# Vulnerabilities published in 2024 - [OSV-2024-1124](https://insights.sbomify.com/OSV-2024-1124/): Heap-buffer-overflow in ih264d_read_coeff4x4_cabac (not scored) - [OSV-2024-112](https://insights.sbomify.com/OSV-2024-112/): Stack-overflow in boost::read_graphviz_detail::parser::parse_subgraph (not scored) - [OSV-2024-1102](https://insights.sbomify.com/OSV-2024-1102/): Security exception in java.xml/com.sun.org.apache.xalan.internal.xsltc.trax.DOM2TO.parse (not scored) - [OSV-2024-1090](https://insights.sbomify.com/OSV-2024-1090/): UNKNOWN READ in ggml_free (not scored) - [OSV-2024-1076](https://insights.sbomify.com/OSV-2024-1076/): Heap-buffer-overflow in readBytes48 (not scored) - [OSV-2024-1071](https://insights.sbomify.com/OSV-2024-1071/): Use-of-uninitialized-value in Poco::Dynamic::Var::~Var (not scored) - [OSV-2024-1066](https://insights.sbomify.com/OSV-2024-1066/): Heap-buffer-overflow in StrLen (not scored) - [OSV-2024-1062](https://insights.sbomify.com/OSV-2024-1062/): UNKNOWN WRITE in std::__1::recursive_mutex::lock (not scored) - [OSV-2024-1059](https://insights.sbomify.com/OSV-2024-1059/): UNKNOWN READ in chunk_free_object (not scored) - [OSV-2024-1056](https://insights.sbomify.com/OSV-2024-1056/): UNKNOWN WRITE in bfd_elf_get_str_section (not scored) - [OSV-2024-1054](https://insights.sbomify.com/OSV-2024-1054/): Bad-cast to Assimp::LogStream from invalid vptr (not scored) - [OSV-2024-1053](https://insights.sbomify.com/OSV-2024-1053/): Heap-buffer-overflow in gguf_get_tensor_offset (not scored) - [OSV-2024-1045](https://insights.sbomify.com/OSV-2024-1045/): UNKNOWN READ in glslang::TInfoSinkBase::location (not scored) - [OSV-2024-1044](https://insights.sbomify.com/OSV-2024-1044/): UNKNOWN READ in H5FL_reg_malloc (not scored) - [OSV-2024-1043](https://insights.sbomify.com/OSV-2024-1043/): Heap-buffer-overflow in simdutf::haswell::implementation::convert_utf8_to_latin1 (not scored) - [OSV-2024-1042](https://insights.sbomify.com/OSV-2024-1042/): UNKNOWN READ in chunk_free_object (not scored) - [OSV-2024-1041](https://insights.sbomify.com/OSV-2024-1041/): UNKNOWN READ in chunk_free_object (not scored) - [OSV-2024-104](https://insights.sbomify.com/OSV-2024-104/): Heap-buffer-overflow in mrb_memsearch (not scored) - [OSV-2024-1036](https://insights.sbomify.com/OSV-2024-1036/): UNKNOWN READ in chunk_free_object (not scored) - [OSV-2024-1034](https://insights.sbomify.com/OSV-2024-1034/): Heap-buffer-overflow in simdutf::haswell::implementation::convert_utf8_to_utf16be (not scored) - [OSV-2024-1031](https://insights.sbomify.com/OSV-2024-1031/): Use-of-uninitialized-value in Http3FrameFactory::create (not scored) - [OSV-2024-103](https://insights.sbomify.com/OSV-2024-103/): Heap-use-after-free in xmlRemoveID (not scored) - [OSV-2024-1029](https://insights.sbomify.com/OSV-2024-1029/): Stack-buffer-overflow in gf_hevc_parse_nalu_bs (not scored) - [OSV-2024-1023](https://insights.sbomify.com/OSV-2024-1023/): Use-of-uninitialized-value in pcpp::SomeIpLayer::parseSomeIpLayer (not scored) - [OSV-2024-102](https://insights.sbomify.com/OSV-2024-102/): Heap-buffer-overflow in mrb_memsearch (not scored) - [OSV-2024-1010](https://insights.sbomify.com/OSV-2024-1010/): UNKNOWN READ in H5SL_first (not scored) - [OSV-2024-1009](https://insights.sbomify.com/OSV-2024-1009/): Heap-buffer-overflow in pcpp::Layer::shortenLayer (not scored) - [OSV-2024-10](https://insights.sbomify.com/OSV-2024-10/): Heap-buffer-overflow in __string (not scored) - [OSV-2023-1398](https://insights.sbomify.com/OSV-2023-1398/): Heap-buffer-overflow in load_1 (not scored) - [OSV-2023-1382](https://insights.sbomify.com/OSV-2023-1382/): Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr (not scored) - [OSV-2023-1381](https://insights.sbomify.com/OSV-2023-1381/): Heap-buffer-overflow in NetworkInterface::processPacket (not scored) - [OSV-2022-1288](https://insights.sbomify.com/OSV-2022-1288/): Stack-buffer-overflow in bool SmilesParseOps::parser::parse_atom_props (not scored) - [MAL-2025-999](https://insights.sbomify.com/MAL-2025-999/): Malicious