Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

scrcpy

Genymobile/scrcpy versions up to and including 3.3.3, prior to commit 3e40b24, contain a buffer overflow vulnerability in the sc_device_msg_deserialize() function. A compromised device can send crafted messages that cause out-of-bounds reads, which may result in memory corruption or a denial-of-service condition. This vulnerability may allow further exploitation on the host system.

CVE-2025-34449 is a vulnerability identified in Genymobile's scrcpy software, a popular open-source tool used for displaying and controlling Android devices from a desktop environment. The vulnerability is a buffer overflow caused by unsafe deserialization of untrusted data within the sc_device_msg_deserialize() function. Specifically, when scrcpy receives messages from a connected device, it deserializes these messages without sufficient bounds checking, allowing a malicious or compromised device to send crafted messages that trigger out-of-bounds reads. This can lead to memory corruption, which may destabilize the host application or cause denial-of-service conditions. The vulnerability does not require any user interaction or elevated privileges on the host, but it does require that the attacker has the ability to connect a compromised device to the host running scrcpy. The flaw is categorized under CWE-502, which concerns deserialization of untrusted data leading to security issues. The CVSS v4.0 score is 6.9 (medium severity), reflecting the local attack vector, low complexity, no privileges or user interaction required, but with high impact on availability. While no public exploits are known, the potential for further exploitation exists if memory corruption is leveraged for code execution or privilege escalation. The vulnerability affects all scrcpy versions up to and including 3.3.3 prior to commit 3e40b24, and no official patches are linked yet. Organizations relying on scrcpy for device management or debugging should be aware of this risk and monitor for updates.

Detailed information about CVE-2025-34449: CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer in Genymobile scrcpy affecting Genymo

CVE-2025-34449: CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer in Genymobile scrcpy - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-34449: CWE-502 Deserialization of Untrusted Data in Genymobile scrcpy

Threats Tagged 'cve-2025-34449'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-34449'

Lead Pen Test Professional