40 matches found
EUVD-2024-16030
Malicious code in bioql PyPI...
EUVD-2021-29735
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2016-5219
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to...
SUSE-SU-2025:02815-1 Security update for tiff
This update for tiff fixes the following issues: - CVE-2025-8176: Fixed heap use-after-free in tools/tiffmedian.c bsc1247108 - CVE-2025-8177: Fixed possible buffer overflow in tools/thumbnail.c:setrow when processing malformed TIFF files bsc1247106...
AlmaLinux 9 : libxml2 (ALSA-2025:12447)
The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:12447 advisory. libxslt: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr CVE-2025-7425 Tenable has extracted the preceding description block directly from...
CVE-2021-39522
An issue was discovered in libredwg through v0.10.1.3751. bitwcs2len in bits.c has a heap-based buffer overflow...
PT-2025-15614 · Samsung · Exynos 1080 Firmware +17
Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor, Wearable Processor, and Modem Exynos versions 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400 Description: A Heap-based Out-of-Bounds Write...
Linux Distros Unpatched Vulnerability : CVE-2018-19540
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20...
PT-2024-19628 · Swftools · Swftools
Name of the Vulnerable Software and Affected Versions: swftools version 0.9.2 Description: A heap-use-after-free issue was discovered in swftools via the removeFromTo function at swftools/src/swfc.c:838. This issue can potentially lead to a denial of service. Recommendations: For swftools version...
OESA-2023-1853 gdb security update
GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed. Security Fixes: GNU gdb GDB 13.0.50.20220805-git was discovered to contain a heap use after free via the function...
UBUNTU-CVE-2023-5341
A heap use-after-free flaw was found in coders/bmp.c in ImageMagick...
Race condition
A race condition in an event subsystem led to a heap use-after-free issue in established audio/video calls that could have resulted in app termination or unexpected control flow with very low probability...
SUSE-SU-2022:4148-1 Security update for pixman
This update for pixman fixes the following issues: - CVE-2022-44638: Fixed an integer overflow in pixmansamplefloory leading to heap out-of-bounds write bsc1205033...
Denial Of Service (DoS)
opensc:sid is vulnerable Denial Of Service DoS. A heap use after free issue was found in Opensc in scfilevalid...
Denial Of Service (DoS)
opensc is vulnerable to Denial Of Service DoS. The vulnerability exists due to a heap double free issue was found in Opensc allowing an attacker to crash the system...
UBUNTU-CVE-2018-19128
In Libav 12.3, there is a heap-based buffer over-read in decodeframe in libavcodec/lcldec.c that allows an attacker to cause denial-of-service via a crafted avi file...
CVE-2018-7435
An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the freexl::destroycell function...
SUSE-SU-2017:3277-1 Security update for php5
This update for php5 fixes the following issues: Security issues fixed: - CVE-2017-16642: Fix timelibmeridian error that could be used to leak information from the interpreter bsc1067441. - CVE-2017-4025: Fix pathname truncation in setincludepath, tempnam, rmdir, and readlink bsc1067090. -...
PT-2017-13820 · Lame +2 · Lame +2
Name of the Vulnerable Software and Affected Versions: LAME versions 3.98 through 3.99.5 Description: The issue is a heap-based buffer over-read that occurs when handling a malformed file in the k 34 4 function within the vbrquantize.c file. Recommendations: For LAME versions 3.98 through 3.99.5,...
OPENSUSE-SU-2017:1098-1 Security update for chromium
This update to Chromium 58.0.3029.81 fixes the following security issues bsc1035103: - CVE-2017-5057: Type confusion in PDFium - CVE-2017-5058: Heap use after free in Print Preview - CVE-2017-5059: Type confusion in Blink - CVE-2017-5060: URL spoofing in Omnibox - CVE-2017-5061: URL spoofing in...