CVE-2025-14321

CVE-2025-14321 概念验证 描述 针对 Firefox 中 RTCEncodedFrameBase 组件的释放后使用 UAF 漏洞的概念验证 PoC，该漏洞可通过 WebRTC 编码转换 API 利用。 CVE-2025-14321 : RTCEncodedFrameBase 的析构函数在释放帧的本机内存时未调用 DetachArrayBuffer。因此，JavaScript 的 ArrayBuffer 仍保留指向已释放内存的指针（悬挂指针），允许对 Firefox 内容进程堆进行任意读写。 此 PoC 已在 Mozilla Firefox 145.0.1 和 Windows...

Rocky Linux 8 [CIQ] Security Update: ctdb / ctdb-debuginfo / libsmbclient / libsmbclient-debuginfo / etc (crlsa-2022_0332)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20220332 advisory. samba: Out-of-bounds heap read/write vulnerability in VFS module vfsfruit allows code execution CVE-2021-44142 Tenable has extracted the preceding description block...

Linux Distros Unpatched Vulnerability : CVE-2026-91958

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP versions before 3.31.0 fail to validate MonitorIds array values when parsing RDP connection files, allowing unbounded array indexing in xfdetectmonitors...

PT-2026-92077

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.31.0 Description Insufficient validation of MonitorIds array values during the parsing of RDP connection files allows unbounded array indexing within the xf detect monitors function. A remote attacker can use a...

AZL-101730 CVE-2026-59679 affecting package libXfont2 for versions less than 2.0.9-1

fsreadglyphs in the libXfont2 font-server client src/fc/fserve.c indexes the per-character encoding array using numchars from the FSQueryXBitmaps16 reply, but that array was allocated with a size derived from numextents in the separate FSQueryXExtents16 reply. The two CARD32 fields are never...

PT-2026-25333

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.24.0 Description FreeRDP is a free implementation of the Remote Desktop Protocol. A client-side heap out-of-bounds read/write issue exists in FreeRDP's bitmap cache subsystem. This is due to an incorrect boundary...

DEBIAN-CVE-2025-53630

llama.cpp is an inference of several LLM models in C/C++. Integer Overflow in the ggufinitfromfileimpl function in ggml/src/gguf.cpp can lead to Heap Out-of-Bounds Read/Write. This vulnerability is fixed in commit 26a48ad699d50b6268900062661bd22f3e792579...

SUSE CVE-2018-16847

An OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU. It could occur in nvmecmbops routines in nvme device. A guest user/process could use this flaw to crash the QEMU process resulting in DoS or potentially run arbitrary code with privileges of the QEMU...

samba: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution

An out-of-bounds heap read write vulnerability was found in Samba. Due to a boundary error when processing EA metadata while opening files in smbd within the VFS Samba module vfsfruit, a remote attacker with ability to write to file's extended attributes can trigger an out-of-bounds write and...

samba: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution

An out-of-bounds heap read write vulnerability was found in Samba. Due to a boundary error when processing EA metadata while opening files in smbd within the VFS Samba module vfsfruit, a remote attacker with ability to write to file's extended attributes can trigger an out-of-bounds write and...

samba: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution

An out-of-bounds heap read write vulnerability was found in Samba. Due to a boundary error when processing EA metadata while opening files in smbd within the VFS Samba module vfsfruit, a remote attacker with ability to write to file's extended attributes can trigger an out-of-bounds write and...

CVE-2022-23559

Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would cause an integer overflow in embedding lookup operations. Both embeddingsize and lookupsize are products of values provided by the user. Hence, a malicious user could trigger overflows in the...

PT-2022-16074

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.8.0 TensorFlow versions 2.7.0 through 2.7.0 TensorFlow versions 2.6.0 through 2.6.2 TensorFlow versions 2.5.0 through 2.5.2 Description An attacker can craft a TFLite model that would cause an integer overflow in...

CLSA-2022-1643917481 Fix of CVE: CVE-2021-44142

CVE-2021-44142: Fix out-of-bounds heap read/write vulnerability in VFS module vfsfruitrhbz2046152...

CLSA-2022-1643914257 Fix of CVE: CVE-2021-44142

CVE-2021-44142: Fix out-of-bounds heap read/write vulnerability in VFS module vfsfruit rhbz2046152...

Remote Code Execution (RCE)

samba is vulnerable to remote code execution. The vulnerability exists due to an Out-of-Bounds OOB Heap Read/Write allowing an attacker to inject maliciously crafted script into the system...

Samba RCE Vulnerability (CVE-2021-44142)

Samba is prone to a remote code execution RCE vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

samba: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution

An out-of-bounds heap read write vulnerability was found in Samba. Due to a boundary error when processing EA metadata while opening files in smbd within the VFS Samba module vfsfruit, a remote attacker with ability to write to file's extended attributes can trigger an out-of-bounds write and...

ALSA-2022:0332 Critical: samba security and bug fix update

Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allow PC-compatible machines to share files, printers, and various information. Security Fixes: samba: Out-of-bounds heap read/write vulnerability in VF...

CVE-2021-41208

TensorFlow is an open source platform for machine learning. In affected versions the code for boosted trees in TensorFlow is still missing validation. As a result, attackers can trigger denial of service via dereferencing nullptrs or via CHECK-failures as well as abuse undefined behavior binding...