Vulnerabilities of Red Hat Red Hat In-Vehicle Operating System 1

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2025-48797	Gimp: multiple heap buffer overflows in tga parser	7.3 High	May 27, 2025
CVE-2025-48796	Gimp: stack-based buffer overflows in file-ico	7.3 High	May 27, 2025
CVE-2025-5024	A flaw was found in gnome-remote-desktop	7.4 High	May 22, 2025
CVE-2025-4969	Libsoup: off-by-one out-of-bounds read in find_boundary() in soup-multipart.c	6.5 Medium	May 21, 2025
CVE-2025-4945	A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software	3.7 Low	May 19, 2025
CVE-2025-4948	Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup	7.5 High	May 19, 2025
CVE-2025-4476	A denial-of-service vulnerability has been identified in the libsoup HTTP client library	4.3 Medium	May 16, 2025
CVE-2025-4478	Gnome-remote-desktop: freerdp: unauthenticated rdp packet causes segfault in freerdp leading to denial of service	6.5 Medium	May 16, 2025
CVE-2025-4574	Crossbeam-channel: crossbeam-channel vulnerable to double free on drop	6.5 Medium	May 13, 2025
CVE-2025-4432	Ring: some aes functions may panic when overflow checking is enabled in ring	5.3 Medium	May 9, 2025
CVE-2025-4382	Grub2: grub allow access to encrypted device through cli once root device is unlocked via tpm	5.9 Medium	May 9, 2025
CVE-2025-4373	Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar	4.8 Medium	May 6, 2025
CVE-2025-4035	Libsoup: cookie domain validation bypass via uppercase characters in libsoup	4.3 Medium	Apr 29, 2025
CVE-2025-3891	Mod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabled	7.5 High	Apr 29, 2025
CVE-2025-46421	Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server	6.8 Medium	Apr 24, 2025
CVE-2025-46420	Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c	6.5 Medium	Apr 24, 2025
CVE-2025-46400	Xfig: fig2dev segmentation fault in read_arcobject	5.5 Medium	Apr 23, 2025
CVE-2025-46399	Xfig: transfig: fig2dev segmentation fault vulnerability	5.5 Medium	Apr 23, 2025
CVE-2025-46398	Xfig: fig2dev stack-overflow via read_objects	5.5 Medium	Apr 23, 2025
CVE-2025-46397	Xfig: xfig: stack-overflow allows possible code execution via local input manipulation	7.8 High	Apr 23, 2025
CVE-2024-10306	A vulnerability was found in mod_proxy_cluster	5.4 Medium	Apr 23, 2025
CVE-2025-32911	Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value	9.0 Critical	Apr 15, 2025
CVE-2025-3576	Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions	5.9 Medium	Apr 15, 2025
CVE-2025-32914	Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process	7.4 High	Apr 14, 2025
CVE-2025-32912	Libsoup: null pointer dereference in client when server omits the "nonce" parameter in an unauthorized response with digest authentication	6.5 Medium	Apr 14, 2025

Other Red Hat products