CVE-2020-16588

The CVE-2020-16588 entry concerns a Null Pointer Deference in OpenEXR 2.3.0 (generatePreview in makePreview.cpp) that can lead to denial of service via a crafted EXR file. Connected sources show multiple distributions releasing fixes (e.g., Debian openexr updates addressing CVE-2020-16588; openSU...

CVE-2020-6467

CVE-2020-6467 is a use-after-free vulnerability in the WebRTC component of Chromium/Google Chrome prior to 83.0.4103.61. The advisory description from the initial document states a remote attacker could potentially exploit a heap corruption via a crafted HTML page. Connected sources corroborate a...

CVE-2021-32739

CVE-2021-32739 affects Icinga 2 from 2.4.0 through 2.12.4, enabling privilege escalation for authenticated API users. With a read-only user’s credentials, an attacker can view most attributes of config objects, including ApiListener.ticket_salt, which can be used to forge a ticket and impersonate...

CVE-2021-37992

CVE-2021-37992 affects the WebAudio component of Chromium/Google Chrome, with an out-of-bounds read that could enable a remote attacker to cause heap corruption via a crafted HTML page. Affected product: Chromium/Chrome prior to 95.0.4638.54. Mitigation: upgrade to Chromium 95.0.4638.54 or newer ...

CVE-2021-43301

CVE-2021-43301 is a stack buffer overflow in the PJSUA API (pjproject) when calling pjsua_playlist_create. An attacker-controlled file_names argument is copied to a fixed-size stack buffer without size validation, potentially allowing memory corruption. Connected documents indicate this affects t...

CVE-2022-2519

CVE-2022-2519 affects libtiff 4.4.0rc1, with the vulnerability in rotateImage() in tiffcrop.c:8839 causing double free or corruption and potentially crashing the process. Connected advisories confirm this is one of several libtiff issues (including CVE-2022-2520/2521) addressed by vendor updates....

CVE-2022-26495

The CVE-2022-26495 issue affects the NBD Tools’ server (nbd-server) in versions before 3.24, caused by an integer overflow in the name length handling that yields a heap-based buffer overflow. Specifically, a name length value of 0xffffffff can allocate a zero-sized buffer for the name, leading t...

CVE-2022-3621

CVE-2022-3621 : A vulnerability in the Linux kernel component nilfs2 affects the function nilfs_bmap_lookup_at_level in fs/nilfs2/inode.c. The issue enables a NULL pointer dereference, with the document noting that the flaw can be exploited remotely. The vulnerability is caused by manipulation of...

CVE-2024-5197

Summary: Multiple connected advisories confirm CVE-2024-5197 affects libvpx with integer overflows in vpx_img_alloc() and vpx_img_wrap(), leading to overflowed buffer calculations and potentially invalid fields in vpx_image_t for versions prior to 1.14.1. The issue is described across Amazon Linu...

CVE-2009-4484

The CVE-2009-4484 issue affects yaSSL’s CertDecoder::GetName in taocrypt/src/asn.cpp (yaSSL before 1.9.9), which MySQL bundles and uses for SSL handshakes. A crafted X.509 client certificate name can trigger multiple stack-based buffer overflows, enabling remote code execution or memory corruptio...

CVE-2010-2249

CVE-2010-2249 affects libpng: memory leak in pngrutil.c when processing certain PNG chunks (notably sCAL). Versions affected are libpng before 1.2.44 and 1.4.x before 1.4.3; exploitation can cause a denial of service via memory consumption and application crash. Remediation per connected sources ...

CVE-2012-4186

CVE-2012-4186 : Heap-based buffer overflow in Mozilla Firefox’s nsWaveReader::DecodeAudioData. Affected products include Firefox before 16.0 (and Firefox ESR 10.x before 10.0.8), Thunderbird before 16.0, and SeaMonkey before 2.13. Vectors are unspecified in the provided docs, but exploitation wou...

CVE-2014-0138

Technical details about CVE-2014-0138 are not provided in the supplied documents. The connected sources discuss related CVEs and curl issues, but do not specify affected products, versions, root cause, impact, or fixes for this CVE.

CVE-2014-0412

The connected documents confirm CVE-2014-0412 affects the MySQL Server component of Oracle MySQL, specifically versions 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier. The root cause is described as an unspecified vulnerability related to InnoDB, allowing remote authenticated user...

CVE-2015-2724

CVE-2015-2724 involves memory safety bugs in the Mozilla Firefox browser engine (affecting Firefox up to version 39.0, ESR lines older than 31.8/38.1, and Thunderbird before 38.1). The issues allow remote attackers to cause a denial of service via memory corruption or potentially execute arbitrar...

CVE-2015-2738

CVE-2015-2738 affects Mozilla Firefox (before 39.0; ESR 31.x before 31.8 and 38.x before 38.1) and Thunderbird (before 38.1). The issue is a read from uninitialized memory in YCbCrImageDataDeserializer::ToDataSourceSurface, with unspecified impact and attack vectors. No remediation details are pr...

