CVE-2025-46399 – Fig2Dev Genge Itp Spline Segmentation Fault

April 23, 2025

CVE ID : CVE-2025-46399

Published : April 23, 2025, 9:15 p.m. | 1 hour, 43 minutes ago

Description : Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via genge_itp_spline function.

Severity: 7.1 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleSolaar is a Linux manager for Logitech keyboards, mice and trackpads

Next Article CVE-2025-46400 – Fig2dev ArcObject Segmentation Fault Vulnerability

Highlights

CVE-2025-47950 – CoreDNS QUIC Denial of Service (DoS) Vulnerability

June 6, 2025

CVE ID : CVE-2025-47950

Published : June 6, 2025, 6:15 p.m. | 1 hour, 33 minutes ago

Description : CoreDNS is a DNS server that chains plugins. In versions prior to 1.21.2, a Denial of Service (DoS) vulnerability exists in the CoreDNS DNS-over-QUIC (DoQ) server implementation. The server previously created a new goroutine for every incoming QUIC stream without imposing any limits on the number of concurrent streams or goroutines. A remote, unauthenticated attacker could open a large number of streams, leading to uncontrolled memory consumption and eventually causing an Out Of Memory (OOM) crash — especially in containerized or memory-constrained environments. The patch in version 1.21.2 introduces two key mitigation mechanisms: `max_streams`, which caps the number of concurrent QUIC streams per connection with a default value of `256`; and `worker_pool_size`, which Introduces a server-wide, bounded worker pool to process incoming streams with a default value of `1024`. This eliminates the 1:1 stream-to-goroutine model and ensures that CoreDNS remains resilient under high concurrency. Some workarounds are available for those who are unable to upgrade. Disable QUIC support by removing or commenting out the `quic://` block in the Corefile, use container runtime resource limits to detect and isolate excessive memory usage, and/or monitor QUIC connection patterns and alert on anomalies.

Severity: 7.5 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

The Ultimate Guide to Node.js Development Pricing for Enterprises

Stack Overflow: Developers’ trust in AI outputs is worsening year over year

Web Components: Working With Shadow DOM

Google’s new Opal tool allows users to create mini AI apps with no coding required

5 preinstalled apps you should delete from your Samsung phone immediately

Ubuntu Linux lagging? Try my 10 go-to tricks to speed it up

How I survived a week with this $130 smartwatch instead of my Garmin and Galaxy Ultra

YouTube is using AI to verify your age now – and if it’s wrong, that’s on you to fix

Time-Controlled Data Processing with Laravel LazyCollection Methods

Time-Controlled Data Processing with Laravel LazyCollection Methods

Create Apple Wallet Passes in Laravel

The Laravel Idea Plugin is Now FREE for PhpStorm Users

New data shows Xbox is utterly dominating PlayStation’s storefront — accounting for 60% of the Q2 top 10 game sales spots

New data shows Xbox is utterly dominating PlayStation’s storefront — accounting for 60% of the Q2 top 10 game sales spots

Opera throws Microsoft to Brazil’s watchdogs for promoting Edge as your default browser — “Microsoft thwarts‬‭ browser‬‭ competition‬‭‬‭ at‬‭ every‬‭ turn”

Activision once again draws the ire of players for new Diablo Immortal marketing that appears to have been made with generative AI

CVE-2025-46399 – Fig2Dev Genge Itp Spline Segmentation Fault

CVE-2025-43234 – Apple WatchOS/IOS/iPadOS/tvOS/macOS VisionOS Texture Corruption Vulnerability

CVE-2025-43237 – Apple macOS Sequoia Write Access Vulnerability

CVE-2025-38167 – “NTFS3 Linux Kernel Null Pointer Dereference Vulnerability”

Google Patches Quick Share Vulnerability Enabling Silent File Transfers Without Consent

Should Children Use AI Chatbots? Google Thinks So, Critics Strongly Disagree

CVE-2025-48755 – Spiral-rs Crate Zero-Sized Type Allocation Arbitrary Write

CVE-2025-47950 – CoreDNS QUIC Denial of Service (DoS) Vulnerability

CVE-2025-27828 – Mitel MiContact Center Business Reflected Cross-Site Scripting Vulnerability

How Attackers Target Travelers – and How to Defend Yourself

Final Fantasy Tactics: The Ivalice Chronicles has been revealed for Xbox and PC, along with a release date

CVE-2025-46399 – Fig2Dev Genge Itp Spline Segmentation Fault

Related Posts