code in utilitypyfunc (PyPI) (malicious package) - [MAL-2025-998](https://insights.sbomify.com/MAL-2025-998/): Malicious code in trove4j (PyPI) (malicious package) - [MAL-2025-994](https://insights.sbomify.com/MAL-2025-994/): Malicious code in threadfluent (PyPI) (malicious package) - [MAL-2025-991](https://insights.sbomify.com/MAL-2025-991/): Malicious code in sysfunc (PyPI) (malicious package) - [MAL-2025-990](https://insights.sbomify.com/MAL-2025-990/): Malicious code in syscontrol (PyPI) (malicious package) - [MAL-2025-989](https://insights.sbomify.com/MAL-2025-989/): Malicious code in swapoc (PyPI) (malicious package) - [MAL-2025-988](https://insights.sbomify.com/MAL-2025-988/): Malicious code in subsys-client (PyPI) (malicious package) - [MAL-2025-987](https://insights.sbomify.com/MAL-2025-987/): Malicious code in shoots-flutter (PyPI) (malicious package) - [MAL-2025-985](https://insights.sbomify.com/MAL-2025-985/): Malicious code in shoots-api-test (PyPI) (malicious package) - [MAL-2025-982](https://insights.sbomify.com/MAL-2025-982/): Malicious code in selenium-plugin (PyPI) (malicious package) - [MAL-2025-976](https://insights.sbomify.com/MAL-2025-976/): Malicious code in rreqest (PyPI) (malicious package) - [MAL-2025-975](https://insights.sbomify.com/MAL-2025-975/): Malicious code in reqzest (PyPI) (malicious package) - [MAL-2025-974](https://insights.sbomify.com/MAL-2025-974/): Malicious code in requetses (PyPI) (malicious package) - [MAL-2025-973](https://insights.sbomify.com/MAL-2025-973/): Malicious code in requeszs (PyPI) (malicious package) - [MAL-2025-972](https://insights.sbomify.com/MAL-2025-972/): Malicious code in requestss3 (PyPI) (malicious package) - [MAL-2025-971](https://insights.sbomify.com/MAL-2025-971/): Malicious code in requestss2 (PyPI) (malicious package) - [MAL-2025-970](https://insights.sbomify.com/MAL-2025-970/): Malicious code in requests1 (PyPI) (malicious package) - [MAL-2025-969](https://insights.sbomify.com/MAL-2025-969/): Malicious code in reqiest (PyPI) (malicious package) - [MAL-2025-968](https://insights.sbomify.com/MAL-2025-968/): Malicious code in reqeuts (PyPI) (malicious package) - [MAL-2025-966](https://insights.sbomify.com/MAL-2025-966/): Malicious code in reqest (PyPI) (malicious package) - [MAL-2025-965](https://insights.sbomify.com/MAL-2025-965/): Malicious code in reqesst (PyPI) (malicious package) - [MAL-2025-964](https://insights.sbomify.com/MAL-2025-964/): Malicious code in qassabi (PyPI) (malicious package) - [MAL-2025-963](https://insights.sbomify.com/MAL-2025-963/): Malicious code in python-bitget-wrapper (PyPI) (malicious package) - [MAL-2025-962](https://insights.sbomify.com/MAL-2025-962/): Malicious code in python-bitget-request (PyPI) (malicious package) - [MAL-2025-961](https://insights.sbomify.com/MAL-2025-961/): Malicious code in python-bitget-connect (PyPI) (malicious package) - [MAL-2025-960](https://insights.sbomify.com/MAL-2025-960/): Malicious code in pytest-tt-ddriven (PyPI) (malicious package) - [MAL-2025-959](https://insights.sbomify.com/MAL-2025-959/): Malicious code in pytc123 (PyPI) (malicious package) - [MAL-2025-955](https://insights.sbomify.com/MAL-2025-955/): Malicious code in private-test-4 (PyPI) (malicious package) - [MAL-2025-954](https://insights.sbomify.com/MAL-2025-954/): Malicious code in private-test-2 (PyPI) (malicious package) - [MAL-2025-953](https://insights.sbomify.com/MAL-2025-953/): Malicious code in private-test-1 (PyPI) (malicious package) - [MAL-2025-951](https://insights.sbomify.com/MAL-2025-951/): Malicious code in presudo-generate (PyPI) (malicious package) - [MAL-2025-949](https://insights.sbomify.com/MAL-2025-949/): Malicious code in oscontrol (PyPI) (malicious package) - [MAL-2025-948](https://insights.sbomify.com/MAL-2025-948/): Malicious code in opshub (PyPI) (malicious package) - [MAL-2025-947](https://insights.sbomify.com/MAL-2025-947/): Malicious code in noway-back (PyPI) (malicious package) - [MAL-2025-945](https://insights.sbomify.com/MAL-2025-945/): Malicious