Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-61856 State: PUBLISHED Published: 2025-10-10T10:19:19.963Z Last Updated: 2025-10-10T16:31:59.100Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. Products: V-SFT Problem Types: CWE-121 Description: A stack-based buffer overflow vulnerability exists in VS6ComFile!CV7BaseMap::WriteV7DataToRom of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/Se
Analyst Notes: - CISA ADP Vulnrichment: References: - https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/Search.php - https://jvn.jp/en/vu/JVNVU90008453/
CVE ID: CVE-2025-61857 State: PUBLISHED Published: 2025-10-10T10:29:14.990Z Last Updated: 2025-10-10T15:49:01.724Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. Products: V-SFT Problem Types: CWE-787 Description: An out-of-bounds write vulnerability exists in VS6ComFile!CItemExChange::WinFontDynStrCheck of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/Sear
nalyst Notes: - CISA ADP Vulnrichment: References: - https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/Search.php - https://jvn.jp/en/vu/JVNVU90008453/
CVE ID: CVE-2025-61858 State: PUBLISHED Published: 2025-10-10T10:28:40.376Z Last Updated: 2025-10-10T15:53:10.489Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. Products: V-SFT Problem Types: CWE-787 Description: An out-of-bounds write vulnerability exists in VS6ComFile!set_AnimationItem of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/Search.php - https:/
CISA ADP Vulnrichment: References: - https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/Search.php - https://jvn.jp/en/vu/JVNVU90008453/
CVE ID: CVE-2025-61859 State: PUBLISHED Published: 2025-10-10T10:33:18.226Z Last Updated: 2025-10-10T15:46:50.694Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. Products: V-SFT Problem Types: CWE-787 Description: An out-of-bounds write vulnerability exists in VS6ComFile!CItemDraw::is_motion_tween of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/Search.php
Notes: - CISA ADP Vulnrichment: References: - https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/Search.php - https://jvn.jp/en/vu/JVNVU90008453/
CVE ID: CVE-2025-61860 State: PUBLISHED Published: 2025-10-10T10:36:33.157Z Last Updated: 2025-10-10T15:46:02.385Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. Products: V-SFT Problem Types: CWE-125 Description: An out-of-bounds read vulnerability exists in VS6MemInIF!set_temp_type_default of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/Search.php - http
- CISA ADP Vulnrichment: References: - https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/Search.php - https://jvn.jp/en/vu/JVNVU90008453/
CVE ID: CVE-2025-61861 State: PUBLISHED Published: 2025-10-10T10:54:50.609Z Last Updated: 2025-10-10T13:13:29.277Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. Products: V-SFT Problem Types: CWE-125 Description: An out-of-bounds read vulnerability exists in VS6ComFile!load_link_inf of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/Search.php - https://jvn.
ADP Vulnrichment: References: - https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/Search.php - https://jvn.jp/en/vu/JVNVU90008453/
CVE ID: CVE-2025-61862 State: PUBLISHED Published: 2025-10-10T10:58:05.786Z Last Updated: 2025-10-10T13:01:32.901Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. Products: V-SFT Problem Types: CWE-125 Description: An out-of-bounds read vulnerability exists in VS6ComFile!get_ovlp_element_size of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/Search.php - http
CVE ID: CVE-2025-61863 State: PUBLISHED Published: 2025-10-10T11:00:40.917Z Last Updated: 2025-10-10T12:57:48.760Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. Products: V-SFT Problem Types: CWE-125 Description: An out-of-bounds read vulnerability exists in VS6ComFile!CSaveData::delete_mem of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/Search.php - http
CVE ID: CVE-2025-61864 State: PUBLISHED Published: 2025-10-10T11:05:28.873Z Last Updated: 2025-10-10T12:52:01.882Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. Products: V-SFT Problem Types: CWE-416 Description: A use after free vulnerability exists in VS6ComFile!load_link_inf of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/Search.php - https://jvn.jp/en
ulnrichment: References: - https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/Search.php - https://jvn.jp/en/vu/JVNVU90008453/
CVE ID: CVE-2025-61865 State: PUBLISHED Published: 2025-10-23T04:14:50.057Z Last Updated: 2025-10-23T15:00:29.366Z Severity: MEDIUM (CVSS 6.7 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: I-O DATA DEVICE, INC. Products: NarSuS App Problem Types: CWE-428 Description: NarSuS App registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.iodata.jp/support/information/2025/10_NarSuS_App/ - https://jvn.jp/en/jp/JVN03295012/
