Segmentation fault in fax3encode in libtiff/tif_fax3.c

...

WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::Decompiler::WrapChild.

...

CVE-2025-38716: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: hfs: fix general protection fault in hfsfindinit The hfsfindinit method can trigger the crash if tree pointer is NULL: 45.746290 T9787 Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 1...

Linux Distros Unpatched Vulnerability : CVE-2021-34341

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ming 0.4.8 has an out-of-bounds read vulnerability in the function decompileIF in the decompile.c file that causes a direct segmentation fault and leads to deni...

Linux Distros Unpatched Vulnerability : CVE-2021-34340

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ming 0.4.8 has an out-of-bounds buffer access issue in the function decompileINCRDECR in decompiler.c file that causes a direct segmentation fault and leads to...

iommu/vt-d: Use device rbtree in iopf reporting path

...

S-Lang 2.3.2 was discovered to contain a segmentation fault via the function fixup_tgetstr().

...

CLSA-2025-1756928002 iperf3: Fix of CVE-2024-53580

CVE-2024-53580: fix segmentation violation in iperfexchangeparameters function...

The vulnerability of the get_ping_app_stat function in D-Link DIR-825 router microprogramming software allows a hacker to induce a maintenance failure.

The vulnerability of the getpingappstat function in D-Link DIR-825 router microprogramming software is related to the execution of operations outside the buffer in memory when processing the pingipaddr parameter. Exploiting this vulnerability allows a remote attacker to cause a service failure...

CVE-2025-54588

Envoy DNS cache use-after-free in the Dynamic Forward Proxy (DFP) → triggers when a DNS resolution callback fires new resolutions or cancels existing ones, under specific conditions (DFP-enabled, envoy.reloadable_features.dfp_cluster_resolves_hosts enabled, and Host header modified between Dynami...

ffmpeg:ffmpeg_AV_CODEC_ID_JPEGLS_DEC_fuzzer: Segv on unknown address in av_exif_free

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5009839714795520 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDJPEGLSDECfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Se...

Linux Distros Unpatched Vulnerability : CVE-2024-26588

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Prevent out-of-bounds memory access The testtag test triggers an unhandled...

AVX-Based Timing Side Channel — ASLR Detection

This work demonstrates a technique for detecting ASLR using AVX memory load instructions combined with RDTSCP timing and SIGSEGV detection. It illustrates how side-channel timing measurements can be applied to analyze memory layout randomization...

CVE-2025-57767

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.15.2, 21.10.2, and 22.5.2, if a SIP request is received with an Authorization header that contains a realm that wasn't in a previous 401 response's WWW-Authenticate header, or an Authorization header wi...

CVE-2025-38676

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Avoid stack buffer overflow from kernel cmdline While the kernel command line is considered trusted in most environments, avoid writing 1 byte past the end of "acpiid" if the "str" argument is maximum length...

Linux Distros Unpatched Vulnerability : CVE-2023-50472

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSONSetValuestring at cJSON.c. CVE-2023-50472 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2025-31163

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via putpatternarc function. CVE-2025-31163 Note...

Linux Distros Unpatched Vulnerability : CVE-2023-27115

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::catcomputesize. CVE-2023-27115 Note that Nessus relies on the presenc...

Linux Distros Unpatched Vulnerability : CVE-2022-32325

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c. CVE-2022-32325 Note that Nessus reli...

Linux Distros Unpatched Vulnerability : CVE-2020-24999

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is an invalid memory access in the function fprintf located in Error.cc in Xpdf 4.0.2. It can be triggered by sending a crafted PDF file to the pdftohtml...