Vulnerabilities of Red Hat Red Hat In-Vehicle Operating System 1

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2025-32910	Libsoup: null pointer deference on libsoup via /auth/soup-auth-digest.c through "soup_auth_digest_authenticate" on client when server omits the "realm" parameter in an unauthorized response with digest authentication	6.5 Medium	Apr 14, 2025
CVE-2025-32909	Libsoup: null pointer dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.c	5.3 Medium	Apr 14, 2025
CVE-2025-32908	Libsoup: denial of service on libsoup through http/2 server	7.5 High	Apr 14, 2025
CVE-2025-32907	Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range header	5.3 Medium	Apr 14, 2025
CVE-2025-32906	Libsoup: out of bounds reads in soup_headers_parse_request()	7.5 High	Apr 14, 2025
CVE-2025-32913	Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header	7.5 High	Apr 14, 2025
CVE-2025-3416	A flaw was found in OpenSSL's handling of the properties argument in certain functions	3.7 Low	Apr 8, 2025
CVE-2025-3360	A flaw was found in GLib	3.7 Low	Apr 7, 2025
CVE-2025-32053	Libsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()	6.5 Medium	Apr 3, 2025
CVE-2025-32052	Libsoup: heap buffer overflow in sniff_unknown()	6.5 Medium	Apr 3, 2025
CVE-2025-32051	Libsoup: segmentation fault when parsing malformed data uri	5.9 Medium	Apr 3, 2025
CVE-2025-32050	Libsoup: integer overflow in append_param_quoted	5.9 Medium	Apr 3, 2025
CVE-2025-32049	Libsoup: denial of service attack to websocket server	7.5 High	Apr 3, 2025
CVE-2025-3155	Yelp: arbitrary file read	7.4 High	Apr 3, 2025
CVE-2025-2784	Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content	7.0 High	Apr 3, 2025
CVE-2025-2487	389-ds-base: null pointer dereference leads to denial of service	4.9 Medium	Mar 18, 2025
CVE-2025-1057	Keylime: keylime registrar dos due to incompatible database entry handling	4.3 Medium	Mar 15, 2025
CVE-2024-8176	Libexpat: expat: improper restriction of xml entity expansion depth in libexpat	7.5 High	Mar 14, 2025
CVE-2025-0686	Grub2: romfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading dat	6.4 Medium	Mar 3, 2025
CVE-2025-0685	Grub2: jfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data	6.4 Medium	Mar 3, 2025
CVE-2025-0684	Grub2: reiserfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data	6.4 Medium	Mar 3, 2025
CVE-2025-0678	Grub2: squash4: integer overflow may lead to heap based out-of-bounds write when reading data	7.8 High	Mar 3, 2025
CVE-2024-45782	Grub2: fs/hfs: strcpy() using the volume name (fs/hfs.c:382)	7.8 High	Mar 3, 2025
CVE-2024-45778	Grub2: fs/bfs: integer overflow in the bfs parser.	4.1 Medium	Mar 3, 2025
CVE-2024-45779	Grub2: fs/bfs: integer overflow leads to heap oob read in the bfs parser	6.0 Medium	Mar 3, 2025

Other Red Hat products