CVE ID: CVE-2025-61871 State: PUBLISHED Published: 2025-10-10T04:52:17.112Z Last Updated: 2025-10-10T18:32:49.428Z Severity: MEDIUM (CVSS 6.7 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: BUFFALO INC. Products: NAS Navigator2 (Windows version only) Problem Types: CWE-428 Description: NAS Navigator2 Windows version by BUFFALO INC. registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.buffalo.jp/news/detail/20251009-01.html - https://jvn.jp/en/jp/JVN69099112/
CVE ID: CVE-2025-61876 State: PUBLISHED Published: 2025-10-29T00:00:00.000Z Last Updated: 2025-10-30T14:35:48.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Direct Object Reference (IDOR) in /tenants/{id} API endpoint in Inforcer Platform version 2.0.153 allows an authenticated user with low privileges to enumerate and access tenant information belonging to other clients via modification of the tenant ID in the request URL. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.inforcer.com/platform - https://silvatech.uk/cve-2025-61876-inforcer-platform/
CVE ID: CVE-2025-61881 State: PUBLISHED Published: 2025-10-21T20:03:14.367Z Last Updated: 2025-10-22T14:36:09.432Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Oracle Corporation Products: Oracle Database Server Problem Types: Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Java VM. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java VM accessible data. Description: Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.28, 21.3-21.19 and 23.4-
e Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.28, 21.3-21.19 and 23.4-23.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Java VM. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java VM accessible data. CVSS 3.1 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.oracle.com/security-alerts/cpuoct2025.html
CVE ID: CVE-2025-61882 State: PUBLISHED Published: 2025-10-05T03:17:01.644Z Last Updated: 2025-10-21T22:45:16.790Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Oracle Corporation Products: Oracle Concurrent Processing Problem Types: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks of this vulnerability can result in takeover of Oracle Concurrent Processing. Description: Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration). Supported versions that are affected are 12.2.3-12.2.14.
Oracle E-Business Suite (component: BI Publisher Integration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks of this vulnerability can result in takeover of Oracle Concurrent Processing. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.oracle.com/security-alerts/alert-cve-2025-61882.html
CVE ID: CVE-2025-61884 State: PUBLISHED Published: 2025-10-12T02:34:51.603Z Last Updated: 2025-10-21T22:45:16.617Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Oracle Corporation Products: Oracle Configurator Problem Types: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Configurator accessible data. Description: Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI). Supported versions that are affected are 12
cle Configurator product of Oracle E-Business Suite (component: Runtime UI). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Configurator accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.oracle.com/security-alerts/alert-cve-2025-61884.html
CVE ID: CVE-2025-61885 State: PUBLISHED Published: 2025-10-21T20:03:14.721Z Last Updated: 2025-10-22T14:34:58.253Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Oracle Corporation Products: Oracle Life Sciences InForm Problem Types: Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Life Sciences InForm. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Life Sciences InForm accessible data. Description: Vulnerability in the Oracle Life Sciences InForm product of Oracle Health Sciences Applications (component: Web Server). The supported version
racle Life Sciences InForm product of Oracle Health Sciences Applications (component: Web Server). The supported version that is affected is 7.0.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Life Sciences InForm. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Life Sciences InForm accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.oracle.com/security-alerts/cpuoct2025.html
CVE ID: CVE-2025-61887 State: REJECTED Published: N/A Last Updated: 2025-10-04T02:55:09.917Z Description: No description available.
CVE ID: CVE-2025-61888 State: REJECTED Published: N/A Last Updated: 2025-10-04T02:55:09.351Z Description: No description available.
CVE ID: CVE-2025-61889 State: REJECTED Published: N/A Last Updated: 2025-10-04T02:55:08.819Z Description: No description available.
CVE ID: CVE-2025-61890 State: REJECTED Published: N/A Last Updated: 2025-10-04T02:55:08.352Z Description: No description available.
CVE ID: CVE-2025-61891 State: REJECTED Published: N/A Last Updated: 2025-10-04T02:55:07.883Z Description: No description available.
CVE ID: CVE-2025-61892 State: REJECTED Published: N/A Last Updated: 2025-10-04T02:55:07.419Z Description: No description available.
