cve-2024-6387-poc

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...

cve-2024-6387_AImade

Presentation of the Test Code for CVE-2024-6387 Introduction This document presents a Python script designed to test the vulnerability CVE-2024-6387, identified in OpenSSH. This vulnerability is a race condition in the SIGALRM signal handler that can allow remote code execution RCE on glibc-based...

Exploit for Race Condition in Sonicwall Sma_6200_Firmware

CVE-2024-6387-how-to-fix Vulnerability remediation and mitiga...

Next.js: Unauthenticated Remote Code Execution in Image Optimization API when SVG files are used

Impact A memory-related vulnerability has been discovered in an upstream library used for Image Optimization can lead to possible remote code execution RCE when Next.js runs on glibc-based Linux. Workaround Ensure the version of sharp used by Next.js is greater than or equal to 0.35.5. Fresh...

Use After Free

Overview org.webjars.npm:sharp is a High performance Node.js image processing, the fastest module to resize JPEG, PNG, WebP, GIF, AVIF and TIFF images Affected versions of this package are vulnerable to Use After Free via a memory-related vulnerability in the bundled librsvg dependency. An attack...

CVE-2026-114112

Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achieve possible remote code execution on glibc-based Linux by supplying crafted images. Attackers can submit malicious AVIF/HEIF input to applications processing untrusted images with sharp, triggering libheif...

EUVD-2026-106915

Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achieve possible remote code execution on glibc-based Linux by supplying crafted images. Attackers can submit malicious AVIF/HEIF input to applications processing untrusted images with sharp, triggering libheif...

CVE-2026-114112 Sharp before 0.35.4 RCE via bundled libheif AVIF decoding

Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achieve possible remote code execution on glibc-based Linux by supplying crafted images. Attackers can submit malicious AVIF/HEIF input to applications processing untrusted images with sharp, triggering libheif...

CVE-2026-114112

Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achieve possible remote code execution on glibc-based Linux by supplying crafted images. Attackers can submit malicious AVIF/HEIF input to applications processing untrusted images with sharp, triggering libheif...

CVE-2026-114112 Sharp before 0.35.4 RCE via bundled libheif AVIF decoding

Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achieve possible remote code execution on glibc-based Linux by supplying crafted images. Attackers can submit malicious AVIF/HEIF input to applications processing untrusted images with sharp, triggering libheif...

CVE-2026-114112

The Sharp image processing library (versions prior to 0.35.4 ) is vulnerable to Remote Code Execution (RCE) on glibc-based Linux systems. The root cause is a heap-based buffer overflow (CWE-122) within a bundled libheif dependency. Attackers can exploit this by providing crafted AVIF or HEIF imag...

CVE-2026-114111 Sharp before 0.35.5 RCE via librsvg Dependency Memory Vulnerability

sharp before 0.35.5 bundles a librsvg dependency affected by a memory-related vulnerability CVE-2026-96889 that, under certain runtime-specific conditions, can lead to code execution on glibc-based Linux. An attacker can supply a crafted SVG image that, when decoded by sharp through librsvg, may...

CVE-2026-114111 Sharp before 0.35.5 RCE via librsvg Dependency Memory Vulnerability

sharp before 0.35.5 bundles a librsvg dependency affected by a memory-related vulnerability CVE-2026-96889 that, under certain runtime-specific conditions, can lead to code execution on glibc-based Linux. An attacker can supply a crafted SVG image that, when decoded by sharp through librsvg, may...

EUVD-2026-106914

sharp before 0.35.5 bundles a librsvg dependency affected by a memory-related vulnerability CVE-2026-96889 that, under certain runtime-specific conditions, can lead to code execution on glibc-based Linux. An attacker can supply a crafted SVG image that, when decoded by sharp through librsvg, may...

CVE-2026-114111 Sharp before 0.35.5 RCE via librsvg Dependency Memory Vulnerability

sharp before 0.35.5 bundles a librsvg dependency affected by a memory-related vulnerability CVE-2026-96889 that, under certain runtime-specific conditions, can lead to code execution on glibc-based Linux. An attacker can supply a crafted SVG image that, when decoded by sharp through librsvg, may...

CVE-2026-114111

The sharp image processing library, specifically versions before 0.35.5 , is vulnerable to a memory-related issue (CWE-416: Use After Free) stemming from its bundled librsvg dependency (CVE-2026-96889). Under specific runtime conditions on glibc-based Linux systems, an attacker can provide a craf...

PT-2026-120238

Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achieve possible remote code execution on glibc-based Linux by supplying crafted images. Attackers can submit malicious AVIF/HEIF input to applications processing untrusted images with sharp, triggering libheif...

PT-2026-120237

sharp before 0.35.5 bundles a librsvg dependency affected by a memory-related vulnerability CVE-2026-96889 that, under certain runtime-specific conditions, can lead to code execution on glibc-based Linux. An attacker can supply a crafted SVG image that, when decoded by sharp through librsvg, may...

CVE-2024-6387-how-to-fix

CVE-2024-6387-how-to-fix Vulnerability remediation and mitigationCVE-2024-6387 CVE-2024-6387: Critical RCE Vulnerability in OpenSSH 'regreSSHion' My LinkedIn article CVE Details Description Qualys Threat Research Unit TRU has detailed a severe security flaw named 'regreSSHion' that leaves million...

GHSA-WQ5F-XC86-PV6W sharp : Vulnerability in librsvg dependency CVE-2026-96889

Impact A memory-related vulnerability has been discovered and fixed in the upstream librsvg dependency. When certain runtime-specific conditions apply, this vulnerability can lead to possible remote code execution RCE on glibc-based Linux. Patches Using prebuilt binaries provided by sharp? Most...