CVE-2025-4207

MEDIUM Year: 2025
CVSS v3 Score
5.9
Medium
Weakness Type
CWE-126
View all →

Vulnerability Description

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.

Related Vulnerabilities

CVE-2023-39540

MEDIUM
CVSS:5.9(Medium)

A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted network packet can lead to an out-of-bounds read. An at...

CWE-1262023

CVE-2023-39541

MEDIUM
CVSS:5.9(Medium)

A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted network packet can lead to an out-of-bounds read. An at...

CWE-1262023

CVE-2023-4758

MEDIUM
CVSS:5.9(Medium)

Buffer Over-read in GitHub repository gpac/gpac prior to 2.3-DEV.

CWE-1262023

CVE-2024-33037

MEDIUM
CVSS:6.1(Medium)

Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the firmware.

CWE-1262024

CVE-2021-22552

MEDIUM
CVSS:5.5(Medium)

An untrusted memory read vulnerability in Asylo versions up to 0.6.1 allows an untrusted attacker to pass a syscall number in MessageReader that is then used by sysno() and can bypass validation. This...

CWE-1262021

CVE-2021-34299

MEDIUM
CVSS:5.5(Medium)

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Tiff_loader.dll library in affected applications lacks proper validation of us...

CWE-1262021