Known vulnerabilities in Red Hat In-Vehicle Operating System 1

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2025-13763	Libopensc: opensc: multiple uses of uninitialized variable	5.7 Medium	Apr 23, 2026
CVE-2025-14821	Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows	7.8 High	Apr 7, 2026
CVE-2025-12801	Nfs-utils: rpc.mountd in the nfs-utils privilege escalation	6.5 Medium	Mar 4, 2026
CVE-2025-14905	389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow	7.2 High	Feb 23, 2026
CVE-2025-14831	Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification	5.3 Medium	Feb 9, 2026
CVE-2025-9820	Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function	4.0 Medium	Jan 26, 2026
CVE-2025-9615	Networkmanager: networkmanager file access	3.3 Low	Jan 26, 2026
CVE-2025-11065	Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure	5.3 Medium	Jan 26, 2026
CVE-2025-14242	Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing	6.5 Medium	Jan 14, 2026
CVE-2025-12543	Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf	9.6 Critical	Jan 7, 2026
CVE-2025-2515	A vulnerability was found in BlueChi, a multi-node systemd service controller used in RHIVOS	7.2 High	Dec 24, 2025
CVE-2025-14523	Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins)	8.2 High	Dec 11, 2025
CVE-2025-14512	Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow	6.5 Medium	Dec 11, 2025
CVE-2025-14087	Glib: glib: buffer underflow in gvariant parser leads to heap corruption	5.6 Medium	Dec 10, 2025
CVE-2025-14104	Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames	6.1 Medium	Dec 5, 2025
CVE-2025-66287	Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash	8.8 High	Dec 4, 2025
CVE-2025-13947	Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop	7.4 High	Dec 3, 2025
CVE-2025-13601	Glib: integer overflow in in g_escape_uri_string()	7.7 High	Nov 26, 2025
CVE-2025-13502	Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos	7.5 High	Nov 25, 2025
CVE-2025-13609	A vulnerability has been identified in keylime where an attacker can exploit this flaw by registering a new agent…	8.2 High	Nov 24, 2025
CVE-2025-54770	Grub2: use-after-free in net_set_vlan	4.9 Medium	Nov 18, 2025
CVE-2025-61664	Grub2: missing unregister call for normal_exit command may lead to use-after-free	4.9 Medium	Nov 18, 2025
CVE-2025-61663	Grub2: missing unregister call for normal commands may lead to use-after-free	4.9 Medium	Nov 18, 2025
CVE-2025-61662	A Use-After-Free vulnerability has been discovered in GRUB's gettext module	7.8 High	Nov 18, 2025
CVE-2025-61661	Grub2: grub2: out-of-bounds write via malicious usb device	4.8 Medium	Nov 18, 2025

Other Red Hat products