23000 matches found
CVE-2026-86095
A flaw was found in netcdf-c. An attacker can craft a malicious HDF5 Hierarchical Data Format 5 file with an oversized attribute name. When an application processes this file and attempts to enumerate attribute names, the oversized name can cause an out-of-bounds write, leading to memory corrupti...
CLEANSTART-2024-WV01161 Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files
Security vulnerability affects the exiv2 package. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files...
CLEANSTART-2024-RH47389 Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata
Security vulnerability affects the exiv2 package. Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata...
CLEANSTART-2024-BO85307 Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata
Security vulnerability affects the exiv2 package. Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata...
CLEANSTART-2024-YC31676 Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files
Security vulnerability affects the exiv2 package. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files...
CLEANSTART-2024-RJ67281 Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files
Security vulnerability affects the exiv2 package. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files...
CLEANSTART-2024-WW93574 Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files
Security vulnerability affects the exiv2 package. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files...
thrift: thrift: Denial of Service via uncontrolled recursion in C GLib bindings
A flaw was found in Apache Thrift. An uncontrolled recursion vulnerability in the C GLib library bindings allows a remote, unauthenticated attacker to send specially crafted input to an affected application. Processing this input triggers excessive nested function calls that exhaust stack memory,...
thrift: thrift: Denial of Service via memory leak in C++ bindings
A flaw was found in Apache Thrift's C++ bindings. A remote attacker can cause a Denial of Service DoS by exploiting a memory leak where allocated system memory is not properly released after use. Over time, repeated requests can exhaust available memory and lead to service instability...
thrift: thrift: Denial of Service via uninitialized pointer access in c_glib bindings
A flaw was found in Apache Thrift's C GLib bindings. A remote, unauthenticated attacker could exploit this vulnerability by sending specially crafted input that triggers the access of an uninitialized pointer. This access can cause the application to crash, resulting in a Denial of Service DoS...
thrift: Apache Thrift: c_glib TZlibTransport reports a full read after a premature stream end
A flaw was found in Apache Thrift's C GLib bindings. Due to the use of an uninitialized resource and improper status code handling during request processing, the application can enter an inconsistent state. A remote attacker could exploit this vulnerability to cause a Denial of Service DoS or...
thrift: Apache Thrift: C++ WebSocket server transport does not read a full request length
A flaw was found in Apache Thrift. The C++ WebSocket server mishandles uninitialized resources and returns an incorrect status code when processing requests. Under specific conditions, a remote attacker could exploit this vulnerability to trigger improper application states and compromise system...
thrift: thrift: Denial of Service via improper handling of compressed data
A flaw was found in the Apache Thrift C++ bindings. A remote, unauthenticated attacker could cause a Denial of Service DoS by sending specially crafted, highly compressed data payloads. Because the software does not properly restrict resource allocation during decompression, processing these...
CLEANSTART-2023-PY66778 sprintf in the GNU C Library (glibc) 2
Security vulnerability affects the mpfr4 package. sprintf in the GNU C Library glibc 2...
CLEANSTART-2025-VY76861 flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might potentially lead to Do...
Security vulnerability affects the c-ares package. A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS Domain Name Servers can lead to output of wrong hostnames which might potentially lead to Domain Hijacking...
CLEANSTART-2025-FK62807 c-ares is a C library for asynchronous DNS requests
Security vulnerability affects the c-ares package. c-ares is a C library for asynchronous DNS requests...
CLEANSTART-2026-XP51348 Security fix for GHSA-jq53-42q6-pqr5 applied in: c-ares 1.34.5-r0
Security vulnerability affects the c-ares package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-XI18569 c-ares is an asynchronous resolver library
Security vulnerability affects the c-ares package. c-ares is an asynchronous resolver library...
