Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

dr_flac

dr_flac, an audio decoder within the dr_libs toolset, contains an integer overflow vulnerability flaw due to trusting the totalPCMFrameCount field from FLAC metadata before calculating buffer size, allowing an attacker with a specially crafted file to perform DoS against programs using the tool.

CVE-2025-14369 identifies an integer overflow vulnerability in the dr_flac audio decoder, part of the mackron dr_libs toolset. The vulnerability stems from the decoder's reliance on the totalPCMFrameCount field extracted from FLAC metadata without adequate validation. This field is used to calculate buffer sizes for audio data processing. If an attacker crafts a FLAC file with a manipulated totalPCMFrameCount value, it can cause an integer overflow or wraparound during buffer size calculation. This leads to memory corruption or allocation of insufficient buffer space, which can cause the application to crash or behave unpredictably, resulting in a denial-of-service (DoS) condition. The vulnerability affects version 0 of dr_flac, and no patches or fixes have been published yet. Exploitation requires the target application to process a maliciously crafted FLAC file, which does not require prior authentication or user interaction beyond file processing. While no active exploits have been reported, the flaw poses a risk to any software or systems that utilize dr_flac for audio decoding, particularly in environments where untrusted audio files are handled. The vulnerability is categorized under CWE-190 (Integer Overflow or Wraparound), a common class of memory corruption bugs that can lead to stability issues or security breaches if exploited further. The absence of a CVSS score necessitates an assessment based on impact and exploitability factors.

Detailed information about CVE-2025-14369: CWE-190: Integer Overflow or Wraparound in mackron dr_flac affecting mackron dr_flac. Get real-time updates, technica

CVE-2025-14369: CWE-190: Integer Overflow or Wraparound in mackron dr_flac - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-14369: CWE-190: Integer Overflow or Wraparound in mackron dr_flac

Threats Tagged 'cve-2025-14369'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-14369'

Lead Pen Test Professional