# Vulnerabilities published in 2025


- [OSV-2025-486](https://insights.sbomify.com/OSV-2025-486/): Bad-cast to cv::PngDecoder from invalid vptr (not scored)
- [OSV-2025-485](https://insights.sbomify.com/OSV-2025-485/): Use-of-uninitialized-value in pcpp::IDnsResource::decodeName (not scored)
- [OSV-2025-484](https://insights.sbomify.com/OSV-2025-484/): Heap-buffer-overflow in load_protocols_file_fd (not scored)
- [OSV-2025-481](https://insights.sbomify.com/OSV-2025-481/): Stack-buffer-overflow in void glz::from<10000u, int>::op<glz::opts_csv{10000u, (not scored)
- [OSV-2025-480](https://insights.sbomify.com/OSV-2025-480/): Stack-buffer-overflow in void glz::from<10000u, std::__1::__bit_reference<std::__1::vector<bool, std::__1 (not scored)
- [OSV-2025-469](https://insights.sbomify.com/OSV-2025-469/): Use-of-uninitialized-value in ndpi_strdup (not scored)
- [OSV-2025-465](https://insights.sbomify.com/OSV-2025-465/): Heap-buffer-overflow in xmlParsePubidLiteral (not scored)
- [OSV-2025-461](https://insights.sbomify.com/OSV-2025-461/): Heap-buffer-overflow in xmlParsePubidLiteral (not scored)
- [OSV-2025-457](https://insights.sbomify.com/OSV-2025-457/): Heap-buffer-overflow in xmlParsePubidLiteral (not scored)
- [OSV-2025-456](https://insights.sbomify.com/OSV-2025-456/): Use-of-uninitialized-value in ppd_hash_option (not scored)
- [OSV-2025-454](https://insights.sbomify.com/OSV-2025-454/): Use-of-uninitialized-value in _cups_strcasecmp (not scored)
- [OSV-2025-45](https://insights.sbomify.com/OSV-2025-45/): Security exception in POIHDGFFuzzer (not scored)
- [OSV-2025-449](https://insights.sbomify.com/OSV-2025-449/): Heap-buffer-overflow in check_content_type_and_change_protocol (not scored)
- [OSV-2025-447](https://insights.sbomify.com/OSV-2025-447/): Use-of-uninitialized-value in spvtools::EmitNumericLiteral (not scored)
- [OSV-2025-444](https://insights.sbomify.com/OSV-2025-444/): Security exception in com.drew.imaging.quicktime.QuickTimeReader.processAtoms (not scored)
- [OSV-2025-442](https://insights.sbomify.com/OSV-2025-442/): Security exception in org.jsoup.parser.HtmlTreeBuilder.process (not scored)
- [OSV-2025-437](https://insights.sbomify.com/OSV-2025-437/): Heap-buffer-overflow in mmcall (not scored)
- [OSV-2025-436](https://insights.sbomify.com/OSV-2025-436/): Security exception in graphql.parser.GraphqlAntlrToLanguage.createNonNullType (not scored)
- [OSV-2025-433](https://insights.sbomify.com/OSV-2025-433/): Null-dereference READ in _libssh2_packet_add (not scored)
- [OSV-2025-424](https://insights.sbomify.com/OSV-2025-424/): UNKNOWN READ in RDKit::RDValue::destroy (not scored)
- [OSV-2025-42](https://insights.sbomify.com/OSV-2025-42/): Heap-use-after-free in r_list_free (not scored)
- [OSV-2025-412](https://insights.sbomify.com/OSV-2025-412/): UNKNOWN WRITE in luaL_newstate (not scored)
- [OSV-2025-408](https://insights.sbomify.com/OSV-2025-408/): Heap-buffer-overflow in sav_parse_long_variable_names_record (not scored)
- [OSV-2025-406](https://insights.sbomify.com/OSV-2025-406/): Security exception in com.puppycrawl.tools.checkstyle.JavaAstVisitor.getInnerBopAst (not scored)
