CWE-131 vulnerabilities

Memory corruption while processing video packets received from video firmware.

CVE-2025-1861 is a vulnerability in PHP versions 8.1.* before 8.1.32, 8.2.* before 8.2.28, 8.3.* before 8.3.19, and 8.4.* before 8.4.5. It involves an incorrect calculation of buffer size when parsing HTTP redirect responses, where the location buffer is limited to 1024 bytes instead of the RFC9110 recommended 8000 bytes. This can cause incorrect URL truncation and potentially redirect users to unintended locations.

Various Paragon Software products contain an arbitrary kernel memory vulnerability within biontdrv.sys, facilitated by the memmove function, which does not validate or sanitize user controlled input, allowing an attacker the ability to write arbitrary kernel memory and perform privilege escalation.

An out-of-bounds write vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .famos file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

A buffer overflow exists in IBM Merge Healthcare eFilm Workstation license server. A remote, unauthenticated attacker can exploit this vulnerability to achieve remote code execution.

Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378.