406909 matches found
CVE-2022-50999
Removed by vendor...
CVE-2022-50999 Nokogiri before 1.13.5 Integer Overflow via libxml2
Nokogiri versions before 1.13.5 contain an integer overflow vulnerability in packaged libxml2 buffer handling functions that allows attackers to cause out-of-bounds memory writes. Attackers can exploit this by crafting multi-gigabyte XML files to trigger buffer overflows resulting in information...
CVE-2022-50999
...
EUVD-2022-56024
Nokogiri versions before 1.13.5 contain an integer overflow vulnerability in packaged libxml2 buffer handling functions that allows attackers to cause out-of-bounds memory writes. Attackers can exploit this by crafting multi-gigabyte XML files to trigger buffer overflows resulting in information...
CVE-2022-50999
CVE-2022-50999 has been rejected as a duplicate of CVE-2022-29824 . The underlying flaw is an integer overflow in the buffer handling functions (xmlBuf* in buf.c, xmlBuffer* in tree.c) of the packaged libxml2 shipped with Nokogiri (Ruby gem) versions before 1.13.5 . By submitting a crafted multi-...
EUVD-2021-34866
Nokogiri before 1.11.4 CRuby implementation only, when the packaged/vendored libxml2 is used bundles libxml2 2.9.10, which is affected by multiple vulnerabilities addressed in libxml2 2.9.12, including a memory leak in xmlSchemaValidateStream CVE-2019-20388, a global buffer over-read in...
EUVD-2022-56023
Nokogiri before 1.13.9 CRuby implementation using packaged libraries bundles libxml2 v2.9.14, which is affected by CVE-2022-40304 data corruption / double-free from an entity reference cycle when entity content is allocated from a dict and CVE-2022-40303 integer overflows when parsing with...
CVE-2022-50998
Removed by vendor...
CVE-2021-47996
Nokogiri before 1.11.4 (CRuby implementation using its packaged/vendored libxml2 2.9.10 ) is affected by multiple vulnerabilities in that bundled library, including a memory leak in xmlSchemaValidateStream, a global buffer over-read in xmlEncodeEntitiesInternal, a heap-based buffer overflow, and ...
CVE-2021-47996
...
CVE-2022-50998
CVE-2022-50998 affects Nokogiri before version 1.13.9 (CRuby implementation using packaged libraries), which bundles libxml2 v2.9.14 . The bundled library is vulnerable to data corruption/double-free from an entity reference cycle (CVE-2022-40304) and integer overflows when parsing with XML_PARSE...
CVE-2021-47996
Removed by vendor...
CVE-2022-50998 Nokogiri before 1.13.9 Multiple Vulnerabilities via libxml2
Nokogiri before 1.13.9 CRuby implementation using packaged libraries bundles libxml2 v2.9.14, which is affected by CVE-2022-40304 data corruption / double-free from an entity reference cycle when entity content is allocated from a dict and CVE-2022-40303 integer overflows when parsing with...
CVE-2026-59183
A flaw was found in OpenEXR. An integer overflow vulnerability exists when decoding a specially crafted deep tiled EXR image file. This overflow can lead to an invalid memory pointer, causing applications that process these files to crash. This issue results in a denial of service. Mitigation...
CVE-2026-79902
A flaw was found in the Seattle FilmWorks plugin in GIMP. When processing a specially crafted SFW image file, the plugin allocates a Variable-Length Array VLA on the stack without integer overflow checks, causing an unbounded stack allocation. This issue leads to an application crash, resulting i...
CVE-2026-64565
A flaw was found in the Linux kernel's ims-pcu component. A malicious USB device can send an oversized data packet, which is not properly handled. This can lead to a heap buffer overflow, allowing an attacker to manipulate internal pointers. Successful exploitation could result in a control flow...