- [OSV-2025-404](https://insights.sbomify.com/OSV-2025-404/): Use-of-uninitialized-value in JS_FreeRuntime (not scored)
- [OSV-2025-401](https://insights.sbomify.com/OSV-2025-401/): Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr (not scored)
- [OSV-2025-4](https://insights.sbomify.com/OSV-2025-4/): Heap-buffer-overflow in ___interceptor_pthread_create (not scored)
- [OSV-2025-396](https://insights.sbomify.com/OSV-2025-396/): Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr (not scored)
- [OSV-2025-384](https://insights.sbomify.com/OSV-2025-384/): Segv on unknown address in rtpp_refcnt_decref (not scored)
- [OSV-2025-374](https://insights.sbomify.com/OSV-2025-374/): Use-of-uninitialized-value in pcpp::SomeIpSdEntry::SomeIpSdEntry (not scored)
- [OSV-2025-373](https://insights.sbomify.com/OSV-2025-373/): Heap-use-after-free in aiMesh::~aiMesh (not scored)
- [OSV-2025-371](https://insights.sbomify.com/OSV-2025-371/): Index-out-of-bounds in tcp_analyze_sequence_number (not scored)
- [OSV-2025-369](https://insights.sbomify.com/OSV-2025-369/): Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr (not scored)
- [OSV-2025-368](https://insights.sbomify.com/OSV-2025-368/): Heap-buffer-overflow in __parse_options (not scored)
- [OSV-2025-363](https://insights.sbomify.com/OSV-2025-363/): Heap-buffer-overflow in jv_string_vfmt (not scored)
- [OSV-2025-357](https://insights.sbomify.com/OSV-2025-357/): Segv on unknown address in pcpp::Packet::computeCalculateFields (not scored)
- [OSV-2025-354](https://insights.sbomify.com/OSV-2025-354/): Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.statement (not scored)
- [OSV-2025-352](https://insights.sbomify.com/OSV-2025-352/): Use-of-uninitialized-value in JS_FreeRuntime (not scored)
- [OSV-2025-346](https://insights.sbomify.com/OSV-2025-346/): Heap-buffer-overflow in JS_CallInternal (not scored)
- [OSV-2025-33](https://insights.sbomify.com/OSV-2025-33/): UNKNOWN READ in pcpp::RawPacket::insertData (not scored)
- [OSV-2025-326](https://insights.sbomify.com/OSV-2025-326/): Heap-use-after-free in __JS_FreeValueRT (not scored)
- [OSV-2025-324](https://insights.sbomify.com/OSV-2025-324/): Index-out-of-bounds in dwg_decode_eed (not scored)
- [OSV-2025-323](https://insights.sbomify.com/OSV-2025-323/): Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr (not scored)
- [OSV-2025-321](https://insights.sbomify.com/OSV-2025-321/): Use-of-uninitialized-value in JS_DefineProperty (not scored)
- [OSV-2025-32](https://insights.sbomify.com/OSV-2025-32/): UNKNOWN READ in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch (not scored)
- [OSV-2025-312](https://insights.sbomify.com/OSV-2025-312/): Heap-buffer-overflow in ZSTD_decompressMultiFrame (not scored)
- [OSV-2025-31](https://insights.sbomify.com/OSV-2025-31/): Heap-buffer-overflow in Assimp::FBXExporter::WriteObjects (not scored)
- [OSV-2025-300](https://insights.sbomify.com/OSV-2025-300/): Negative-size-param in recurse_update_offsets (not scored)
- [OSV-2025-3](https://insights.sbomify.com/OSV-2025-3/): Heap-buffer-overflow in avifImageAddUUIDProperty (not scored)
