Threats Tagged 'brew-mcpm-cve-2025-64429'
View all threats tagged with 'brew-mcpm-cve-2025-64429'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'brew-mcpm-cve-2025-64429'
Click on any threat for detailed analysis and mitigation recommendations
0 DuckDB, a SQL database management system, introduced block-based encryption on the filesystem starting with version 1.4.0. Several issues were found in this implementation, including fallback to an insecure random number generator (pcg32), potential removal of memory clearing calls by the compiler, downgrade attacks from GCM to CTR encryption modes, and unchecked return values from OpenSSL's random byte generation. These vulnerabilities could allow attackers to compromise cryptographic keys, bypass integrity checks, or influence the random number generator state. Version 1.4.2 addresses these issues by disabling the insecure RNG fallback, using secure memory clearing primitives, requiring explicit cipher specification, and checking return codes. Join the discussion | GCVE Database | 08/13/2026, 17:13:14 UTC Added: 09/18/2026, 01:05:14 UTC |
Showing 1 to 1 of 1 result