3 reportsPriority Medium
Multiple software vulnerabilities disclosed
Several critical vulnerabilities have been identified in widely used software, posing potential risks to UK organisations that rely on these systems.
First report Latest
What is going on
- A stack overflow vulnerability in the libexpat library was reported, affecting specific versions of Hitachi Energy's REB500 product.
- GitLab released updates to address an integer overflow vulnerability impacting merge request pages when the Ona integration is enabled, with reports of exploitation in the wild.
- A critical heap-based buffer overflow vulnerability in Ghostscript could allow remote code execution through malicious PDF files.
- A data breach at US-based systems integrator Ford AV was reported, though details remain limited.
- What to watch: Further confirmation of exploitation attempts and details about the extent of the Ford AV breach could change the current understanding of the situation.
Reports in this story
Newest first. Each one is a separate event with its own sources and evidence.
- Priority LowType Incident
US-based systems integrator Ford AV hit by data breach
- Priority MediumType Vulnerability
Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter (base/sjpx_openjpeg.c) that allows attackers to cause memory corrupt…
- Priority LowType Vulnerability
A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents