23144 matches found
The png_convert_to_rfc1123 function in png.c allows remote attackers to obtain sensitive process memory information
...
CVE-2011-2691
...
CVE-2012-3425
...
CVE-2011-3045
...
CVE-2011-2501
...
Microsoft Power Automate Desktop Information Disclosure Vulnerability
Uncontrolled search path element in Power Automate allows an authorized attacker to disclose information over a network...
Qemu: lsi53c895a: dma reentrancy issue leads to stack overflow
...
The GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a denial of service
...
An Improper Link Resolution Before File Access ("Link Following") and Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal"). This vulnerability occurs when extracting a maliciously crafted tar file, which can result in unauthorized file writes or overwrites outside the intended extraction directory. The issue is associated with index.js in the tar-fs package. This issue affects tar-fs: from 0.0.0 before 1.16.4, from 2.0.0 before 2.1.2, from 3.0.0 before 3.0.8.
...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
XZ has a heap-use-after-free bug in threaded .xz decoder
...
Mishandling of comma during folding and unicode-encoding of email headers
...
Libtiff: heap-based buffer overflow in cpstriptotile() in tools/tiffcp.c
...
hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail.
...
The vulnerability in unzip occurs due to improper handling of Unicode strings
...
team: better TEAM_OPTION_TYPE_STRING validation
...
io_uring: prevent opcode speculation
...
USB: hub: Ignore non-compliant devices with too many configs or interfaces
...
GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function find_abstract_instance in dwarf2.c.
...
tcp: drop secpath at the same time as we currently drop dst
...
bpf: Fix deadlock when freeing cgroup storage
...
ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data()
...
ASoC: codecs: wcd938x: fix incorrect used of portid
...
af_unix: Update unix_sk(sk)->oob_skb under sk_receive_queue lock.
...
uio_hv_generic: Don't free decrypted memory
...
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.
...
vsock: Keep the binding until socket destruction
...
ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt
...
drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
...
can: ctucanfd: handle skb allocation failure
...
can: etas_es58x: fix potential NULL pointer dereference on udev->serial
...
gpiolib: Fix crash on error in gpiochip_get_ngpios()
...
media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread
...
HID: hid-thrustmaster: fix stack-out-of-bounds read in usb_check_int_endpoints()
...
spi: sn-f-ospi: Fix division by zero
...
vxlan: check vxlan_vnigroup_init() return value
...
orangefs: fix a oob in orangefs_debug_write
...
libarchive bsdunzip.c list null pointer dereference
...
nfsd: clear acl_access/acl_default after releasing them
...
vrf: use RCU protection in l3mdev_l3_out()
...
KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
...
media: uvcvideo: Remove dangling pointers
...
LoongArch: csum: Fix OoB access in IP checksum code for negative lengths
...
arp: use RCU protection in arp_xmit()
...
HID: multitouch: Add NULL check in mt_input_configured
...
arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
...
ndisc: use RCU protection in ndisc_alloc_skb()
...
neighbour: use RCU protection in __neigh_notify()
...