# Vulnerabilities published in 2025


- [OSV-2025-901](https://insights.sbomify.com/OSV-2025-901/): Heap-use-after-free in apache::thrift::protocol::TCompactProtocolT<apache::thrift::transport::TMemoryBu (not scored)
- [OSV-2025-900](https://insights.sbomify.com/OSV-2025-900/): Heap-buffer-overflow in DecodeFrame (not scored)
- [OSV-2025-90](https://insights.sbomify.com/OSV-2025-90/): Null-dereference READ in ubsan_GetStackTrace (not scored)
- [OSV-2025-890](https://insights.sbomify.com/OSV-2025-890/): Heap-buffer-overflow in icalmemory_tmp_copy (not scored)
- [OSV-2025-884](https://insights.sbomify.com/OSV-2025-884/): Heap-use-after-free in JS_DefineProperty (not scored)
- [OSV-2025-88](https://insights.sbomify.com/OSV-2025-88/): Segv on unknown address in ___interceptor_free (not scored)
- [OSV-2025-879](https://insights.sbomify.com/OSV-2025-879/): Use-of-uninitialized-value in JS_DefineProperty (not scored)
- [OSV-2025-876](https://insights.sbomify.com/OSV-2025-876/): Stack-buffer-overflow in snmp_input (not scored)
- [OSV-2025-871](https://insights.sbomify.com/OSV-2025-871/): UNKNOWN READ in ojph::local::param_cod::~param_cod (not scored)
- [OSV-2025-865](https://insights.sbomify.com/OSV-2025-865/): Heap-buffer-overflow in generic_unpack (not scored)
- [OSV-2025-858](https://insights.sbomify.com/OSV-2025-858/): Use-of-uninitialized-value in pcpp::byteArrayToHexString (not scored)
- [OSV-2025-857](https://insights.sbomify.com/OSV-2025-857/): Global-buffer-overflow in void jxl::N_AVX2::WriteToOutputStage::StoreUnsignedRow<unsigned char> (not scored)
- [OSV-2025-855](https://insights.sbomify.com/OSV-2025-855/): Use-of-uninitialized-value in AlphaReplace_SSE2 (not scored)
- [OSV-2025-852](https://insights.sbomify.com/OSV-2025-852/): Heap-buffer-overflow in std::__1::pair<int, arrow::util::RleBitPackedParser::ControlFlow> arrow::util::R (not scored)
- [OSV-2025-85](https://insights.sbomify.com/OSV-2025-85/): Segv on unknown address in ndpi_free_flow_data (not scored)
- [OSV-2025-846](https://insights.sbomify.com/OSV-2025-846/): Use-of-uninitialized-value in js_create_function (not scored)
- [OSV-2025-845](https://insights.sbomify.com/OSV-2025-845/): Global-buffer-overflow in icaltime_day_of_year (not scored)
- [OSV-2025-84](https://insights.sbomify.com/OSV-2025-84/): Segv on unknown address in Flow::processExtraDissectedInformation (not scored)
- [OSV-2025-835](https://insights.sbomify.com/OSV-2025-835/): Heap-use-after-free in JS_DefineProperty (not scored)
- [OSV-2025-834](https://insights.sbomify.com/OSV-2025-834/): Heap-buffer-overflow in std::__1::pair<int, arrow::util::RleBitPackedParser::ControlFlow> arrow::util::R (not scored)
- [OSV-2025-827](https://insights.sbomify.com/OSV-2025-827/): Global-buffer-overflow in void jxl::N_SSE4::WriteToOutputStage::StoreUnsignedRow<unsigned char> (not scored)
- [OSV-2025-825](https://insights.sbomify.com/OSV-2025-825/): UNKNOWN WRITE in RescalerImportRowExpand_SSE2 (not scored)
- [OSV-2025-824](https://insights.sbomify.com/OSV-2025-824/): Use-of-uninitialized-value in JS_DefineProperty (not scored)
- [OSV-2025-819](https://insights.sbomify.com/OSV-2025-819/): Use-of-uninitialized-value in HasAlpha32b_SSE2 (not scored)
