3000 matches found
GHSA-XPHW-CQX3-667J thin-vec: Use-After-Free and Double Free in IntoIter::drop When Element Drop Panics
Summary A Double Free / Use-After-Free UAF vulnerability has been identified in the IntoIter::drop and ThinVec::clear implementations of the thinvec crate. Both vulnerabilities share the same root cause and can trigger memory corruption using only safe Rust code — no unsafe blocks required...
CVE-2026-33020
libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. Versions 1.8.7 and prior contain an integer overflow which leads to a heap buffer overflow via sixelframeconverttorgb888 in frame.c, where allocation size and pointer offset computations for palettised images PAL1, PAL...
UBUNTU-CVE-2026-33020
libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. Versions 1.8.7 and prior contain an integer overflow which leads to a heap buffer overflow via sixelframeconverttorgb888 in frame.c, where allocation size and pointer offset computations for palettised images PAL1, PAL...
PT-2026-29399
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a heap-buffer-overflow HBO in CIccApplyCmmSearch::costFunc can be triggered via malformed JSON configuration input to the iccApplySearch tool. AddressSanitizer reports an...
CVE-2026-21888
CVE-2026-21888 affects NanoMQ (MQTT v5) where get_var_integer() in the Variable Byte Integer parser accepts 5-byte varints without bounds checks, causing an out-of-bounds read and potential crash when built with ASan. Impact is described as high severity (CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N...
curl: CVE-2026-3805: use after free in SMB connection reuse
Summary A heap-use-after-free occurs in smbsendopen at lib/smb.c when curl processes two SMB URLs targeting the same host. The function smbparseurlpath sets req-path as a non-owning pointer into smbc-share connection-owned memory. During connection reuse, the needle connection is freed via...
njs:njs_process_script_fuzzer: Heap-buffer-overflow in match
Detailed Report: https://oss-fuzz.com/testcase?key=4641884189556736 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7d71ddb00101 Crash State: match pcre2match8...
Linux Distros Unpatched Vulnerability : CVE-2025-66869
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow vulnerability in function strcat in asaninterceptors.cpp in libming 0.4.8. CVE-2025-66869 Note that Nessus relies on the presence of the package...
CVE-2025-66869
Buffer overflow vulnerability in function strcat in asaninterceptors.cpp in libming 0.4.8...
CVE-2025-66869
Buffer overflow vulnerability in function strcat in asaninterceptors.cpp in libming 0.4.8...
UBUNTU-CVE-2025-66869
Buffer overflow vulnerability in function strcat in asaninterceptors.cpp in libming 0.4.8...
CVE-2025-66869
Buffer overflow vulnerability in function strcat in asaninterceptors.cpp in libming 0.4.8...
CVE-2025-66869
Buffer overflow vulnerability in function strcat in asaninterceptors.cpp in libming 0.4.8...
CVE-2025-66869
CVE-2025-66869 describes a buffer overflow in the libming project (version 0.4.8) due to an overflow in strcat within the asan_interceptors.cpp. The CVSS v3.1 base metrics indicate a HIGH impact on availability with network attack vector, no privileges, and no user interaction required. Multiple ...
PT-2025-53768
Name of the Vulnerable Software and Affected Versions libming version 0.4.8 Description A buffer overflow issue exists in the strcat function within the asan interceptors.cpp file of libming. This could potentially allow for unexpected behavior or code execution. Recommendations Update to a newer...
CVE-2025-66869
Buffer overflow vulnerability in function strcat in asaninterceptors.cpp in libming 0.4.8...
EUVD-2025-205624
Buffer overflow vulnerability in function strcat in asaninterceptors.cpp in libming 0.4.8...
cairo:svg-render-fuzzer: Stack-use-after-return in intersect
Project: https://gitlab.freedesktop.org/cairo/cairo.git Detailed Report: https://oss-fuzz.com/testcase?key=5101854309810176 Project: cairo Fuzzing Engine: libFuzzer Fuzz Target: svg-render-fuzzer Job Type: libfuzzerasancairo Platform Id: linux Crash Type: Stack-use-after-return WRITE 8 Crash...