- [OSV-2025-298](https://insights.sbomify.com/OSV-2025-298/): Heap-buffer-overflow in i18n::phonenumbers::UnicodeText::const_iterator::operator-- (not scored)
- [OSV-2025-291](https://insights.sbomify.com/OSV-2025-291/): Use-of-uninitialized-value in Poco::Net::NTLMCredentials::parseChallengeMessage (not scored)
- [OSV-2025-290](https://insights.sbomify.com/OSV-2025-290/): Heap-buffer-overflow in pcpp::TelnetLayer::toString (not scored)
- [OSV-2025-289](https://insights.sbomify.com/OSV-2025-289/): Stack-buffer-overflow in ot::Cli::Utils::OutputLine (not scored)
- [OSV-2025-280](https://insights.sbomify.com/OSV-2025-280/): Heap-buffer-overflow in Assimp::SceneCombiner::CopyScene (not scored)
- [OSV-2025-275](https://insights.sbomify.com/OSV-2025-275/): UNKNOWN READ in void std::__1::vector<unsigned char, std::__1::allocator<unsigned char>>::__cons (not scored)
- [OSV-2025-271](https://insights.sbomify.com/OSV-2025-271/): Use-of-uninitialized-value in luaS_new (not scored)
- [OSV-2025-267](https://insights.sbomify.com/OSV-2025-267/): Stack-buffer-overflow in snap_usedef (not scored)
- [OSV-2025-266](https://insights.sbomify.com/OSV-2025-266/): Heap-buffer-overflow in lj_buf_ruleb128 (not scored)
- [OSV-2025-264](https://insights.sbomify.com/OSV-2025-264/): Security exception in org.joni.Parser.parseCharClass (not scored)
- [OSV-2025-262](https://insights.sbomify.com/OSV-2025-262/): UNKNOWN WRITE in _lou_handlePassVariableAction (not scored)
- [OSV-2025-260](https://insights.sbomify.com/OSV-2025-260/): Heap-buffer-overflow in bfd_getb16 (not scored)
- [OSV-2025-258](https://insights.sbomify.com/OSV-2025-258/): Global-buffer-overflow in parseExtraField (not scored)
- [OSV-2025-256](https://insights.sbomify.com/OSV-2025-256/): Global-buffer-overflow in QByteArray::QByteArray (not scored)
- [OSV-2025-251](https://insights.sbomify.com/OSV-2025-251/): Heap-buffer-overflow in icu_78::RegexMatcher::MatchChunkAt (not scored)
- [OSV-2025-249](https://insights.sbomify.com/OSV-2025-249/): Heap-use-after-free in lj_strfmt_pushvf (not scored)
- [OSV-2025-248](https://insights.sbomify.com/OSV-2025-248/): Heap-buffer-overflow in cli_bm_addpatt (not scored)
- [OSV-2025-240](https://insights.sbomify.com/OSV-2025-240/): Security exception in com.powsybl.commons.xml.XmlUtil.lambda$skipSubElements$0 (not scored)
- [OSV-2025-230](https://insights.sbomify.com/OSV-2025-230/): Heap-buffer-overflow in wasm_loader_prepare_bytecode (not scored)
- [OSV-2025-226](https://insights.sbomify.com/OSV-2025-226/): UNKNOWN READ in extract_sess_version (not scored)
- [OSV-2025-219](https://insights.sbomify.com/OSV-2025-219/): Heap-buffer-overflow in opj_j2k_read_tile_header (not scored)
- [OSV-2025-215](https://insights.sbomify.com/OSV-2025-215/): Security exception in graphql.parser.GraphqlAntlrToLanguage.createType (not scored)
- [OSV-2025-202](https://insights.sbomify.com/OSV-2025-202/): UNKNOWN READ in _blit_xrgb32_lerp_spans (not scored)
- [OSV-2025-190](https://insights.sbomify.com/OSV-2025-190/): Heap-buffer-overflow in std::__1::__function::__func<cv::PngDecoder::compose_frame (not scored)