CVE-2015-7504

CVE-2015-7504 is a heap-based buffer overflow in the PC-Net II ethernet controller (hw/net/pcnet.c) of QEMU, exposed via guest-controlled packet reception. The flaw in pcnet_receive can lead to denial of service (instance crash) or possibly arbitrary code execution when handling a sequence of pac...

CVE-2017-13090

The connected documents confirm CVE-2017-13090 affects wget prior to 1.19.2, due to chunked HTTP processing in retr.c:fd_read_body(). The chunk parser uses strtol() to read chunk lengths but does not validate non-negativity; then reads chunks with MIN(..) and passes a negative length to fd_read()...

CVE-2017-18189

SoX CVE-2017-18189 is a NULL pointer dereference in the startread function (xa.c) that occurs when a crafted header specifies zero channels. The issue can cause an infinite loop and a subsequent crash/denial of service. Affected product: SoX up to version 14.4.2. The vulnerability is exploitable ...

CVE-2018-14652

CVE-2018-14652 affects GlusterFS up to 3.12 and 4.1.4. A buffer overflow can occur in the features/index translator via GF_XATTR_CLRLK_CMD in pl_getxattr, allowing a remote authenticated attacker to cause a denial of service on a mounted volume. The provided documents do not include specifics on ...

CVE-2018-16872

CVE-2018-16872 describes a TOCTTOU vulnerability in QEMU’s Media Transfer Protocol (MTP) handling. The code paths usb_mtp_get_object, usb_mtp_get_partial_object and usb_mtp_object_readdir don’t account for filesystem changes since the time of lstat(2) in usb_mtp_object_alloc, allowing an attacker...

CVE-2018-18606

CVE-2018-18606 affects GNU Binutils (libbfd). The issue is a NULL pointer dereference in _bfd_add_merge_section during merging of sections with large alignments, enabling DoS via crafted ELF. Multiple vendors document this under Binutils remediation; confirmed fixes involve upgrading Binutils to ...

CVE-2018-5131

CVE-2018-5131 affects Mozilla Firefox (ESR < 52.7 and Firefox

CVE-2018-5735

CVE-2017-3137 describes a denial-of-service in BIND caused by processing CNAME/DNAME responses in an unusual order, which can make named exit with an assertion failure. The CVE is evidenced by multiple advisories and vendor backports/disclosures (Arch Linux ASA-201704-11, CentOS/CESA entries 1095...

CVE-2018-8797

CVE-2018-8797 : In rdesktop, a heap-based buffer overflow in function process_plane() (vulnerable in versions up to 1.8.3) can cause memory corruption and probably remote code execution. Public-fix track shows upstream fix in 1.8.4; several distributions (e.g., Debian, Arch Linux, Fedora) release...

CVE-2019-14777

The CVE-2019-14777 entry affects VideoLAN VLC media player (3.0.7.1) with a use-after-free in the MKV demuxer (demux/mkv/mkv.cpp). Public documentation in connected sources confirms this vulnerability in VLC’s MKV demuxer and notes downstream advisories recommending upgrade; no exploit details ar...

CVE-2019-19617

CVE-2019-19617 affects phpMyAdmin prior to 4.9.2. The issue is that phpMyAdmin does not escape certain Git information in GitRevision.php and Footer.php, per multiple advisories. Connected documents confirm affected product/version ranges and link to fix/release notes. The Debian entry notes the ...

CVE-2019-19728

CVE-2019-19728 affects Slurm (SchedMD Slurm, slurm-llnl) where versions before 18.08.9 and 19.x before 19.05.5 allow a user’s srun --uid to execute with incorrect privileges, enabling privilege escalation. The vulnerability stems from improper privilege handling in srun when using the --uid optio...

CVE-2020-11740

CVE-2020-11740 affects the Xen hypervisor (Xen through 4.13.x) with xenoprof profiling. The vulnerability lets guest OS users obtain sensitive information about other guests by requesting to map xenoprof buffers when profiling is not enabled, and those buffers are not scrubbed. Noted in multiple ...

CVE-2020-14332

The CVE-2020-14332 issue affects the Ansible Engine (module_args) where tasks run in check mode may reveal sensitive data from event data, impacting confidentiality. Exploitation details are not provided in the documents. Remediation guidance across connected sources indicates applying vendor sec...

CVE-2020-22025

CVE-2020-22025 is a heap-based buffer overflow in FFmpeg’s gaussian_blur implementation (libavfilter/vf_edgedetect.c) that can lead to memory corruption. Public advisories describe FFmpeg components affected (e.g., libavfilter, libavcodec) and advise upgrading FFmpeg to fixed versions. Debian DSA...

CVE-2020-22044

Summary: CVE-2020-22044 is a Denial of Service vulnerability in FFmpeg 4.2 due to a memory leak in url_open_dyn_buf_internal() of libavformat/aviobuf.c. The issue is confirmed in multiple advisories referencing FFmpeg 4.2, with DoS via memory exhaustion potentially affecting affected builds. The ...

