CVE-2025-3357

CRITICAL Year: 2025
CVSS v3 Score
9.8
Critical
Weakness Type
CWE-1285
View all →

Vulnerability Description

IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 19 could allow a remote attacker to execute arbitrary code due to improper validation of an index value of a dynamically allocated array.

Related Vulnerabilities

CVE-2025-3755

CRITICAL
CVSS:9.1(Critical)

Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules allows a remote unauthenticated attacker to read in...

CWE-12852025

CVE-2025-3755

CRITICAL
CVSS:9.1(Critical)

Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules allows a remote unauthenticated attacker to read in...

CWE-12852025

CVE-2022-21821

HIGH
CVSS:7.8(High)

NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote attacker would require a local user to download a specially crafted, corrupted f...

CWE-12852022

CVE-2024-10494

HIGH
CVSS:7.8(High)

An out of bounds read due to improper input validation in HeapObjMapImpl.cpp in NI LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation requires an attacker ...

CWE-12852024

CVE-2024-10495

HIGH
CVSS:7.8(High)

An out of bounds read due to improper input validation when loading the font table in fontmgr.cpp in NI LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation ...

CWE-12852024

CVE-2024-10496

HIGH
CVSS:7.8(High)

An out of bounds read due to improper input validation in BuildFontMap in fontmgr.cpp in NI LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation requires an ...

CWE-12852024