- [OSV-2025-178](https://insights.sbomify.com/OSV-2025-178/): Heap-buffer-overflow in usm_set_user_password (not scored)
- [OSV-2025-177](https://insights.sbomify.com/OSV-2025-177/): Segv on unknown address in chunk_free_object (not scored)
- [OSV-2025-175](https://insights.sbomify.com/OSV-2025-175/): UNKNOWN READ in insert_free (not scored)
- [OSV-2025-174](https://insights.sbomify.com/OSV-2025-174/): Heap-use-after-free in gc_trace (not scored)
- [OSV-2025-173](https://insights.sbomify.com/OSV-2025-173/): UNKNOWN READ in chunk_obj_alloc (not scored)
- [OSV-2025-17](https://insights.sbomify.com/OSV-2025-17/): Heap-buffer-overflow in cv::PngDecoder::readHeader (not scored)
- [OSV-2025-169](https://insights.sbomify.com/OSV-2025-169/): Stack-buffer-overflow in utf8_in2 (not scored)
- [OSV-2025-165](https://insights.sbomify.com/OSV-2025-165/): Index-out-of-bounds in dwg_decode_eed (not scored)
- [OSV-2025-162](https://insights.sbomify.com/OSV-2025-162/): Heap-buffer-overflow in snmp_in_options (not scored)
- [OSV-2025-161](https://insights.sbomify.com/OSV-2025-161/): Heap-buffer-overflow in se_add_pair (not scored)
- [OSV-2025-160](https://insights.sbomify.com/OSV-2025-160/): UNKNOWN WRITE in ndpi_free_flow_data (not scored)
- [OSV-2025-16](https://insights.sbomify.com/OSV-2025-16/): UNKNOWN READ in png_free_data (not scored)
- [OSV-2025-156](https://insights.sbomify.com/OSV-2025-156/): Check failed in CheckUnwind (not scored)
- [OSV-2025-154](https://insights.sbomify.com/OSV-2025-154/): UNKNOWN READ in ndpi_strdup (not scored)
- [OSV-2025-149](https://insights.sbomify.com/OSV-2025-149/): UNKNOWN READ in processClientServerHello (not scored)
- [OSV-2025-148](https://insights.sbomify.com/OSV-2025-148/): Heap-buffer-overflow in setup_engineID (not scored)
- [OSV-2025-147](https://insights.sbomify.com/OSV-2025-147/): UNKNOWN WRITE in ndpi_free_flow_data (not scored)
- [OSV-2025-145](https://insights.sbomify.com/OSV-2025-145/): Heap-buffer-overflow in ___interceptor_strncat (not scored)
- [OSV-2025-133](https://insights.sbomify.com/OSV-2025-133/): Stack-buffer-overflow in se_read_conf (not scored)
- [OSV-2025-132](https://insights.sbomify.com/OSV-2025-132/): Heap-use-after-free in netsnmp_hex_to_binary (not scored)
- [OSV-2025-131](https://insights.sbomify.com/OSV-2025-131/): Heap-buffer-overflow in vips_foreign_save_heif_write_block (not scored)
- [OSV-2025-13](https://insights.sbomify.com/OSV-2025-13/): Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr (not scored)
- [OSV-2025-127](https://insights.sbomify.com/OSV-2025-127/): Object-size in unpack_dsd_samples (not scored)
- [OSV-2025-124](https://insights.sbomify.com/OSV-2025-124/): Use-of-uninitialized-value in get_word (not scored)
- [OSV-2025-119](https://insights.sbomify.com/OSV-2025-119/): Heap-buffer-overflow in snmp_config_when (not scored)
- [OSV-2025-114](https://insights.sbomify.com/OSV-2025-114/): Index-out-of-bounds in ada_fuzz_header.h (not scored)
- [OSV-2025-113](https://insights.sbomify.com/OSV-2025-113/): Heap-buffer-overflow in snmp_log_options (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/4/