Vulnerabilities

CVSS

8.6 High

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Risk score

68.8

Published

2025-06-17

Status

Deferred

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Fastw3b LLC FW Gallery fw-gallery allows Path Traversal.This issue affects FW Gallery: from n/a through <= 8.0.0.

Weaknesses

CWE-22

Coverage 1

vulnerability

A 0-click exploit chain for the Pixel 9 Part 1: Decoding Dolby

Google Project Zero discovered a 0-click exploit chain targeting the Dolby Unified Decoder (UDC) within the Google Messages app on Pixel 9 devices. The vulnerability stems from a buffer overrun and a memory leak, allowin…

Google Project Zero · Jan 14, 2026 High

CVE-2025-49415CVE-2025-54957CVE-2025-369340-clickbuffer overflowmemory leak

All articles mentioning it

Advisories and references

• patchstack.com/database/Wordpress/Plugin/fw-gallery/vulnerability/wo...