- [OSV-2025-818](https://insights.sbomify.com/OSV-2025-818/): Heap-buffer-overflow in std::__1::pair<int, arrow::util::RleBitPackedParser::ControlFlow> arrow::util::R (not scored)
- [OSV-2025-81](https://insights.sbomify.com/OSV-2025-81/): Segv on unknown address in ndpi_serialize_string_string (not scored)
- [OSV-2025-809](https://insights.sbomify.com/OSV-2025-809/): Use-of-uninitialized-value in WebPCleanupTransparentArea (not scored)
- [OSV-2025-808](https://insights.sbomify.com/OSV-2025-808/): Use-of-uninitialized-value in WebPMultRow_C (not scored)
- [OSV-2025-803](https://insights.sbomify.com/OSV-2025-803/): Global-buffer-overflow in icaltime_day_of_year (not scored)
- [OSV-2025-80](https://insights.sbomify.com/OSV-2025-80/): Segv on unknown address in ndpi_snprintf (not scored)
- [OSV-2025-797](https://insights.sbomify.com/OSV-2025-797/): Heap-buffer-overflow in ProcessRows (not scored)
- [OSV-2025-796](https://insights.sbomify.com/OSV-2025-796/): Heap-buffer-overflow in AddGreenToBlueAndRed_AVX2 (not scored)
- [OSV-2025-793](https://insights.sbomify.com/OSV-2025-793/): Heap-use-after-free in parse_from_header (not scored)
- [OSV-2025-788](https://insights.sbomify.com/OSV-2025-788/): Heap-buffer-overflow in int arrow::bit_util::BitReader::GetBatch<int> (not scored)
- [OSV-2025-787](https://insights.sbomify.com/OSV-2025-787/): Heap-buffer-overflow in DwaCompressor_uncompress (not scored)
- [OSV-2025-783](https://insights.sbomify.com/OSV-2025-783/): Heap-buffer-overflow in inspect_process (not scored)
- [OSV-2025-767](https://insights.sbomify.com/OSV-2025-767/): UNKNOWN READ in dcd_int_handler (not scored)
- [OSV-2025-766](https://insights.sbomify.com/OSV-2025-766/): Heap-buffer-overflow in Open (not scored)
- [OSV-2025-765](https://insights.sbomify.com/OSV-2025-765/): Security exception in com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer (not scored)
- [OSV-2025-764](https://insights.sbomify.com/OSV-2025-764/): Global-buffer-overflow in Ogg_CreateES (not scored)
- [OSV-2025-762](https://insights.sbomify.com/OSV-2025-762/): Use-of-uninitialized-value in fuzzer_send (not scored)
- [OSV-2025-742](https://insights.sbomify.com/OSV-2025-742/): Null-dereference READ in ubsan_GetStackTrace (not scored)
- [OSV-2025-74](https://insights.sbomify.com/OSV-2025-74/): Stack-buffer-overflow in xmlValidateElementContent (not scored)
- [OSV-2025-729](https://insights.sbomify.com/OSV-2025-729/): UNKNOWN READ in sam_hrecs_free_tags (not scored)
- [OSV-2025-723](https://insights.sbomify.com/OSV-2025-723/): Heap-buffer-overflow in processClientServerHello (not scored)
- [OSV-2025-718](https://insights.sbomify.com/OSV-2025-718/): Heap-buffer-overflow in pcpp::ArpLayer::toString (not scored)
- [OSV-2025-7](https://insights.sbomify.com/OSV-2025-7/): Heap-buffer-overflow in oatpp::json::Utils::escapeUtf8Char (not scored)
- [OSV-2025-698](https://insights.sbomify.com/OSV-2025-698/): Use-of-uninitialized-value in AesEncrypt_C (not scored)
- [OSV-2025-684](https://insights.sbomify.com/OSV-2025-684/): Heap-buffer-overflow in TGAHandler::read (not scored)
