313 matches found
OSV-2025-871 UNKNOWN READ in ojph::local::param_cod::~param_cod
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=456837230 Crash type: UNKNOWN READ Crash state: ojph::local::paramcod::paramcod ojph::local::paramcod::paramcod ojph::local::paramcod::paramcod...
kernel: mptcp: do not queue data on closed subflows
In the Linux kernel, the following vulnerability has been resolved: mptcp: do not queue data on closed subflows Dipanjan reported a syzbot splat at close time: WARNING: CPU: 1 PID: 10818 at net/ipv4/afinet.c:153 inetsockdestruct+0x6d0/0x8e0 net/ipv4/afinet.c:153 Modules linked in: uioivshmemOE ui...
EUVD-2018-9571
Malware in sbrugna...
EUVD-2014-1627
Malware in sbrugna...
EUVD-2021-1671
Malware in sbrugna...
EUVD-2018-5980
Malware in sbrugna...
EUVD-2020-27963
Malware in sbrugna...
EUVD-2024-53321
Malicious code in bioql PyPI...
GHSA-PFP7-VXGR-83PW toodee is vulnerable to Heap Buffer Overflow through its DrainCol Destructor
An off-by-one error in the DrainCol::drop destructor could cause an unsafe memory copy operation to exceed the bounds of the associated vector. The error was related to the size of the data being copied in one of the ptr::copy invocations inside the destructor. When removing the first column from...
Linux Distros Unpatched Vulnerability : CVE-2018-20996
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the crossbeam crate before 0.4.1 for Rust. There is a double free because of destructor mishandling. CVE-2018-20996 Note that Nessus...
Linux Distros Unpatched Vulnerability : CVE-2020-24996
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is an invalid memory access in the function TextString::TextString located in Catalog.cc in Xpdf 4.0.2. It can be triggered by for example sending a craft...
Linux Distros Unpatched Vulnerability : CVE-2017-6849
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The PoDoFo::PdfColorGray::PdfColorGray function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference vi...
Linux Distros Unpatched Vulnerability : CVE-2018-6085
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Re-entry of a destructor in Networking Disk Cache in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code via a crafted HTML...
Linux Distros Unpatched Vulnerability : CVE-2022-3543
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability, which was classified as problematic, has been found in Linux Kernel. This issue affects the function unixsockdestructor/unixreleasesock of the...
SUSE CVE-2022-49987
In the Linux kernel, the following vulnerability has been resolved: md: call mdstopwrites in mdstop From the link 1, we can see raid1d was running even after the path raiddtr - mdstop - mdstop. Let's stop write first in destructor to align with normal md-raid to fix the KASAN issue. 1...
CVE-2022-49987 md: call __md_stop_writes in md_stop
In the Linux kernel, the following vulnerability has been resolved: md: call mdstopwrites in mdstop From the link 1, we can see raid1d was running even after the path raiddtr - mdstop - mdstop. Let's stop write first in destructor to align with normal md-raid to fix the KASAN issue. 1...
CVE-2020-36404
Keystone Engine 0.9.2 has an invalid free in llvmks::SmallVectorImpl::SmallVectorImpl...
RUSTSEC-2025-0062 Heap Buffer Overflow in the DrainCol Destructor
An off-by-one error in the DrainCol::drop destructor could cause an unsafe memory copy operation to exceed the bounds of the associated vector. The error was related to the size of the data being copied in one of the ptr::copy invocations inside the destructor. When removing the first column from...
Heap Buffer Overflow in the DrainCol Destructor
An off-by-one error in the DrainCol::drop destructor could cause an unsafe memory copy operation to exceed the bounds of the associated vector. The error was related to the size of the data being copied in one of the ptr::copy invocations inside the destructor. When removing the first column from...
CVE-2019-14075
Null pointer dereference issue in radio interface layer due to lack of null check in sapmodule destructor in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9607, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8998, Nicobar, QCS605, Rennell, Saipan,...