A small, easily overlooked piece of memory-management logic in the HDF5 C library has been rewarded with a CVE and a fast upstream fix: CVE-2025-2925 identifies a double‑free in the HDF5 function H5MM_realloc (src/H5MM.c) that can be triggered when a caller passes an effective size of zero. The...
The Linux kernel has received a targeted, low‑risk fix for CVE‑2025‑40253 — a double‑free defect inside the s390 ctcm driver — that removes a redundant kfree and eliminates a potential kernel memory‑corruption path reported by a static analyzer. The change is surgical: maintainers removed the...
Santesoft’s Sante PACS Server has been the subject of a coordinated advisory cluster this week after multiple remote‑exploitable flaws were disclosed that affect versions prior to 4.2.3, and at least one authoritative vulnerability bulletin places the combined impact at near‑critical severity...