- [OSV-2025-68](https://insights.sbomify.com/OSV-2025-68/): UNKNOWN READ in std::__1::__function::__func<cv::PngDecoder::compose_frame (not scored)
- [OSV-2025-677](https://insights.sbomify.com/OSV-2025-677/): Heap-buffer-overflow in TGAHandler::read (not scored)
- [OSV-2025-657](https://insights.sbomify.com/OSV-2025-657/): Heap-use-after-free in ftp_pp_statemachine (not scored)
- [OSV-2025-638](https://insights.sbomify.com/OSV-2025-638/): Security exception in com.fasterxml.jackson.databind.deser.std.UntypedObjectDeserializer$Vanilla.deser (not scored)
- [OSV-2025-634](https://insights.sbomify.com/OSV-2025-634/): Null-dereference READ in enc_fuzzer@Enc.EncTest (not scored)
- [OSV-2025-633](https://insights.sbomify.com/OSV-2025-633/): UNKNOWN WRITE in _lou_handlePassVariableAction (not scored)
- [OSV-2025-631](https://insights.sbomify.com/OSV-2025-631/): Null-dereference READ in advanced_api_fuzzer@AdvancedApi.AdvancedApiTest (not scored)
- [OSV-2025-63](https://insights.sbomify.com/OSV-2025-63/): Stack-buffer-underflow in gs_type1_interpret (not scored)
- [OSV-2025-628](https://insights.sbomify.com/OSV-2025-628/): Null-dereference READ in ubsan_GetStackTrace (not scored)
- [OSV-2025-627](https://insights.sbomify.com/OSV-2025-627/): Null-dereference READ in ProcessRows (not scored)
- [OSV-2025-622](https://insights.sbomify.com/OSV-2025-622/): Heap-buffer-overflow in cc_storage_append (not scored)
- [OSV-2025-620](https://insights.sbomify.com/OSV-2025-620/): Heap-buffer-overflow in FragPrepareChunk (not scored)
- [OSV-2025-62](https://insights.sbomify.com/OSV-2025-62/): UNKNOWN READ in RDKit::Dict::reset (not scored)
- [OSV-2025-619](https://insights.sbomify.com/OSV-2025-619/): Heap-buffer-overflow in webvtt_domnode_SelectNodesInTree (not scored)
- [OSV-2025-618](https://insights.sbomify.com/OSV-2025-618/): Heap-buffer-overflow in iTUNTripletCallback (not scored)
- [OSV-2025-617](https://insights.sbomify.com/OSV-2025-617/): UNKNOWN WRITE in MP4_BoxFree (not scored)
- [OSV-2025-616](https://insights.sbomify.com/OSV-2025-616/): Heap-buffer-overflow in Open (not scored)
- [OSV-2025-615](https://insights.sbomify.com/OSV-2025-615/): Index-out-of-bounds in hevc_get_picture_size (not scored)
- [OSV-2025-614](https://insights.sbomify.com/OSV-2025-614/): Heap-buffer-overflow in hevc_hvcC_to_AnnexB_NAL (not scored)
- [OSV-2025-613](https://insights.sbomify.com/OSV-2025-613/): Heap-buffer-overflow in check_sync_pes (not scored)
- [OSV-2025-61](https://insights.sbomify.com/OSV-2025-61/): Heap-buffer-overflow in oatpp::json::Utils::escapeString (not scored)
- [OSV-2025-608](https://insights.sbomify.com/OSV-2025-608/): Heap-buffer-overflow in _dwarf_memcpy_noswap_bytes (not scored)
- [OSV-2025-600](https://insights.sbomify.com/OSV-2025-600/): Heap-buffer-overflow in generic_unpack (not scored)
- [OSV-2025-6](https://insights.sbomify.com/OSV-2025-6/): Heap-buffer-overflow in next_marker (not scored)
- [OSV-2025-597](https://insights.sbomify.com/OSV-2025-597/): Heap-buffer-overflow in generic_unpack (not scored)
- [OSV-2025-593](https://insights.sbomify.com/OSV-2025-593/): Heap-buffer-overflow in mmcall (not scored)
- [OSV-2025-591](https://insights.sbomify.com/OSV-2025-591/): UNKNOWN READ in mov_read_header (not scored)
