{“lastseen”:”2025-11-04T18:24:19″,”description”:”\\n\\nCisco Talos’ Vulnerability Discovery \\u0026 Research team recently disclosed three vulnerabilities in Dell BSAFE, two in Fade In screenwriting software, and one in Trufflehog.\\n\\nThe vulnerabilities mentioned in this blog post have been patched by their respective vendors, all in adherence to _Cisco ‘s third-party vulnerability disclosure policy_.\\n\\nFor Snort coverage that can detect the exploitation of these vulnerabilities, download the latest rule sets from _Snort.org_, and our latest Vulnerability Advisories are always posted on _Talos Intelligence ‘s website_.\\n\\n## **Fade In out-of-bounds write vulnerabilities**\\n\\n _Discovered by Piotr Bania of Cisco Talos._\\n\\nFade In is a cross-platform text handling software for screenwriters.\\n\\n_TALOS-2025-2250_ (CVE-2025-53855) is an out-of-bounds write vulnerability in the XML parser functionality of GCC Productions Inc. Fade In 4.2.0. A specially crafted .fadein file can lead to an out-of-bounds write.\\n\\n_TALOS-2025-2252_ (CVE-2025-53814) is a use-after-free vulnerability in the XML parser functionality of GCC Productions Inc. Fade In 4.2.0. A specially crafted .xml file can lead to heap-based memory corruption.\\n\\n## **TruffleHog arbitrary code execution vulnerability**\\n\\n _Discovered by Adam Reiser of Cisco ASIG._\\n\\nTruffleHog is a detection system for code repositories and ticket systems that finds exposed sensitive information, such as API keys and passwords. This vulnerability is described in an _accompanying article_ on the Truffle Security website. The vuln is an arbitrary code execution vulnerability in the Git functionality of TruffleHog 3.90.2, _TALOS-2025-2243_ (CVE-2025-41390). A specially crafted repository can lead to a arbitrary code execution. An attacker can provide a malicious repository to trigger this vulnerability.\\n\\n## **Dell BSAFE integer overflow, underflow, and stack overflow vulnerabilities**\\n\\n _Discovered by Jason Crowder._\\n\\nDell BSAFE Crypto-C is FIPS-140 validated cryptography development kit for C\/C++ environments. In cooperation with Jason Crowder, Talos published three vulnerabilities in the Dell BSAFE Crypto-C module. This product is at end of service; the vulnerable versions were added to an existing CVE.\\n\\n_TALOS-2025-2140_ (CVE-2019-3728) is an integer overflow vulnerability, and _TALOS-2025-2141_ (CVE-2019-3728) is an integer underflow vulnerability. In both cases, a specially crafted ASN.1 record can lead to an out-of-bounds read. An attacker can provide a malformed ASN.1 record to trigger this vulnerability.\\n\\n_TALOS-2025-2142_ (CVE-2019-3728) is a stack overflow vulnerability. A specially crafted ASN.1 record can lead to denial of service.”,”published”:”2025-11-04T14:26:03″,”modified”:”2025-11-04T14:26:03″,”type”:”talosblog”,”title”:”TruffleHog, Fade In and BSAFE Crypto-C vulnerabilities”,”source”:””,”references”:””,”id”:”TALOSBLOG:031A02B360D9C25F9DB34CF3EBE68026″,”bulletinFamily”:”blog”,”cwe”:null,”cvelist”:[“CVE-2019-3728″,”CVE-2025-41390″,”CVE-2025-53814″,”CVE-2025-53855″],”sourceData”:””,”sourceHref”:””,”cvss”:{“score”:7.8,”severity”:”HIGH”,”vector”:”CVSS:3.1\/AV:L\/AC:L\/PR:N\/UI:R\/S:U\/C:H\/I:H\/A:H”,”version”:”3.1″},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/blog.talosintelligence.com\/trufflehog-fade-in-and-bsafe-crypto-c-vulnerabilities\/”,”category_name”:”News”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2025-11-04T18:24:19″,”description”:”\\n\\nCisco Talos’ Vulnerability Discovery \\u0026 Research team recently disclosed three vulnerabilities in Dell BSAFE, two in Fade In screenwriting…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[6,8,28,12,15,13,7,69,11,5],"class_list":["post-24628","post","type-post","status-publish","format-standard","hentry","category-category_news","tag-cve","tag-cvss","tag-cvss-78","tag-exploit","tag-high","tag-news","tag-security","tag-talosblog","tag-tapic","tag-vulnerability"],"yoast_head":"\n