code in mkdsli (PyPI) (malicious package) - [MAL-2025-944](https://insights.sbomify.com/MAL-2025-944/): Malicious code in masirkhan (PyPI) (malicious package) - [MAL-2025-942](https://insights.sbomify.com/MAL-2025-942/): Malicious code in langer-updater (PyPI) (malicious package) - [MAL-2025-940](https://insights.sbomify.com/MAL-2025-940/): Malicious code in lan-clean (PyPI) (malicious package) - [MAL-2025-939](https://insights.sbomify.com/MAL-2025-939/): Malicious code in kotlin-stdlib-jdk8 (PyPI) (malicious package) - [MAL-2025-937](https://insights.sbomify.com/MAL-2025-937/): Malicious code in jamasp (PyPI) (malicious package) - [MAL-2025-936](https://insights.sbomify.com/MAL-2025-936/): Malicious code in intgraphx (PyPI) (malicious package) - [MAL-2025-935](https://insights.sbomify.com/MAL-2025-935/): Malicious code in hugginglega (PyPI) (malicious package) - [MAL-2025-934](https://insights.sbomify.com/MAL-2025-934/): Malicious code in huggingleg2 (PyPI) (malicious package) - [MAL-2025-933](https://insights.sbomify.com/MAL-2025-933/): Malicious code in httpfluent (PyPI) (malicious package) - [MAL-2025-931](https://insights.sbomify.com/MAL-2025-931/): Malicious code in graphicsx (PyPI) (malicious package) - [MAL-2025-930](https://insights.sbomify.com/MAL-2025-930/): Malicious code in goftvagoo (PyPI) (malicious package) - [MAL-2025-929](https://insights.sbomify.com/MAL-2025-929/): Malicious code in gmacpyutil (PyPI) (malicious package) - [MAL-2025-928](https://insights.sbomify.com/MAL-2025-928/): Malicious code in gandon-pidar1 (PyPI) (malicious package) - [MAL-2025-927](https://insights.sbomify.com/MAL-2025-927/): Malicious code in foop (PyPI) (malicious package) - [MAL-2025-926](https://insights.sbomify.com/MAL-2025-926/): Malicious code in flasl (PyPI) (malicious package) - [MAL-2025-925](https://insights.sbomify.com/MAL-2025-925/): Malicious code in fkask (PyPI) (malicious package) - [MAL-2025-923](https://insights.sbomify.com/MAL-2025-923/): Malicious code in fflask (PyPI) (malicious package) - [MAL-2025-922](https://insights.sbomify.com/MAL-2025-922/): Malicious code in falask (PyPI) (malicious package) - [MAL-2025-920](https://insights.sbomify.com/MAL-2025-920/): Malicious code in discordbotstatus (PyPI) (malicious package) - [MAL-2025-919](https://insights.sbomify.com/MAL-2025-919/): Malicious code in discordbotpresence (PyPI) (malicious package) - [MAL-2025-918](https://insights.sbomify.com/MAL-2025-918/): Malicious code in dexat2 (PyPI) (malicious package) - [MAL-2025-915](https://insights.sbomify.com/MAL-2025-915/): Malicious code in dependency908 (PyPI) (malicious package) - [MAL-2025-914](https://insights.sbomify.com/MAL-2025-914/): Malicious code in dependency133434fr43437 (PyPI) (malicious package) - [MAL-2025-913](https://insights.sbomify.com/MAL-2025-913/): Malicious code in datagov-harvester (PyPI) (malicious package) - [MAL-2025-912](https://insights.sbomify.com/MAL-2025-912/): Malicious code in crowdstrike-foundry (PyPI) (malicious package) - [MAL-2025-911](https://insights.sbomify.com/MAL-2025-911/): Malicious code in confirmedbywaseem (PyPI) (malicious package) - [MAL-2025-910](https://insights.sbomify.com/MAL-2025-910/): Malicious code in code-tracker (PyPI) (malicious package) - [MAL-2025-909](https://insights.sbomify.com/MAL-2025-909/): Malicious code in code-suggester (PyPI) (malicious package) - [MAL-2025-908](https://insights.sbomify.com/MAL-2025-908/): Malicious code in code-beautifyer (PyPI) (malicious package) - [MAL-2025-907](https://insights.sbomify.com/MAL-2025-907/): Malicious code in clean-packager (PyPI) (malicious package) - [MAL-2025-905](https://insights.sbomify.com/MAL-2025-905/): Malicious code in byted-df (PyPI) (malicious package) - [MAL-2025-902](https://insights.sbomify.com/MAL-2025-902/): Malicious code in bancor-simulation (PyPI) (malicious package) - [MAL-2025-901](https://insights.sbomify.com/MAL-2025-901/): Malicious code in auth0-open-source-template (PyPI) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2024/page/5/