CVE 2025 document archive · 77
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
4,053 documents · Identifier year 2025 · 77 / 82
- CVE-2025-6020linux-pam: Linux-pam directory Traversal
- CVE-2025-6019libblockdev: LPE from allow_active to root in libblockdev via udisks
- CVE-2025-6018pam-config: LPE from unprivileged to allow_active in PAM
- CVE-2025-5994unbound: Unbound Cache poisoning
- CVE-2025-5991qt: Use after free in Qt
- CVE-2025-5987libssh: Invalid return code for chacha20 poly1305 with OpenSSL backend
- CVE-2025-5986thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links
- CVE-2025-5962rhel-lightspeed: Improper Access Control in Lightspeed History Management Allows Local Privilege Manipulation
- CVE-2025-5918libarchive: Reading past EOF may be triggered for piped file streams
- CVE-2025-5917libarchive: Off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c
- CVE-2025-5916libarchive: Integer overflow while reading warc files at archive_read_support_format_warc.c
- CVE-2025-5915libarchive: Heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c
- CVE-2025-5914libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c
- CVE-2025-5889brace-expansion: juliangruber brace-expansion index.js expand redos
- CVE-2025-5791users: `root` appended to group listings
- CVE-2025-5745glibc: Vector register overwrite bug in glibc
- CVE-2025-5702glibc: Vector register overwrite bug in glibc
- CVE-2025-5683qt: Qt ICNS Image Crash Vulnerability
- CVE-2025-5601wireshark: Buffer Overflow in Wireshark
- CVE-2025-5473gimp: GIMP ICO File Parsing Integer Overflow
- CVE-2025-5455qt6-qtbase: qt5-qtbase: QtCore Assertion Failure Denial of Service
- CVE-2025-5449libssh: Integer Overflow in libssh SFTP Server Packet Length Validation Leading to Denial of Service
- CVE-2025-5399curl: libcurl: WebSocket endless loop
- CVE-2025-5372libssh: Incorrect Return Code Handling in ssh_kdf() in libssh
- CVE-2025-5351libssh: Double Free Vulnerability in libssh Key Export Functions
- CVE-2025-5318libssh: out-of-bounds read in sftp_handle()
- CVE-2025-5283libvpx: Double-free in libvpx encoder
- CVE-2025-5278coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification
- CVE-2025-5272firefox: Memory safety bugs
- CVE-2025-5271firefox: Devtools' preview ignored CSP headers
- CVE-2025-5270firefox: SNI was sometimes unencrypted
- CVE-2025-5269firefox: thunderbird: Memory safety bug
- CVE-2025-5268firefox: thunderbird: Memory safety bugs
- CVE-2025-5267firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details
- CVE-2025-5266firefox: thunderbird: Script element events leaked cross-origin resource status
- CVE-2025-5265firefox: thunderbird: Potential local code execution in “Copy as cURL” command
- CVE-2025-5264firefox: thunderbird: Potential local code execution in “Copy as cURL” command
- CVE-2025-5263firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content
- CVE-2025-5245binutils: GNU Binutils objdump debug.c debug_type_samep memory corruption
- CVE-2025-5244binutils: GNU Binutils ld elflink.c elf_gc_sweep memory corruption
- CVE-2025-5222icu: Stack buffer overflow in the SRBRoot::addTag function
- CVE-2025-5204assimp: Assimp Out-of-Bounds Read Vulnerability
- CVE-2025-5203assimp: Assimp Out-of-Bounds Read Vulnerability
- CVE-2025-5202assimp: Assimp: Out-of-bounds Read Vulnerability
- CVE-2025-5201assimp: Open Asset Import Library Assimp LWOLoader.cpp CountVertsAndFacesLWO2 out-of-bounds
- CVE-2025-5200assimp: Assimp: Out-of-bounds Read Vulnerability
- CVE-2025-5169assimp: Assimp Out-of-Bounds Read Vulnerability
- CVE-2025-5168assimp: Assimp: Out-of-Bounds Read Vulnerability
- CVE-2025-5167assimp: Assimp: Out-of-Bounds Read Vulnerability
- CVE-2025-5166assimp: Assimp MDC File Parser Out-of-Bounds Read