: Spoofing issue in the Address Bar component
  47. CVE-2025-9182firefox: thunderbird: Denial-of-service due to out-of-memory in the Graphics: WebRender component
  48. CVE-2025-9181thunderbird: firefox: Uninitialized memory in the JavaScript Engine component
  49. CVE-2025-9180thunderbird: firefox: Same-origin policy bypass in the Graphics: Canvas2D component
  50. CVE-2025-9179thunderbird: firefox: Sandbox escape due to invalid pointer in the Audio/Video: GMP component
CVE 2025 document archive — Page 74 | PulseLinux