logo

TruffleHog, Fade In and BSAFE Crypto-C vulnerabilities

ID: 89197878-f207-5467-87e8-eacb49a77358

STIX ID: report--89197878-f207-5467-87e8-eacb49a77358

Feed Name: Cisco Talos

Threat Score
50/100

Date Published: 2025-11-04

Date Updated: 2026-04-27

Author: Kri Dontje

...
...

**Cisco Talos disclosed multiple patched vulnerabilities across several products:** two XML parser memory-corruption flaws in Fade In (out-of-bounds write and use-after-free), an arbitrary code execution vulnerability in TruffleHog (via a crafted repository), and three ASN.1 parsing issues in Dell BSAFE (integer overflow, underflow, and stack overflow) that can lead to out-of-bounds reads or denial of service; vendors have issued patches.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.