- [OSV-2025-589](https://insights.sbomify.com/OSV-2025-589/): Heap-buffer-overflow in isvcd_decode_recon_tfr_nmb_base_lyr (not scored)
- [OSV-2025-584](https://insights.sbomify.com/OSV-2025-584/): Heap-buffer-overflow in isvcd_mark_err_slice_skip (not scored)
- [OSV-2025-580](https://insights.sbomify.com/OSV-2025-580/): UNKNOWN READ in signed char Assimp::StreamReader<false, false>::Get<signed char> (not scored)
- [OSV-2025-570](https://insights.sbomify.com/OSV-2025-570/): Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr (not scored)
- [OSV-2025-565](https://insights.sbomify.com/OSV-2025-565/): Heap-buffer-overflow in pcpp::IPv6Address::IPv6Address (not scored)
- [OSV-2025-564](https://insights.sbomify.com/OSV-2025-564/): Heap-buffer-overflow in ndpi_match_host_subprotocol (not scored)
- [OSV-2025-550](https://insights.sbomify.com/OSV-2025-550/): Use-of-uninitialized-value in CFF::cff2_cs_opset_t<cff2_cs_opset_subr_subset_t, CFF::subr_subset_param_t, CFF: (not scored)
- [OSV-2025-547](https://insights.sbomify.com/OSV-2025-547/): Security exception in com.alibaba.fastjson2.JSONReader.readArray (not scored)
- [OSV-2025-544](https://insights.sbomify.com/OSV-2025-544/): Heap-buffer-overflow in N_BELE_RTP::LEPolicy::get32 (not scored)
- [OSV-2025-542](https://insights.sbomify.com/OSV-2025-542/): Use-of-uninitialized-value in httpEncode64_3 (not scored)
- [OSV-2025-541](https://insights.sbomify.com/OSV-2025-541/): Heap-buffer-overflow in js_create_function (not scored)
- [OSV-2025-54](https://insights.sbomify.com/OSV-2025-54/): UNKNOWN READ in Assimp::SceneCombiner::CopyScene (not scored)
- [OSV-2025-538](https://insights.sbomify.com/OSV-2025-538/): Heap-double-free in policydb_destroy (not scored)
- [OSV-2025-534](https://insights.sbomify.com/OSV-2025-534/): Heap-use-after-free in ih264_inter_pred_luma_horz_ssse3 (not scored)
- [OSV-2025-530](https://insights.sbomify.com/OSV-2025-530/): Invalid-free in cli_pdf (not scored)
- [OSV-2025-528](https://insights.sbomify.com/OSV-2025-528/): Heap-buffer-overflow in xmlnode_parser_structural_error_libxml (not scored)
- [OSV-2025-525](https://insights.sbomify.com/OSV-2025-525/): UNKNOWN READ in std::__1::__function::__func<cv::PngDecoder::compose_frame (not scored)
- [OSV-2025-524](https://insights.sbomify.com/OSV-2025-524/): Heap-buffer-overflow in JS_CallInternal (not scored)
- [OSV-2025-52](https://insights.sbomify.com/OSV-2025-52/): Use-of-uninitialized-value in icalmemory_strdup (not scored)
- [OSV-2025-515](https://insights.sbomify.com/OSV-2025-515/): Use-of-uninitialized-value in JS_DefineProperty (not scored)
- [OSV-2025-512](https://insights.sbomify.com/OSV-2025-512/): Invalid-free in pdf_decodestream (not scored)
- [OSV-2025-51](https://insights.sbomify.com/OSV-2025-51/): Heap-buffer-overflow in std::__1::__function::__func<cv::PngDecoder::compose_frame (not scored)
- [OSV-2025-500](https://insights.sbomify.com/OSV-2025-500/): UNKNOWN READ in getUShort (not scored)
- [OSV-2025-491](https://insights.sbomify.com/OSV-2025-491/): Heap-buffer-overflow in libssl.soNUMBER (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/3/