202929 matches found
PT-2026-117566
A heap use-after-free in the gf odf ac4 cfg clean list function /odf/descriptors.c of GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master allows attackers to cause a Denial of Service DoS via supplying a crafted AC4 file...
PT-2026-117534
A use-after-free in the gf filter pid get packet function filter core/filter pid.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted file...
ALSA-2026:85239 Important: python3 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
CVE-2025-55654
A use-after-free in the gffilterpidgetpacket function filtercore/filterpid.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted file...
CVE-2026-110681: Use After Free
Cpanel::JSON::XS versions before 4.80 for Perl use the parent interpreter's scalars from a parser object cloned into a new ithread. A parser object holds its callbacks and its incremental parse buffer as raw scalar pointers. When a thread is created, these are copied into the new interpreter...
CVE-2025-60482: Undefined Security Weakness
A heap use-after-free in the gfodfac4cfgcleanlist function /odf/descriptors.c of GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master allows attackers to cause a Denial of Service DoS via supplying a crafted AC4 file...
CVE-2026-112094: Use After Free
A security vulnerability has been detected in michaelrsweet mxml 4.0.5/4.0.6. This affects the function mxmlloaddata of the file mxml-file.c. The manipulation leads to use after free. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The...
CVE-2026-112036: Double Free
A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function freecharlist of the file source/pdf/pdf-xref.c of the component Signature Locking. Performing a manipulation results in double free. The attack may be initiated remotely. The exploit is now public and may be use...
PT-2026-117171
A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function free char list of the file source/pdf/pdf-xref.c of the component Signature Locking. Performing a manipulation results in double free. The attack may be initiated remotely. The exploit is now public and may be...
PT-2026-117654
Name of the Vulnerable Software and Affected Versions Pillow versions 11.3.0 through 12.x Description A heap use-after-free occurs when libtiff rejects a tag while encoding TIFF data to an in-memory buffer. This happens when an application saves attacker-influenced TIFF tags to BytesIO, causing...
UBUNTU-CVE-2026-98776
In the Linux kernel, the following vulnerability has been resolved: binderfs: fix UAF write in binderadddevice binderfsbinderdevicecreate publishes the new dentry with dmakepersistent and then calls simpledonecreating, which drops the parent directory lock and the creator's dentry reference. It...
CVE-2025-60482
The GPAC Project/MP4Box version 2.5-DEV-rev1593-gfe88c3545-master contains a heap use-after-free vulnerability in the gf_odf_ac4_cfg_clean_list function located in /odf/descriptors.c. This flaw allows an attacker to trigger a Denial of Service (DoS) by providing a crafted AC4 file . While the vul...
Skia Graphic Library DoS
The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
Skia graphics library DoS
The vulnerability in the Skia graphics library of Google Chrome and Microsoft Edge is related to memory usage after it has been freed. Exploiting this vulnerability allows a remote attacker to cause a denial of service by sending a specially crafted HTML page...
Windows Installer Privilege Escalation
The vulnerability of Windows operating system installers is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Navigation section of Microsoft DoS
The vulnerability in the Navigation section of Microsoft Edge and Google Chrome browsers is related to use-after-free memory allocation. Exploiting this vulnerability allows a remote attacker to cause a denial of service by sending a specially crafted HTML page...
Google Chrome Microsoft Edge DoS
The vulnerability in the JavaScript script handler of Google Chrome and Microsoft Edge browsers is related to improper memory usage after deallocation. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...
Google Chrome Microsoft Edge DoS
The vulnerability in the JavaScript script handler of Google Chrome and Microsoft Edge browsers is related to improper memory usage after deallocation. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...
Google Chrome Microsoft Edge DoS
The vulnerability in the JavaScript script handler of Google Chrome and Microsoft Edge browsers is related to improper memory usage after deallocation. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...
Skia Graphic Library DoS
The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...