9405 matches found
CVE-2022-50404 fbdev: fbcon: release buffer when fbcon_do_set_font() failed
In the Linux kernel, the following vulnerability has been resolved: fbdev: fbcon: release buffer when fbcondosetfont failed syzbot is reporting memory leak at fbcondosetfont 1, for commit a5a923038d70 "fbdev: fbcon: Properly revert changes when vcresize failed" missed that the buffer might be new...
CVE-2022-50404
In the Linux kernel, the following vulnerability has been resolved: fbdev: fbcon: release buffer when fbcondosetfont failed syzbot is reporting memory leak at fbcondosetfont 1, for commit a5a923038d70 "fbdev: fbcon: Properly revert changes when vcresize failed" missed that the buffer might be new...
CVE-2022-50404
CVE-2022-50404 is a Linux kernel vulnerability affecting fbdev/fbcon where a memory leak could occur in fbcon_do_set_font() due to buffer handling when vc_resize() fails; the buffer might be newly allocated by fbcon_set_font() and released only partially. The issue was fixed in the kernel (as not...
CVE-2022-50404 fbdev: fbcon: release buffer when fbcon_do_set_font() failed
In the Linux kernel, the following vulnerability has been resolved: fbdev: fbcon: release buffer when fbcondosetfont failed syzbot is reporting memory leak at fbcondosetfont 1, for commit a5a923038d70 "fbdev: fbcon: Properly revert changes when vcresize failed" missed that the buffer might be new...
CVE-2022-50404 fbdev: fbcon: release buffer when fbcon_do_set_font() failed
In the Linux kernel, the following vulnerability has been resolved: fbdev: fbcon: release buffer when fbcondosetfont failed syzbot is reporting memory leak at fbcondosetfont 1, for commit a5a923038d70 "fbdev: fbcon: Properly revert changes when vcresize failed" missed that the buffer might be new...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to free a buffer when the fbcondosetfont function fails, which could lead to a memory leak...
PT-2025-38421
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was identified in the fbcon do set font function within the fbdev subsystem of the Linux kernel. The issue occurs when a buffer is newly allocated by fbcon set font and is...
Linux Distros Unpatched Vulnerability : CVE-2021-42203
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in swftools through 20201222. A heap-use-after-free exists in the function swfFontExtractDefineTextCallback located in swftext.c. It...
Linux Distros Unpatched Vulnerability : CVE-2016-0808
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the getCoverageFormat12 function in CmapCoverage.cpp in the Minikin library in Android 5.x before 5.1.1 LMY49G and 6.x before 2016-02-01...
Linux Distros Unpatched Vulnerability : CVE-2022-46440
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ttftool v0.9.2 was discovered to contain a segmentation violation via the readU16 function at ttf.c. CVE-2022-46440 Note that Nessus relies on the presence of t...
Linux Distros Unpatched Vulnerability : CVE-2011-3443
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free vulnerability in WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service hea...
Linux Distros Unpatched Vulnerability : CVE-2017-8420
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SWFTools 2013-04-09-1007 on Windows has a Data from Faulting Address controls Branch Selection starting at image0000000000400000+0x0000000000003e71 issue. This...
Linux Distros Unpatched Vulnerability : CVE-2021-21391
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CKEditor 5 provides a WYSIWYG editing solution. This CVE affects the following npm packages: ckeditor5-engine, ckeditor5-font, ckeditor5-image, ckeditor5-list,...
Linux Distros Unpatched Vulnerability : CVE-2016-2414
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Minikin library in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not properly consider negative size values in font data,...
Linux Distros Unpatched Vulnerability : CVE-2017-1000187
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In SWFTools, an address access exception was found in pdf2swf. FoFiTrueType::writeTTF CVE-2017-1000187 Note that Nessus relies on the presence of the package as...
The vulnerability of the PHP class tc-lib-pdf-font for generating PDF documents by TCPDF allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the PHP class tc-lib-pdf-font for generating PDF documents via TCPDF is related to improper handling of the generation process. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
CVE-2025-58837
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shiful H SS Font Awesome Icon ss-font-awesome-icon allows Stored XSS.This issue affects SS Font Awesome Icon: from n/a through = 4.1.3...
CVE-2025-58837
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shiful H SS Font Awesome Icon ss-font-awesome-icon allows Stored XSS.This issue affects SS Font Awesome Icon: from n/a through = 4.1.3...
CVE-2025-58837 WordPress SS Font Awesome Icon Plugin <= 4.1.3 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shiful H SS Font Awesome Icon ss-font-awesome-icon allows Stored XSS.This issue affects SS Font Awesome Icon: from n/a through = 4.1.3...