SEARCHSearch the cs-graph

CVE-#### · MITRE T#### · CWE-#### · ATLAS AML.T#### · D3-XX · compliance article references. Authored by Adam Lundqvist.

40 results for “kev-cve-2025-48572” · 0.80 s · cached

Facets · 1 entity types

40 CVE
CVE-2025-48072CVE

CVE-2025-48072

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. Version 3.3.2 is vulnerable to a heap-based buffer ove…

CVSS 9.1EPSS 0.5%
Match for kev-cve-2025-48572
CVE-2025-54951CVE

CVE-2025-54951

A group of related buffer overflow vulnerabilities in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code execution or other undesirable effects. This issue…

CVSS 9.8EPSS 0.7%
Match for kev-cve-2025-48572
CVE-2025-40278CVE

CVE-2025-40278

In the Linux kernel, the following vulnerability has been resolved: net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak Fix a KMSAN kernel-infoleak detected by the syzbot . …

EPSS 0.2%
Match for kev-cve-2025-48572
CVE-2025-54952CVE

CVE-2025-54952

An integer overflow vulnerability in the loading of ExecuTorch models can cause smaller-than-expected memory regions to be allocated, potentially resulting in code execution or other undesirable effe…

CVSS 9.8EPSS 0.6%
Match for kev-cve-2025-48572
CVE-2025-48539CVE

CVE-2025-48539

In SendPacketToPeer of acl_arbiter.cc, there is a possible out of bounds read due to a use after free. This could lead to remote (proximal/adjacent) code execution with no additional execution privil…

CVSS 8.0EPSS 0.3%
Match for kev-cve-2025-48572
CVE-2025-38627CVE

CVE-2025-38627

In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic The decompress_io_ctx may be released asynchronously after I/O comple…

CVSS 7.8EPSS 0.2%linux
Match for kev-cve-2025-48572
CVE-2025-47392CVE

CVE-2025-47392

Memory corruption when decoding corrupted satellite data files with invalid signature offsets.

CVSS 8.8EPSS 0.2%qualcomm
Match for kev-cve-2025-48572
CVE-2025-49672CVE

CVE-2025-49672

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

CVSS 8.8EPSS 0.9%
Match for kev-cve-2025-48572
CVE-2026-48574CVE

CVE-2026-48574

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.

CVSS 7.8EPSS 0.5%microsoft
Match for kev-cve-2025-48572
CVE-2025-7627CVE

CVE-2025-7627

A vulnerability was found in YiJiuSmile kkFileViewOfficeEdit up to 5fbc57c48e8fe6c1b91e0e7995e2d59615f37abd and classified as critical. Affected by this issue is the function fileUpload of the file /…

CVSS 9.8EPSS 0.5%
Match for kev-cve-2025-48572
CVE-2026-4821CVE

CVE-2026-4821

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as it was published in error.

Match for kev-cve-2025-48572
CVE-2025-47732CVE

CVE-2025-47732

Deserialization of untrusted data in Microsoft Dataverse allows an authorized attacker to execute code over a network.

CVSS 9.8EPSS 3.7%
Match for kev-cve-2025-48572
CVE-2025-48602CVE

CVE-2025-48602

In exitKeyguardAndFinishSurfaceBehindRemoteAnimation of KeyguardViewMediator.java, there is a possible lockscreen bypass due to a logic error in the code. This could lead to local escalation of privi…

CVSS 8.4EPSS 0.1%
Match for kev-cve-2025-48572
CVE-2024-56121CVE

CVE-2024-56121

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Match for kev-cve-2025-48572
CVE-2025-57622CVE

CVE-2025-57622

An issue in Step-Video-T2V allows a remote attacker to execute arbitrary code via the /vae-api , /caption-api , feature = pickle.loads(request.get_data()) component

CVSS 9.8EPSS 0.5%
Match for kev-cve-2025-48572
CVE-2025-33071CVE

CVE-2025-33071

Use after free in Windows KDC Proxy Service (KPSSVC) allows an unauthorized attacker to execute code over a network.

CVSS 8.1EPSS 23.2%
Match for kev-cve-2025-48572
CVE-2024-56123CVE

CVE-2024-56123

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Match for kev-cve-2025-48572
CVE-2025-6573CVE

CVE-2025-6573

Kernel software installed and running inside an untrusted/rich execution environment (REE) could leak information from the trusted execution environment (TEE).

CVSS 9.8EPSS 0.4%
Match for kev-cve-2025-48572
CVE-2025-59605CVE

CVE-2025-59605

Memory Corruption when processing device identifier strings that exceed the expected maximum length.

CVSS 7.8EPSS 0.1%qualcomm
Match for kev-cve-2025-48572
CVE-2024-56120CVE

CVE-2024-56120

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Match for kev-cve-2025-48572
Hybrid search: an exact-match keyword pass (title + MITRE-ID + body-head) fused with Vertex AI semantic similarity (text-embedding-005, cosine vector search over the corpus) via reciprocal-rank fusion — exact IDs stay pinned, related concepts surface by meaning. Curated by Adam Lundqvist, Founder at SQUR.