CVE ID: CVE-2025-61893 State: REJECTED Published: N/A Last Updated: 2025-10-04T02:55:06.911Z Description: No description available.
CVE ID: CVE-2025-61894 State: REJECTED Published: N/A Last Updated: 2025-10-04T02:55:06.455Z Description: No description available.
CVE ID: CVE-2025-61895 State: REJECTED Published: N/A Last Updated: 2025-10-04T02:55:05.954Z Description: No description available.
CVE ID: CVE-2025-61906 State: PUBLISHED Published: 2025-10-08T18:06:58.178Z Last Updated: 2025-10-08T18:24:05.687Z Vendors: opencast Products: opencast Problem Types: CWE-200 Description: Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to Opencast 17.8 and 18.2, in some situations, Opencast's editor may publish a video without notifying the user. This may lead to users accidentally publishing media not meant for publishing, and thus possibly exposing internal media. This risk of this actually impacting someone is very low, though. This can only be triggered by users with write access to an event. They also have to use the edito
is very low, though. This can only be triggered by users with write access to an event. They also have to use the editor, which is usually an action taken if they want to publish media and not something users would use on internal media they do not want to publish. Finally, they have to first click on "Save & Publish" before then selecting the "Save" option. Nevertheless, while very unlikely, this can happen. This issue is fixed in Opencast 17.8 and 18.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/opencast/opencast/security/advisories/GHSA-x6vw-p693-jjhv - https://github.com/opencast/opencast-editor/issues/1626 - https://github.com/opencast/opencast-
es/GHSA-x6vw-p693-jjhv - https://github.com/opencast/opencast-editor/issues/1626 - https://github.com/opencast/opencast-editor/commit/98ba1934f08f623f1537a9675cc452d803766a91
CVE ID: CVE-2025-61907 State: PUBLISHED Published: 2025-10-16T17:11:59.338Z Last Updated: 2025-10-16T19:23:30.055Z Vendors: Icinga Products: icinga2 Problem Types: CWE-200, CWE-204, CWE-749 Description: Icinga 2 is an open source monitoring system. In Icinga 2 versions 2.4 through 2.15.0, filter expressions provided to the various /v1/objects endpoints could access variables or objects that would otherwise be inaccessible for the user. This allows authenticated API users to learn information that should be hidden from them, including global variables not permitted by the variables permission and objects not permitted by the corresponding objects/query permissions. The vulnerability is fixed
riables permission and objects not permitted by the corresponding objects/query permissions. The vulnerability is fixed in versions 2.15.1, 2.14.7, and 2.13.13. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Icinga/icinga2/security/advisories/GHSA-gg32-w9rm-vp2v - https://github.com/Icinga/icinga2/commit/56255ac7a689b9e198742d2fca6f7459a54c85a3
CVE ID: CVE-2025-61908 State: PUBLISHED Published: 2025-10-16T17:16:58.165Z Last Updated: 2025-10-16T19:23:24.141Z Vendors: Icinga Products: icinga2 Problem Types: CWE-476 Description: Icinga 2 is an open source monitoring system. From 2.10.0 to before 2.15.1, 2.14.7, and 2.13.13, when creating an invalid reference, such as a reference to null, dereferencing results in a segmentation fault. This can be used by any API user with access to an API endpoint that allows specifying a filter expression to crash the Icinga 2 daemon. A fix is included in the following Icinga 2 versions: 2.15.1, 2.14.7, and 2.13.13. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Ic
ons: 2.15.1, 2.14.7, and 2.13.13. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Icinga/icinga2/security/advisories/GHSA-v9jg-xqhj-f43g - https://github.com/Icinga/icinga2/pull/6521 - https://icinga.com/blog/releasing-icinga-2-v2-15-1-2-14-7-and-2-13-13-and-icinga-db-web-v1-2-3-and-1-1-4
CVE ID: CVE-2025-61909 State: PUBLISHED Published: 2025-10-16T17:20:14.705Z Last Updated: 2025-10-16T19:23:18.312Z Vendors: Icinga Products: icinga2 Problem Types: CWE-250 Description: Icinga 2 is an open source monitoring system. From 2.10.0 to before 2.15.1, 2.14.7, and 2.13.13, the safe-reload script (also used during systemctl reload icinga2) and logrotate configuration shipped with Icinga 2 read the PID of the main Icinga 2 process from a PID file writable by the daemon user, but send the signal as the root user. This can allow the Icinga user to send signals to processes it would otherwise not permitted to. A fix is included in the following Icinga 2 versions: 2.15.1, 2.14.7, and 2.13.
