CVE-2026-94030

CVE-2026-94030 is an integer overflow in the decode_bmp_pixel_data function of BMPLoader.cpp within SerenityOS's LibGfx component. Manipulating the height argument triggers the overflow, and the attack is remote with high complexity . A minimal 55-byte PoC was produced via the standard image-deco...

EUVD-2026-83743

A security vulnerability has been detected in SerenityOS up to 3d83e4509fd20d7438e1ae8470ffe668c136229c. Affected by this vulnerability is the function decodebmppixeldata of the file Userland/Libraries/LibGfx/ImageFormats/BMPLoader.cpp of the component LibGfx. The manipulation of the argument...

CVE-2021-28874

SerenityOS fixed as of c9f25bca048443e317f1994ba9b106f2386688c3 contains a buffer overflow vulnerability in LibTextCode through opening a crafted file...

EUVD-2019-10727

Malware in sbrugna...

EUVD-2021-19900

Malware in sbrugna...

EUVD-2021-19901

Malware in sbrugna...

EUVD-2021-18184

Malware in sbrugna...

EUVD-2021-15527

Malware in sbrugna...

EUVD-2021-14103

Malware in sbrugna...

EUVD-2021-16989

Malware in sbrugna...

EUVD-2021-34155

Malicious code in bioql PyPI...

CVE-2021-30045

SerenityOS 2021-03-27 contains a buffer overflow vulnerability in the EndOfCentralDirectory::read function...

CVE-2021-27343

SerenityOS Unspecified is affected by: Buffer Overflow. The impact is: obtain sensitive information context-dependent. The component is: /Userland/Libraries/LibCrypto/ASN1/DER.h Crypto::derdecodesequence function. The attack vector is: Parsing RSA Key ASN.1...

CVE-2019-20172

Kernel/VM/MemoryManager.cpp in SerenityOS before 2019-12-30 does not reject syscalls with pointers into the kernel-only virtual address space, which allows local users to gain privileges by overwriting a return address that was found on the kernel stack...

CVE-2021-4327

A vulnerability was found in SerenityOS. It has been rated as critical. Affected by this issue is the function initializetypedarrayfromarraybuffer in the library Userland/Libraries/LibJS/Runtime/TypedArray.cpp. The manipulation leads to integer overflow. The exploit has been disclosed to the publ...

CVE-2021-4327

A vulnerability was found in SerenityOS. It has been rated as critical. Affected by this issue is the function initializetypedarrayfromarraybuffer in the library Userland/Libraries/LibJS/Runtime/TypedArray.cpp. The manipulation leads to integer overflow. The exploit has been disclosed to the publ...

Integer overflow

A vulnerability was found in SerenityOS. It has been rated as critical. Affected by this issue is the function initializetypedarrayfromarraybuffer in the library Userland/Libraries/LibJS/Runtime/TypedArray.cpp. The manipulation leads to integer overflow. The exploit has been disclosed to the publ...

CVE-2021-4327 SerenityOS TypedArray.cpp initialize_typed_array_from_array_buffer integer overflow

A vulnerability was found in SerenityOS. It has been rated as critical. Affected by this issue is the function initializetypedarrayfromarraybuffer in the library Userland/Libraries/LibJS/Runtime/TypedArray.cpp. The manipulation leads to integer overflow. The exploit has been disclosed to the publ...

CVE-2021-4327

CVE-2021-4327 (SerenityOS) affects SerenityOS, specifically the function initialize_typed_array_from_array_buffer in Userland/Libraries/LibJS/Runtime/TypedArray.cpp. The vulnerability is an integer overflow, with the patch identified as f6c6047e49f1517778f5565681fb64750b14bf60. The exploit has be...

SerenityOS 输入验证错误漏洞

SerenityOS is a graphical Unix-like operating system for x86 computers. SerenityOS has an input validation error vulnerability that stems from the presence of an integer overflow vulnerability...