CVE-2020-6460

CVE-2020-6460 concerns insufficient data validation in URL formatting in Chromium/Google Chrome prior to 81.0.4044.122, enabling domain spoofing via crafted domain names. Connected advisories show downstream fixes and versions: Debian/DSA-4714-1 notes Chromium updates around 83.0.4103.116 for sta...

CVE-2021-44730

CVE-2021-44730 affects snapd: 2.54.2 did not validate the location of the snap-confine binary, enabling a local attacker to hardlink it elsewhere and cause snap-confine to execute arbitrary binaries, achieving privilege escalation. Affected systems may gain root/privilege escalation locally. Reme...

CVE-2022-1720

CVE-2022-1720: Buffer over-read in vim/vim, specifically in grab_file_name, affects Vim prior to 8.2.4956. The Astra Linux bulletin and other connected sources confirm the same vulnerability description, noting it can crash Vim, modify memory, and potentially enable remote code execution. The pub...

CVE-2022-3352

CVE-2022-3352 is a Use After Free in vim/vim prior to 9.0.0614. Exploitation could crash or, in some cases, lead to code execution. Root cause noted as memory handling issue when freeing/using buffers; patch fixes by upgrading to vim 9.0.0614 or newer. Affected products include Vim across multipl...

CVE-2022-38398

CVE-2022-38398 is a Server-Side Request Forgery (SSRF) in Apache Batik (SVG toolkit) affecting Batik 1.14, loadable via jar protocol. The vulnerability enables loading arbitrary URLs by crafting a request that bypasses normalization in Batik components. Public records show multiple vendors refere...

CVE-2023-1812

Summary: CVE-2023-1812 affects Google Chrome/Chromium. Vulnerability: Out-of-bounds memory access in DOM Bindings, exploitable via a crafted HTML page, enabling remote attacker impact as described in Chrome/Chromium advisories. Affected versions: prior to 112.0.5615.49. Remediation: upgrade to 11...

CVE-2023-2134

CVE-2023-2134 affects Google Chrome/Chromium prior to 112.0.5615.137, due to an out-of-bounds memory access in the Service Worker API that could allow a remote attacker to trigger heap corruption via a crafted HTML page. The vulnerability is rated High severity with network attack vector and user...

CVE-2023-2464

CVE-2023-2464 affects Google Chrome (Chromium-based) via an inappropriate implementation in PictureInPicture. A crafted HTML page and a malicious extension can lead to an origin spoof in the Chrome security UI. The vulnerability is tied to Chrome/Chromium builds prior to 113.0.5672.63 (the fixed ...

CVE-2023-3338

CVE-2023-3338: A null pointer dereference in the Linux kernel DECnet protocol could allow remote crash of the system. Connected advisories confirm this affects Linux kernel DECnet with mitigation via status updates and removal of the DECnet protocol in the kernel; Debian/IBM entries note remediat...

CVE-2023-37202

CVE-2023-37202 affects Firefox (including ESR) and Thunderbird. The issue is caused by cross-compartment wrappers wrapping a scripted proxy, which could store objects from other compartments in the main compartment, resulting in a use-after-free. Affected versions are Firefox <115, Firefox ESR...

CVE-2023-4875

CVE-2023-4875 affects mutt; affected versions are those

CVE-2023-50762

CVE-2023-50762 affects Thunderbird≤115.5 (specifically Thunderbird

CVE-2023-52927

CVE-2023-52927 affects the Linux kernel netfilter feature: nf_conntrack_in() calling nf_ct_find_expectation() currently removes the exp from the hash table, which could occur before the created connection is confirmed. The patch introduces a mechanism to keep the exp when the tmpl’s status has IP...

CVE-2023-6207

CVE-2023-6207: Ownership mismanagement leads to a use-after-free in ReadableByteStreams. Affected products include Firefox < 120 and Thunderbird

CVE-2023-6212

CVE-2023-6212 parks memory safety bugs in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4, with evidence of memory corruption and potential to exploit for arbitrary code. The issue affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird

CVE-2024-0751

CVE-2024-0751 : A malicious devtools extension could have been used to escalate privileges. Affected: Firefox < 122, Firefox ESR < 115.7, Thunderbird

CVE-2024-30204

In Emacs versions prior to 29.3 , LaTeX preview is enabled by default for e-mail attachments. This configuration flaw allows for potential security risks when handling untrusted content. The vulnerability is mitigated by ensuring that LaTeX preview is disabled for e-mail attachments when untruste...

CVE-2024-36017

The CVE-2024-36017 entry is valid and has concrete details in connected sources. The vulnerability is in the Linux kernel rtnetlink path: nested IFLA_VF_VLAN_LIST attributes are assumed to be struct ifla_vf_vlan_info (size 14 bytes). Validation used NLA_HDRLEN (4 bytes), enabling a too-small attr...