ses it would otherwise not permitted to. A fix is included in the following Icinga 2 versions: 2.15.1, 2.14.7, and 2.13.13. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Icinga/icinga2/security/advisories/GHSA-pg6g-g99v-mw46 - https://github.com/Icinga/icinga2/issues/10527 - https://github.com/Icinga/icinga2/commit/51ec73cbd922a76fc0f60e1d8d33acd7caa5d587 - https://icinga.com/blog/releasing-icinga-2-v2-15-1-2-14-7-and-2-13-13-and-icinga-db-web-v1-2-3-and-1-1-4
CVE ID: CVE-2025-61910 State: PUBLISHED Published: 2025-10-07T19:31:33.358Z Last Updated: 2025-10-07T19:57:34.531Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: nasa-jpl Products: ION-DTN Problem Types: CWE-789 Description: The NASA’s Interplanetary Overlay Network (ION) is an implementation of Delay/Disruption Tolerant Networking (DTN). A BPv7 bundle with a malformed extension block causes uncontrolled memory allocation inside ION-DTN 4.1.3s, leading to receiver thread termination and a Denial-of-Service (DoS). The triggering bundle contains an extension block starting at `0x85070201005bbb0e20b4ea001a000927c0...`. The first byte in the extension block (0x85
ns an extension block starting at `0x85070201005bbb0e20b4ea001a000927c0...`. The first byte in the extension block (0x85) indicates a CBOR array of five elements of which the first four are numbers (0x07, 0x02, 0x01, 0x00) but the fifth element is a byte string of length 27 (`0x5bbb0e20b4ea001a000927c0...`). The vulnerability seems to be due to processing the fifth element of the array (i.e., the byte string) as replacing it with a number makes the vulnerability no longer be triggered. While parsing this extension block, ION obtains a very large block length, which in the code in `bei.c`:764) seems to be passed from `blockLength` which is an unsigned int, to a 32 bit signed integer `blkSize`
ode in `bei.c`:764) seems to be passed from `blockLength` which is an unsigned int, to a 32 bit signed integer `blkSize`. The unsigned to signed conversion causes `blkSize` to hold the value of -369092043, which is then converted into a 64-bit unsigned value inside `MTAKE(blkSize)`, resulting in an attempt to allocate an unrealistic amount of memory, causing the error. As of time of publication, no known patched versions of BPv7 exist. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/nasa-jpl/ION-DTN/security/advisories/GHSA-xm96-38vj-h28h - https://github.com/nasa-jpl/ION-DTN/blob/ion-open-source-4.1.3s/bpv7/library/bei.c#L758-L769
CVE ID: CVE-2025-61911 State: PUBLISHED Published: 2025-10-10T22:02:15.529Z Last Updated: 2025-10-14T14:57:34.174Z Vendors: python-ldap Products: python-ldap Problem Types: CWE-75, CWE-843 Description: python-ldap is a lightweight directory access protocol (LDAP) client API for Python. In versions prior to 3.4.5, the sanitization method `ldap.filter.escape_filter_chars` can be tricked to skip escaping of special characters when a crafted `list` or `dict` is supplied as the `assertion_value` parameter, and the non-default `escape_mode=1` is configured. The method `ldap.filter.escape_filter_chars` supports 3 different escaping modes. `escape_mode=0` (default) and `escape_mode=2` happen to rais
r.escape_filter_chars` supports 3 different escaping modes. `escape_mode=0` (default) and `escape_mode=2` happen to raise exceptions when a `list` or `dict` object is supplied as the `assertion_value` parameter. However, `escape_mode=1` computes without performing adequate logic to ensure a fully escaped return value. If an application relies on the vulnerable method in the `python-ldap` library to escape untrusted user input, an attacker might be able to abuse the vulnerability to launch ldap injection attacks which could potentially disclose or manipulate ldap data meant to be inaccessible to them. Version 3.4.5 fixes the issue by adding a type check at the start of the `ldap.filter.escape